Privacy Policy

Protecting your personal data is important to us.
With this Privacy Policy, we inform you in accordance with Articles 13 and 14 of the General Data Protection Regulation (GDPR) about how and for what purposes we process personal data when you use our website.

1. Controller

JHT Company GmbH
Uhlandstraße 28
10719 Berlin
Germany

Email: support@cuffcph.com

2. Hosting and Operation of the Website

Our website is operated via the e-commerce platform Shopify.
The provider is Shopify Inc., 151 O’Connor Street, Ground Floor, Ottawa, ON K2P 2L8, Canada.

Shopify processes personal data on our behalf. This may involve data transfers to third countries (in particular Canada and the United States). Canada is subject to an adequacy decision by the European Commission. For transfers to the United States, appropriate safeguards (such as Standard Contractual Clauses) are used.

Legal basis: Art. 6(1)(b) and (f) GDPR

3. Access Data and Server Log Files

When you visit our website, the following data is automatically collected:

  • IP address (shortened/anonymised where technically possible)

  • Date and time of access

  • Browser type and version

  • Operating system

  • Referrer URL

  • Pages visited

This data is required to display the website correctly and to ensure system security and stability.

Legal basis: Art. 6(1)(f) GDPR
Retention period: up to 7 days

4. Orders and Contract Fulfilment

When you place an order in our shop, we process the following data in particular:

  • First and last name

  • Billing and shipping address

  • Email address

  • Phone number

  • Payment information

  • Order and shipping details

The processing is carried out to fulfil your order, deliver the goods and comply with legal obligations.

Legal basis: Art. 6(1)(b) GDPR
Retention: in accordance with statutory retention obligations (e.g. tax and commercial law)

No customer account is created. Orders are placed as guest checkouts.

5. Payment Methods

We work with the following payment service providers to process payments:

  • Shopify Payments (including credit cards)

  • PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg)

  • Klarna (Klarna GmbH, Germany)

  • MobilePay (for customers in Denmark)

Payment data is transmitted directly to the respective payment provider. We do not receive access to your full payment details.

Bank Transfer

If you choose to pay by direct bank transfer, we process the payment details you provide (e.g. name, IBAN, payment amount) for the purpose of processing the payment.

Legal basis: Art. 6(1)(b) GDPR

6. Shipping and Logistics

To process and ship your order, we work with external shipping and logistics providers.

We use Sendcloud to create shipping labels and manage shipping. In this context, personal data such as name, delivery address and shipping information is transferred to the respective shipping providers.

We work in particular with the following carriers:

  • DHL

  • DHL Express

  • UPS

  • GLS

  • DPD

If you choose express shipping, the shipping label may be created directly via the respective carrier (e.g. DHL Express). In this case, the data required for shipping is transferred directly to that carrier.

Your data is transferred exclusively for the purpose of delivering your order.

Legal basis: Art. 6(1)(b) GDPR

7. Cookies and Consent Management

We use cookies and similar technologies to provide and optimise our website.

Cookie management is handled via the Pandectes GDPR Cookie Consent Tool.

Non-essential cookies (e.g. for analytics or marketing purposes) are only set after you have given your explicit consent.

Legal basis:

  • strictly necessary cookies: Art. 6(1)(f) GDPR

  • all other cookies: Art. 6(1)(a) GDPR

You can withdraw your consent at any time via the cookie settings.

8. Analytics and Marketing Tools

a) Google Analytics (GA4)

We use Google Analytics 4 to analyse how our website is used.

Provider: Google Ireland Limited.
Data processing takes place only after your consent. IP addresses are processed in anonymised form.

Legal basis: Art. 6(1)(a) GDPR

b) Google Ads & Conversion Tracking

We use Google Ads to display advertisements and measure their effectiveness.

Legal basis: Art. 6(1)(a) GDPR

c) Meta (Facebook & Instagram Ads)

We use advertising services provided by Meta Platforms Ireland Ltd. (e.g. Facebook Pixel) to display personalised ads.

Legal basis: Art. 6(1)(a) GDPR

9. Newsletter and Email Marketing (Klaviyo)

We use Klaviyo to send newsletters and automated emails (e.g. abandoned cart reminders).

Provider: Klaviyo Inc., USA.

Registration takes place via a double opt-in process.
You can unsubscribe at any time using the unsubscribe link included in every email.

Legal basis: Art. 6(1)(a) GDPR
Data transfers to the USA are based on appropriate safeguards (e.g. Standard Contractual Clauses).

10. Social Media Links

Our website contains links to social networks (e.g. Instagram, Facebook).
These are pure links. A connection to the respective provider is only established when you click on the link.

11. Your Rights

You have the right to:

  • Access (Art. 15 GDPR)

  • Rectification (Art. 16 GDPR)

  • Erasure (Art. 17 GDPR)

  • Restriction of processing (Art. 18 GDPR)

  • Data portability (Art. 20 GDPR)

  • Withdrawal of consent (Art. 7(3) GDPR)

  • Objection to certain processing activities (Art. 21 GDPR)

You can exercise your rights at any time by contacting: support@cuffcph.com

12. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority.
The competent authority is in particular the authority at your place of residence or at our company’s registered office.

13. Data Security

We implement appropriate technical and organisational measures to protect your personal data against loss, misuse or unauthorised access.

14. Updates to This Privacy Policy

This Privacy Policy is valid as of 2025.
We reserve the right to update it if necessary.