Privacy Policy

Last updated: March 2026

1) Controller

The controller responsible for data processing within the meaning of the General Data Protection Regulation (GDPR) is:

Richery – a brand of Fiction Fusion Media
Joshua Becker
Bismarckstraße 31
87700 Memmingen
Germany
Email: support@richery.shop

2) General Information on Data Processing

We process personal data (such as name, address, and email address) only to the extent necessary to operate our online store, fulfill contractual obligations, and communicate with customers.

The legal bases for processing personal data are set out in Art. 6 (1) a, b, c, and f GDPR.

Cookie consent is managed via Complianz GDPR Cookie Consent.
You may grant, adjust, or withdraw your consent at any time via:

→ [cmplz-manage-consent]

3) Data Collected When Visiting Our Website

When accessing our website, certain technical data is automatically collected by Shopify:

  • IP address

  • Date and time of access

  • Browser type and version

  • Operating system

  • Referrer URL

This data is processed to ensure the technical functionality, security, and stability of the website in accordance with Art. 6 (1) f GDPR (legitimate interest).

4) Cookies and Consent Management

We use cookies to ensure essential website functionality and, subject to your consent, to personalize content and advertising.

Non-essential cookies are only activated after your explicit consent.
You can manage your cookie preferences at any time via:

→ [cmplz-manage-consent]

5) Hosting and Use of Shopify

Our online store is hosted by Shopify Inc., 151 O’Connor Street, Ottawa, ON K2P 2L8, Canada.
For customers in the European Union, data processing is carried out by Shopify International Ltd., Dublin, Ireland.

Shopify processes personal data necessary for:

  • order handling

  • payment processing

  • technical operation of the store

Further information is available at:
https://www.shopify.com/legal/privacy

6) Payment Providers

We use the following payment service providers:

  • Shopify Payments (Stripe Payments Europe Ltd., Ireland)

  • PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg

  • Klarna Bank AB

  • Apple Pay, Google Pay

  • Visa, Mastercard, American Express

Personal data is transferred solely for the purpose of payment processing in accordance with Art. 6 (1) b GDPR.

Privacy policies:

Stripe: https://stripe.com/privacy
PayPal: https://www.paypal.com/privacy

7) Shipping and Fulfilment

For the purpose of order delivery, we share necessary personal data (such as name, address, and email address) with logistics and fulfillment providers, including:

  • Sendcloud B.V., Eindhoven, Netherlands

  • DHL Paket GmbH, Bonn, Germany

Processing is carried out in accordance with Art. 6 (1) b GDPR (contract performance).

8) Email Marketing, Newsletter & Promotions (Klaviyo)

We use Klaviyo Inc., 125 Summer Street, Boston, MA 02110, USA, for email marketing and customer communication.

a) Purpose of processing

Personal data (such as email address and interaction data) is processed to send marketing communications, offers, and updates about our products and services.

b) Legal basis

Processing is based on your explicit consent pursuant to Art. 6 (1) a GDPR.
Registration is carried out using a double opt-in procedure.

c) Withdrawal of consent

You may withdraw your consent at any time via the unsubscribe link included in each email.

d) Data transfer to third countries

Data may be transferred to the United States. Such transfers are safeguarded through Standard Contractual Clauses (SCCs) in accordance with Art. 46 GDPR.

Further information:
https://www.klaviyo.com/legal/privacy

9) Analytics and Performance Measurement

Subject to your consent, we use:

  • Google Analytics 4 – Google Ireland Ltd., Dublin

  • Google Tag Manager (used solely for tag management)

Processing is based on Art. 6 (1) a GDPR.

Privacy policy:
https://policies.google.com/privacy

10) Online Advertising and Remarketing

With your consent, we use:

  • TikTok Pixel – TikTok Technology Ltd., Ireland

  • Pinterest Tag – Pinterest Europe Ltd., Ireland

  • Meta Pixel (Facebook & Instagram) – Meta Platforms Ireland Ltd.

  • Google Ads & Remarketing – Google Ireland Ltd.

Processing is based on Art. 6 (1) a GDPR.
Consent may be withdrawn at any time via:

→ [cmplz-manage-consent]

11) Communication and Contact

If you contact us via:

  • contact forms

  • email

  • social media messaging

your data will be processed solely for the purpose of handling your inquiry in accordance with Art. 6 (1) b GDPR.

12) Social Media Presence

We maintain profiles on:

  • Instagram – Meta Platforms Ireland Ltd.

  • TikTok – TikTok Technology Ltd.

  • Pinterest – Pinterest Europe Ltd.

Data processing on these platforms is governed by the respective providers’ privacy policies.

13) Third-Party Services

We use third-party services to operate and manage our business, including:

  • Shopify (e-commerce platform)

  • Sendcloud (shipping)

  • Klaviyo (email marketing)

  • DHL (logistics)

  • Zendrop, Syncee (product sourcing & dropshipping)

Processing is based on Art. 6 (1) f GDPR (legitimate interest in efficient business operations).

14) Data Security

Our website uses TLS/SSL encryption (https).
We implement appropriate technical and organizational measures to protect personal data against unauthorized access.

15) Data Subject Rights

You have the following rights under the GDPR:

  • Right of access (Art. 15 GDPR)

  • Right to rectification (Art. 16 GDPR)

  • Right to erasure (Art. 17 GDPR)

  • Right to restriction of processing (Art. 18 GDPR)

  • Right to data portability (Art. 20 GDPR)

  • Right to object (Art. 21 GDPR)

  • Right to withdraw consent (Art. 7 (3) GDPR)

You also have the right to lodge a complaint with a supervisory authority:

Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 27
91522 Ansbach
Germany

16) Data Retention

Personal data is stored only for as long as necessary to fulfill the purposes stated above, unless statutory retention obligations require longer storage.

17) Updates to This Privacy Policy

We reserve the right to update this Privacy Policy to reflect legal, technical, or operational changes.

The current version is always available at:
https://richery.shop/pages/policies-privacy-policy