Privacy policy
Privacy Policy for UrbanTrendz
1. Controller Information
The responsible party (data controller) for your personal data under the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG) is:
UrbanTrendz
Lamin Njie
Wacholderweg 3
77656 Offenburg
Germany
Email: info@urbantrendz.vip (For data protection inquiries)
Phone: +49 163 0381327
Business Registration (Gewerbeanmeldung): 14/350/24022
VAT ID (USt-IdNr): DE461035111
2. What Data We Collect & Why (Legal Basis & Retention)
We collect, process, and store your personal data only for specific purposes. Below is the detailed breakdown required by Art. 13 GDPR.
Category Specific Data Legal Basis (Art. 6 GDPR) Retention Period
Master Data Name, billing/shipping address, email, phone Contract performance (Art. 6(1)(b)) Until account deletion, then 30 days grace period
Payment Data Bank details, credit card info (processed by Shopify Payments) Contract performance (Art. 6(1)(b)) Deleted immediately after payment settled, except for legal retention
Order Data Purchased items, price, date, invoice Legal obligation (Art. 6(1)(c)) 10 years (German Commercial Code § 257 HGB & Fiscal Code § 147 AO)
Account Login Username, password (hashed), login history Contract performance & legitimate interest (security) Until account deletion. Login IPs deleted after 7 days
Communication Customer support emails, chat history Legitimate interest (Art. 6(1)(f)) – to respond to you 2 years after final resolution
Cookies (Essential) Session ID, basket content, CSRF token Legitimate interest (Art. 6(1)(f)) or legal obligation Session end or up to 30 days
Cookies (Marketing/Analytics) Tracking pixels (Meta, Google, TikTok), behavior Consent (Art. 6(1)(a)) via cookie banner As set by the cookie provider (max 2 years)
Fraud Prevention IP address, device fingerprint Legitimate interest (Art. 6(1)(f)) – to prevent loss 30 days after transaction completion
3. Data Transfers to the US (Shopify & Partners)
Our store is hosted on Shopify Inc. (3rd Floor, 1315-1055 West Georgia St., Vancouver, BC, Canada).
As Shopify operates globally, your data may be transferred to servers in the United States.
Legal Mechanism: We have concluded Standard Contractual Clauses (SCCs) with Shopify. We have performed a Transfer Impact Assessment (TIA).
User Risk Notice: The European Court of Justice (Schrems II) has noted that US intelligence laws (FISA 702) may offer limited judicial redress for EU citizens. By consenting to marketing cookies or placing an order, you acknowledge this residual legal risk. We have instructed Shopify to use EU-based servers where possible.
4. Data Sharing with Fulfillment Partners (CJ Dropshipping, Printify & DSers/AliExpress)
To process and deliver your orders, we share your personal data with our fulfillment partners.
What data is shared:
· Full name
· Shipping address
· Email address
· Phone number
· Order details (products purchased, quantity, size, color)
Why this is necessary: To pack and ship your order from our fulfillment centers in China to your delivery address.
Legal basis: Contract performance (Art. 6(1)(b) GDPR) – the data sharing is necessary to deliver the products you purchased.
Data transfer location: China
Legal mechanism for data transfer: We rely on the necessity for contract performance (Art. 49(1)(b) GDPR) as an exception to the general prohibition on transfers to third countries.
Our fulfillment partners:
· CJ Dropshipping (cjdropshipping.com)
· DSers (dsers.com) integrated with AliExpress suppliers.
.Printify
Retention period: Fulfillment partners retain order data only as long as necessary to process shipment, handle returns, and comply with local business laws (typically 30-90 days after delivery).
Customer notice: Your data will be transferred to China for order fulfillment. While we have assessed our partners' data protection commitments, please be aware that China does not have an adequacy decision from the European Commission, meaning the level of data protection may not be equivalent to EU standards.
5. Your Rights (DSGVO Rights for EU/Germany)
You have the following rights free of charge. To exercise them, email info@urbantrendz.vip.
Right Description
Right to Access (Art. 15) Receive a copy of your data
Right to Rectification (Art. 16) Correct inaccurate data
Right to Erasure (Art. 17) Delete your data (unless we need it for tax retention)
Right to Restrict Processing (Art. 18) Block processing while we verify accuracy
Right to Data Portability (Art. 20) Receive your data in a machine-readable format (CSV/JSON)
Right to Object (Art. 21) Stop direct marketing or processing based on "Legitimate Interest"
Right to Withdraw Consent (Art. 7) Withdraw marketing cookie consent anytime (via cookie banner or email)
Complaints: You have the right to lodge a complaint with the State Commissioner for Data Protection of Baden-Württemberg (as our office is in Offenburg) or your local EU supervisory authority.
6. Cookies & Similar Technologies (TTDSG Compliance - Germany)
German law (Telekommunikation-Telemedien-Datenschutzgesetz - TTDSG) requires explicit opt-in consent to store or access information on your device unless it is strictly necessary.
We distinguish strictly between:
· Strictly Necessary Cookies: These work automatically (e.g., basket, checkout). No consent required, but we must inform you.
· Functionality, Analytics, and Advertising Cookies: These require your active consent via our cookie banner.
How to manage: You can adjust your cookie settings at any time via the "Cookie Settings" link in our footer. You may also manage third-party cookies via your browser settings, but this will break the checkout function.
Third-Party Services on our Website (requiring consent):
· Google Analytics: Usage analysis (anonymized IP)
· Meta Pixel (Facebook/Instagram): Conversion tracking and retargeting
· TikTok: Conversion tracking and retargeting (see detailed section below)
7. TikTok Advertising & Customer Data Sharing
We use TikTok Business Tools in their "Maximum" data-sharing configuration. This combines TikTok Pixel, Events API, Advanced Matching, Shopify APIs, and In-App Checkout to optimize ads performance, measure conversions, and reach customers who may be interested in our products.
7.1 What Data Is Shared with TikTok
When you interact with our website or make a purchase, and after you have given your consent via our cookie banner, the following categories of customer information may be shared with TikTok:
Category Specific Data Points
Device & browser information IP address, user agent, browser type, operating system, device model, screen resolution, language settings, time zone
Usage & interaction data Pages viewed, items added to cart, checkout behavior, purchases completed, button clicks, scroll depth, time spent on site
Event data "Add to cart," "Initiate checkout," "Add payment info," "Complete purchase," "View content," "Search," "Complete registration"
Customer-identifying information (Advanced Matching) Email address (hashed), phone number (hashed), name (hashed), city, state, postal code, country, date of birth (if provided)
Order information Order value, currency, product IDs, product names, product categories, quantity, transaction ID
In-App Checkout data If you complete a purchase within the TikTok app via our shop, TikTok receives transaction confirmation data to complete the order and measure conversion
7.2 Legal Basis (EU/Germany)
We only share data with TikTok for advertising and analytics purposes if you have given us your explicit consent (Art. 6(1)(a) GDPR) via our cookie banner. Essential security and fraud-prevention data sharing (if any) occurs under our legitimate interest (Art. 6(1)(f) GDPR).
You have the right to withdraw your consent at any time (see Section 5 "Your Rights").
7.3 Storage and Access on Your Device (TTDSG Compliance – Germany)
The TikTok Pixel and related scripts store and access information (cookies and similar technologies) on your device. German law (TTDSG § 25) requires your active opt-in consent before we can load these scripts. Our cookie banner will not load TikTok Pixel until you click "Accept" for marketing cookies.
7.4 Data Transfer to Non-EU Countries (including the US)
TikTok is operated by TikTok Technology Limited (Ireland) and TikTok Information Technologies UK Limited (UK) for European users. However, TikTok may transfer your data to servers in the United States, Singapore, and other countries where TikTok or its service providers operate.
We rely on Standard Contractual Clauses (SCCs) approved by the European Commission as the appropriate transfer mechanism. TikTok has also published its GDPR compliance commitments, including its Data Processing Addendum (DPA).
You can review TikTok's privacy policy here: https://www.tiktok.com/legal/privacy-policy
7.5 How TikTok Uses Your Data
For the data received via TikTok Business Tools (Pixel, Events API, Advanced Matching, etc.), TikTok acts as an independent data controller (or joint controller with us in some circumstances). TikTok uses this data to:
· Personalize ads you see on TikTok and other platforms
· Measure and report on ad performance (e.g., how many purchases resulted from a specific ad)
· Build lookalike audiences for future advertising
· Improve its advertising systems
· Combine with data from other merchants to optimize ad targeting
For more information on how TikTok processes your personal data, please review TikTok's Privacy Policy (linked above).
7.6 Your Choices (TikTok-Specific)
You can withdraw your consent for TikTok data sharing at any time by:
· Adjusting your cookie preferences via the "Cookie Settings" link in our website footer
· Disabling "Personalized Ads" in your TikTok app settings (go to TikTok → Profile → Menu → Privacy → Personalized Ads → Off)
· Contacting us at info@urbantrendz.vip
7.7 TikTok's Data Retention
TikTok retains event data for up to 28 days (for conversion measurement) or longer where aggregated and anonymized. TikTok's retention periods are described in their Privacy Policy.
8. Google Merchant Center & Shopping Ads
We use Google Merchant Center and Google Shopping (via Simprosys) to list our products on Google and measure advertising performance.
8.1 What Data Is Shared with Google
· Product information (titles, descriptions, prices, images, availability)
· Order confirmation data (for conversion tracking)
· Website interaction data (via Google tags, if you have consented to marketing cookies)
8.2 Legal Basis
We share data with Google for advertising and analytics purposes only with your explicit consent (Art. 6(1)(a) GDPR) via our cookie banner.
8.3 Data Transfer
Google processes data in accordance with its privacy policy and may transfer data to the United States under Standard Contractual Clauses (SCCs).
Google's privacy policy: https://policies.google.com/privacy
Google's data processing terms: https://business.safety.google/gdpr/
9. No Automated Decision Making (Art. 22 GDPR)
We do not use automated decision-making or profiling that produces legal effects concerning you (e.g., automated credit checks). All customer service inquiries are reviewed by a human.
10. Data Security (Art. 32 GDPR)
We implement technical and organizational measures (TOMs) including:
· SSL/TLS encryption (HTTPS)
· PCI DSS compliant payment processing (via Shopify)
· Regular data backups and access controls
Note: While we use secure channels, 100% security over the internet is impossible. Never share your password or payment CVV via unsecured email.
11. Children's Data
Our services are not directed to persons under the age of 16. We do not knowingly collect data from minors. If we become aware of such data, we will delete it immediately.
12. Changes to this Policy
We may update this policy to reflect legal or operational changes. The "Last Updated" date will change accordingly. For significant changes (e.g., new data recipients), we will notify you via email or a banner on our website.
13. Appendix: Shopify Privacy Supplement
Because UrbanTrendz uses Shopify, Shopify processes your data as a "Processor" under Art. 28 GDPR. You can view Shopify's own GDPR commitment here: https://www.shopify.com/legal/dpa
14. Contact Information for Data Protection Inquiries
For any questions about this Privacy Policy or to exercise your data protection rights, please contact us at:
Email: info@urbantrendz.vip
Mail: UrbanTrendz, Wacholderweg 3, 77656 Offenburg, Germany
15. Privacy Policy – United States Customers
This section applies to customers residing in the United States.
Information We Collect
We collect the same information from US customers as from EU customers: name, email address, shipping address, billing address, phone number, payment information, and order details.
How We Use Your Information
We use your information to process orders, provide customer support, improve our website, and comply with legal obligations.
Sharing Your Information
We share your information with our fulfillment partners (CJ Dropshipping, Printify and DSers/AliExpress) in China to process and ship your order. We do not sell your personal information to third parties.
California Privacy Rights (CCPA)
If you are a California resident, you have the right to:
· Know what personal information we collect about you
· Request deletion of your personal information
· Opt out of the sale of your personal information (we do not sell your data)
· Not be discriminated against for exercising your privacy rights
To exercise these rights, contact us at info@urbantrendz.vip. We will respond within 45 days as required by California law.
Do Not Track Signals
Our website does not respond to "Do Not Track" signals from web browsers.
Nevada Residents
Nevada residents have the right to opt out of the sale of their personal information. We do not sell your personal information.
Children's Privacy (United States)
Our website is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.
Last updated: June 2026