Privacy policy
Last updated: June 2026
1. Introduction & Our Commitment
Thorveld ("we", "our", or "us") is committed to protecting your privacy and handling your personal information responsibly. As the data controller under the General Data Protection Regulation (EU) 2016/679 ("GDPR"), we process personal data in accordance with applicable data protection laws.
We never sell, rent, or trade personal data to third parties.
By using our website, placing an order, or otherwise interacting with our services, you acknowledge the practices described in this Privacy Policy.
2. Information We Collect
We may collect personal information that you voluntarily provide when placing an order, creating an account, subscribing to communications, or contacting customer support. This information may include your name, email address, billing address, shipping address, telephone number, and payment-related information.
We also automatically collect certain technical information when you visit our website. This may include your IP address, browser type, device information, operating system, referring website, pages viewed, time spent on pages, and other usage data collected through cookies and similar technologies.
3. How We Use Your Information
We process personal information to fulfil orders, process payments, provide customer support, arrange deliveries, communicate regarding purchases, and send important service-related notifications. These activities are performed on the basis of contractual necessity.
Where you provide consent, we may use your information to send promotional emails, special offers, product updates, and marketing communications. You may withdraw your consent at any time.
We may also use aggregated or anonymised information for business analysis, website improvement, operational planning, and performance measurement.
4. Cookies & Tracking Technologies
Our website uses cookies and similar technologies to improve functionality, enhance security, analyse website performance, and support advertising activities.
Strictly necessary cookies are required for the website to function properly and cannot be disabled.
We may also use analytical and advertising technologies provided by Meta, Google Ads, and TikTok to better understand customer interactions and improve marketing effectiveness.
When you first visit our website, you will be presented with a cookie consent tool that allows you to manage your cookie preferences in accordance with applicable law.
5. Order Fulfilment & Third-Party Services
Our store is powered by Shopify, which provides the ecommerce infrastructure, website hosting, checkout functionality, and related services necessary to operate our business. Shopify acts as a data processor on our behalf.
Payments are securely processed through Shop Pay, Visa, Mastercard, American Express, Diners Club, Discover, Apple Pay, Google Pay, and PayPal Wallet. We do not store complete payment card information on our own systems.
To fulfil customer orders efficiently, products may be shipped from operational fulfilment centres located in the United States, China, and Germany, depending on stock availability, delivery destination, and routing efficiency. Regardless of fulfilment location, all products undergo the same strict quality control procedures and are dispatched through the most suitable logistics network to support reliable delivery times and service quality.
Shipping carriers receive only the information necessary to complete delivery, such as the recipient's name, address, and contact details.
We may also use Meta, Google Ads, and TikTok technologies, including cookies and pixels, to measure advertising performance and improve customer experiences.
6. Data Retention
We retain personal information only for as long as reasonably necessary to fulfil the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce agreements.
Order records and related transaction information may be retained for periods required by applicable tax, accounting, and commercial regulations.
Where a valid deletion request is received, personal information will be deleted or anonymised within the timeframes required by applicable law, unless retention is required for legal or regulatory reasons.
7. Your Rights Under GDPR
Subject to applicable law, you may have the right to access your personal data, request correction of inaccurate information, request deletion of personal data, restrict processing, object to certain processing activities, request data portability, and withdraw consent where processing is based on consent.
You also have the right to lodge a complaint with a competent supervisory authority.
We acknowledge data protection requests within 48 hours and aim to provide a complete response within 30 days.
8. International Data Transfers
Some of our service providers, partners, and operational systems may be located outside your country of residence.
Where personal data is transferred internationally, we implement appropriate safeguards, including Standard Contractual Clauses, adequacy decisions, or other lawful transfer mechanisms recognised under GDPR.
Such safeguards are designed to ensure that personal information receives an equivalent level of protection regardless of where it is processed.
9. Data Security
We maintain reasonable technical and organisational measures to protect personal information against unauthorised access, disclosure, alteration, misuse, or destruction.
Our website uses SSL/TLS encryption to secure communications and transactions. We also rely on Shopify's security infrastructure and industry-standard security practices to help protect customer information.
Should a data breach occur, we will respond promptly and fulfil all applicable legal notification obligations.
10. Children's Privacy
Our website and services are not directed to children under the age of 16.
We do not knowingly collect personal information from children under this age threshold. If you believe that a minor has provided personal information to us, please contact us immediately so that appropriate action can be taken, including deletion where required.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect legal, operational, or technological changes.
Any modifications will be published on this page with an updated revision date. Continued use of our website after changes become effective constitutes acceptance of the updated Privacy Policy.
12. Contact Us & Supervisory Authority
If you have any questions regarding this Privacy Policy, your personal information, or your privacy rights, please contact us at:
Email: kontakt@thorveld.de
You also have the right to lodge a complaint with the competent supervisory authority of your EU Member State. For Germany, information can be found through the Federal Commissioner for Data Protection and Freedom of Information (BfDI):
Website: https://www.bfdi.bund.de
Customer service responds within 24 hours on business days.