Privacy policy
PRIVACY POLICY
1. WHO WE ARE
REDCHERRYBLVD operates the online store at https://redcherryblvd.com. The controller responsible for the processing described in this policy is:
RAB Jul GmbH
Rosenstrasse 2
10178 Berlin
Germany
Email: info@redcherryblvd.com
In this policy, “we”, “us” and “our” mean RAB Jul GmbH. This policy explains how we handle personal data when you visit our website, place an order, contact us or interact with our marketing. It also explains your choices and rights.
2. PERSONAL DATA WE COLLECT
Information you provide
Depending on how you interact with us, we collect your name, billing and delivery addresses, email address, telephone number, order details, and messages you send us. This includes information needed to handle deliveries, returns, refunds, warranty requests and other customer-service enquiries. We also process your newsletter preferences and cookie-consent choices.
Payment information
When you pay, the relevant payment service processes information needed to authorise and complete the transaction. We receive information such as payment status, transaction references and limited payment-method details. Full card credentials are handled through the relevant payment service, rather than being required in emails or customer-service messages to us.
Information collected through the website
Our store and its service providers process technical information such as your IP address, browser and device information, timestamps, referring pages and security logs. With your consent for optional analytics or advertising, we also collect information about pages and products viewed, clicks, cart activity, checkout activity, purchases and order values, and associated cookie or device identifiers.
Information from service providers
We receive information from Shopify, payment and delivery services, and, where consent has been given, analytics and advertising services. This may include transaction confirmations, delivery updates, fraud indicators and reports about website or advertising performance.
3. WHY WE USE YOUR DATA AND OUR LEGAL BASES
We do not rely on consent for every use of personal data. Our legal basis depends on the purpose:
• Orders and customer service: to process purchases, take payment, deliver orders and handle related enquiries, returns and refunds, we rely on contract performance or steps you request before entering a contract (Article 6(1)(b) GDPR).
• Legal requirements: to maintain required business records and meet applicable tax, accounting and other legal obligations, we rely on Article 6(1)(c) GDPR.
• Security and business administration: to protect our website, prevent fraud, resolve disputes and manage ordinary business operations, we rely on legitimate interests (Article 6(1)(f) GDPR), after considering the impact on your rights.
• Optional analytics, advertising and consent-based marketing: we rely on your consent (Article 6(1)(a) GDPR).
Information required for a purchase is necessary to process that purchase. If you do not provide it, we may be unable to accept or deliver your order. Optional marketing and analytics consent is not a condition of buying from us.
4. SHOPIFY
Our store is hosted on Shopify. Shopify processes data needed to provide the storefront, checkout, order-management infrastructure, hosting and related services.
Shopify processes personal data on our behalf for these services. For some activities and services described in its own privacy policy, Shopify may also act as an independent controller. The role depends on the service you use.
For details about Shopify’s processing, international operations and privacy choices, see:
https://www.shopify.com/legal/privacy
https://www.shopify.com/legal/privacy/consumers
https://privacy.shopify.com/en
5. PAYMENTS
Payment options include Visa card payments, PayPal, Apple Pay and Shop Pay, where available at checkout.
The payment option you choose determines which payment providers, card networks, banks or wallet services receive the information necessary to authorise payment, prevent fraud, process refunds and meet their legal obligations. Visa is a card network; Apple Pay and Shop Pay provide accelerated payment or checkout functionality. These services do not all perform the same role.
Relevant data may include contact and billing details, purchase amount, payment credentials or tokens, device information and transaction identifiers. Payment providers may process some information as independent controllers under their own privacy notices.
Provider information:
PayPal: https://www.paypal.com/webapps/mpp/ua/privacy-full
Apple: https://www.apple.com/legal/privacy/
Shopify / Shop Pay: https://www.shopify.com/legal/privacy
Visa: https://www.visa.com/privacy
6. COOKIES AND CONSENT CHOICES
We use cookies and similar technologies for essential store functions and, with your consent, optional analytics and advertising.
Essential technologies support functions such as the shopping cart, checkout, security and recording your privacy choices. Optional technologies help us understand website use and measure or personalise advertising. A preference-related technology is treated as essential only where it meets the applicable strict-necessity requirements.
We use TinyCookie to manage cookie choices. Non-essential analytics and advertising technologies are subject to prior consent. You can accept or reject optional categories and revisit your choices through the website’s cookie-preference control. Rejecting optional tracking does not prevent you from placing an order.
Where German law applies, storing or accessing information on your device requires consent under Section 25(1) TDDDG, unless an exception under Section 25(2) applies, including strict necessity for a service you expressly request. Subsequent processing of personal data also needs an appropriate GDPR basis.
Consent choices apply to both browser-based and server-side advertising processing. Server-side transmission does not remove the need to respect your consent choices.
You can also delete or block cookies through your browser. Blocking essential cookies may affect the cart or checkout. Deleting cookies may require you to choose your privacy preferences again.
7. GOOGLE ANALYTICS
With your consent, we use Google Analytics to understand how visitors use our website and to improve the shopping experience.
Google Analytics may process online identifiers, browser and device details, approximate location information and interactions such as page views, product views and purchase events. Reports help us understand traffic sources and website performance. Processing can involve Google Ireland Limited and other Google group companies, including Google LLC in the United States.
Google states that Google Analytics 4 does not log or store individual IP addresses. This does not mean that all analytics information is anonymous or that consent is unnecessary.
You can withdraw analytics consent through our cookie preferences. Google also provides information and a browser opt-out tool:
https://policies.google.com/privacy
https://support.google.com/analytics/answer/6004245
https://tools.google.com/dlpage/gaoptout
The browser opt-out tool is an additional option and does not replace our website’s consent controls.
8. META PIXEL, CONVERSIONS API AND PERSONALISED ADVERTISING
With your consent, we use Meta Pixel and Meta Conversions API to measure advertising performance and show relevant advertising on Facebook and Instagram, including retargeting people who have interacted with our store.
Meta Pixel sends information through the browser. Conversions API enables event information to be transmitted from our store’s systems or connected platform to Meta.
Depending on the interaction and integration settings, information shared can include:
• Pages and products viewed.
• Products added to the cart and checkout activity.
• Purchases, product identifiers, currency and order value.
• IP address, browser and device details, event timestamps and online identifiers.
• Email address or telephone number, where available and used for matching, transmitted in hashed form.
Hashing transforms contact details into a coded value for matching. Hashed information is not necessarily anonymous and can still be personal data.
Meta may associate these events with a Facebook or Instagram account and combine them with other information it holds. This enables cross-site advertising measurement, audience creation and personalised advertisements. You may therefore see REDCHERRYBLVD advertisements after visiting our store.
For people in the EEA, the relevant Meta provider is Meta Platforms Ireland Limited. Processing may also involve Meta Platforms, Inc. and other group entities outside the EEA.
To the extent covered by Meta’s Controller Addendum, we and Meta Ireland are joint controllers for the collection of event data and its transmission to Meta. Meta’s subsequent processing is governed by its own responsibilities and privacy information. You can contact us about your rights; Meta’s addendum explains the allocation of responsibilities for the covered processing.
Meta information and controls:
Privacy policy: https://www.facebook.com/privacy/policy/
Controller Addendum: https://www.facebook.com/legal/controller_addendum
Advertising preferences: https://www.facebook.com/adpreferences
You can withdraw consent to our Meta advertising processing through the website’s cookie preferences. Withdrawal applies to future consent-based processing and does not undo lawful processing that occurred before withdrawal.
9. EMAILS AND MARKETING
We use your email address to send necessary messages about your purchase, payment, delivery, return or customer-service enquiry. These service messages are separate from promotional marketing.
We send newsletters, offers and other promotional emails where you have consented, or where a specific legal exception permits marketing to existing customers and its conditions are met. Where we rely on an existing-customer exception, this is limited to our own similar products, with a clear opportunity to object when the address is collected and in each message.
An abandoned-cart or checkout reminder that promotes completing a purchase is treated as marketing and sent only where legally permitted. Merely entering an email address or starting checkout does not, by itself, amount to newsletter consent.
You can unsubscribe using the link in a promotional email or contact info@redcherryblvd.com. We may retain a minimal suppression record to ensure that your marketing objection continues to be respected. Unsubscribing does not prevent necessary order-related messages.
10. WHO RECEIVES PERSONAL DATA
We share data as necessary for the purposes described in this policy with:
• Shopify and providers supporting our website and store operations.
• Payment providers, banks and relevant payment networks.
• Delivery and logistics providers handling your shipment.
• Providers supporting customer communications and email delivery.
• Google and Meta for the consent-based activities described above.
• Professional advisers, such as accountants and legal advisers, where necessary.
• Public authorities or other recipients where disclosure is legally required or necessary for the establishment, exercise or defence of legal claims.
Access by our personnel is limited according to their responsibilities. Where providers process information on our behalf, appropriate contractual protections apply. Providers acting independently are responsible for their own processing.
11. INTERNATIONAL DATA TRANSFERS
Using international providers can involve processing outside the European Economic Area, including in the United States and Canada.
Where a transfer is not covered by an applicable adequacy decision, appropriate safeguards are required, such as European Commission Standard Contractual Clauses and supplementary measures where necessary. Reliance on the EU–US Data Privacy Framework is limited to a recipient whose certification is valid and covers the relevant processing.
You can contact info@redcherryblvd.com for information about the safeguards applicable to a particular transfer and how to obtain a copy, subject to necessary redactions.
12. HOW LONG WE KEEP DATA
Retention depends on the purpose, applicable legal obligations and whether information is needed to resolve a dispute:
• Order and accounting records are retained for the applicable statutory retention period for that record category.
• Customer-service correspondence is retained while needed to resolve the enquiry and address related claims or obligations.
• Marketing details are retained while the relevant permission or other lawful basis continues; minimal opt-out records may be kept to honour objections.
• Cookie-consent records are retained as needed to manage and demonstrate consent choices.
• Analytics and advertising information is subject to the configured retention settings and the relevant provider’s retention rules.
• Security records are retained for as long as reasonably necessary to investigate incidents and protect the service.
When information is no longer needed, it is deleted or anonymised, unless continued retention is required by law. Backup copies are removed through the applicable backup lifecycle and are restricted in the meantime.
13. YOUR RIGHTS
Subject to the applicable conditions, you may request access, correction, erasure, restriction and portability of your personal data. You may withdraw consent and object to processing based on legitimate interests. You have a right to object to direct marketing, including related profiling.
Contact info@redcherryblvd.com to exercise your rights. We may need proportionate information to verify your identity. We normally respond within one month; legally permitted extensions will be explained.
You may complain to a data-protection authority, including the authority where you live or work. Our local authority is the Berliner Beauftragte für Datenschutz und Informationsfreiheit:
https://www.datenschutz-berlin.de/
14. BROWSER PRIVACY SIGNALS
A browser’s “Do Not Track” setting is not the same as selecting cookie preferences on our website. Do not rely on that setting alone to refuse optional tracking; use the website’s consent controls.
Other browser signals, including Global Privacy Control, may carry legal effects under applicable laws. Where we are legally required to honour such a signal, it must be treated accordingly. You may also contact us to exercise any applicable right to opt out of targeted advertising or data sharing.
Sharing identifiers and browsing or purchase events with advertising partners may be treated as “sharing”, “sale” or targeted advertising under certain privacy laws, even without a monetary payment. Any rights available to you under those laws apply where the relevant law covers our processing.
15. SECURITY, CHILDREN AND EXTERNAL SERVICES
We use appropriate technical and organisational measures to protect personal data. No online service or transmission method can guarantee absolute security.
Our store is intended for a general shopping audience and is not directed at children. If you believe a child has provided personal data without the necessary authorisation, please contact us so we can investigate and take appropriate action.
Links to other websites, social-media services or payment services may take you to services with their own privacy notices. This policy describes our processing; those notices explain the providers’ separate activities.
16. CHANGES AND CONTACT
We may update this policy when our services, providers or legal obligations change. The date above identifies the latest revision. Where required, we will provide additional notice or request fresh consent before new consent-based processing begins.
For privacy questions or requests, contact:
info@redcherryblvd.com
RAB Jul GmbH
Rosenstrasse 2
10178 Berlin
Germany