Privacy Policy

Controller

Sarah Kidane
trading as SHE MADE THE MAP.
Germany
Email: hello@shemadethemap.com

Data we process

Depending on how you use the website and store, we may process:

• website and device information, including IP address, browser, device, referring page, access date and technical or security logs;
• contact information, including name, email address, billing information and country;
• order and transaction information, including product, order number, price, currency, tax information, payment status, refund status and download status;
• the payment method and transaction confirmation received from the relevant payment provider;
• messages, customer-support requests and other correspondence;
• marketing preferences, where a customer actively opts in;
• for MAP IT WITH ME, worksheets, project information, scheduling details and information voluntarily provided to deliver the service.

Full card credentials are generally processed by the selected payment provider and are not made available to SHE MADE THE MAP.

Customers should not submit highly sensitive or special-category personal data unless it is genuinely necessary and expressly requested.

Purposes and legal bases

Personal data may be processed:

• to provide, operate and secure the website;
• to process orders, payments and downloads;
• to arrange and provide MAP IT WITH ME;
• to answer customer and support requests;
• to prevent fraud, misuse and payment disputes;
• to comply with accounting, tax and other legal obligations;
• to establish, exercise or defend legal claims;
• to send marketing communications where the customer has consented; and
• to use optional analytics or advertising technologies where the required consent has been obtained.

Processing is based, as applicable, on performance of a contract, steps taken before entering into a contract, compliance with legal obligations, legitimate business interests or consent under Article 6 GDPR.

Consent may be withdrawn at any time without affecting processing that took place before withdrawal.

Service providers

Data may be processed by providers necessary to operate the website and fulfil orders, including:

• Lovable Labs Incorporated and its authorised service providers for website hosting, deployment, security and technical operation;
• Shopify International Limited and authorised Shopify providers for checkout, payment processing, order management, fraud prevention, customer accounts, Shop Pay and store operation;
• Shopify Digital Products for download delivery;
• the payment method selected by the customer, which may include Shopify Payments, PayPal, Klarna, Apple Pay or Google Pay;
• communication, email or scheduling providers actually used to answer requests or arrange MAP IT WITH ME sessions;
• advisers, authorities or courts where required by law or necessary to protect legal rights.

Shopify may also process customer information under the Shopify Consumer Privacy Policy.

Cookies and similar technologies

The website and Shopify checkout may use technologies necessary for website security, checkout, payment processing, session management, language preferences and storing privacy choices.

Optional analytics, marketing or advertising technologies are only activated where they are disclosed through the cookie settings and, where required, after consent. No independent analytics, advertising or tracking tool is currently installed on this website.

International transfers

Some providers may process information outside Germany or the European Economic Area. Where required, these transfers are protected through recognised safeguards such as adequacy decisions, binding corporate rules or the European Commission’s Standard Contractual Clauses.

Retention

Personal data is retained only for as long as necessary to provide the relevant service, meet legal retention obligations, resolve requests, prevent fraud or establish and defend legal claims.

Order, accounting and tax records may be retained for applicable statutory periods. Marketing information is retained until consent is withdrawn or it is no longer required, subject to a limited suppression record used to respect unsubscribe requests.

Customer rights

Subject to the applicable legal requirements, customers may request access, correction, deletion, restriction, data portability or withdrawal of consent. They may also object to processing based on legitimate interests or to direct marketing.

Requests can be sent to hello@shemadethemap.com.

Customers also have the right to complain to a competent data-protection supervisory authority.

Children

The website and products are intended for adults and are not knowingly directed at children.

Security

Reasonable technical and organisational measures are used to protect personal data. However, no method of online transmission or storage can be guaranteed to be completely secure.

Changes

This Privacy Policy may be updated when services, providers or legal requirements change. The current version will be published on this page.

Contact

Privacy questions and requests: hello@shemadethemap.com