Privacy policy
Privacy Policy
1. Who is responsible
Matija Mackovic, Buddy Outfitters, Kunreuthstr. 33, 81249 München, Germany, hello@buddyoutfitters.com.
2. What we collect and why
| Data | Why | Legal basis (GDPR) |
|---|---|---|
| Name, address, email, phone, order details | To make and deliver your order | Contract (Art. 6(1)(b)) |
| Payment data | Handled by the payment provider; we don't see card numbers | Contract |
| Email address for newsletter | Only if you sign up | Consent (Art. 6(1)(a)) |
| Cookies and website usage | Shop function; analytics and ads only with your consent | Consent / legitimate interest |
3. Who we share data with
- Shopify (shop and checkout)
- Printify and its print partners (to print and ship your order)
- Shipping carriers (delivery)
- Payment providers (e.g. Shopify Payments, PayPal)
- Klaviyo (emails, only with consent)
- Meta (ads measurement via the pixel, only with consent)
Some of these are in the US or other countries outside your own. We use the EU Standard Contractual Clauses or other lawful safeguards for these transfers.
4. Marketing emails
We only send marketing emails if you opt in. Every email has an unsubscribe link, and we process unsubscribes within 10 business days at the latest.
5. How long we keep data
Order data for as long as German tax law requires (up to 10 years). Newsletter data until you unsubscribe.
6. Your rights
You can ask to see, correct, delete or export your data, object to its use, or withdraw consent at any time. Email hello@buddyoutfitters.com. You can also complain to a data protection authority: in Germany the Bavarian authority (BayLDA), or the privacy regulator in your country (the Office of the Privacy Commissioner of Canada, the OAIC in Australia, or the Privacy Commissioner in New Zealand).
7. US residents
We do not sell your personal information or share it for cross-context behavioral advertising except through the ad tools named above, which you can refuse in the cookie banner.
8. Security
The shop uses encrypted connections (HTTPS). Payment data is handled by certified providers.
Last updated: October 14, 2026