Privacy policy

1. Who is responsible

Lancer Kickshop (owner: Lancer Kickshop), brd-walburger-wallstr. 17, 59494 Soest, Germany
Email: support@kickshop.shop · Phone: +4915737822943

2. Overview

We only collect the personal data we need to run the shop. Below you can see which data we process, why, on which legal basis under the GDPR, and for how long.

3. Visiting this website

When you open our pages, your browser sends technical data (IP address, date and time, requested page, browser type) to our server. We process it to deliver the website and to keep it secure and stable (Art. 6 (1) (f) GDPR, legitimate interest). Our web server does not keep access logs of page visits. We host all fonts, images and scripts ourselves, and we do not use analytics, advertising or tracking tools or embedded third-party content.

4. Cookies

We use one cookie. It keeps you logged in and remembers your cart (session cookie, stored for up to 14 days or until you log out). The contents of your cart are stored with your session. If you are logged in, we can see your cart in our administration area, for example to help you finish an order. It is strictly necessary to provide the service you ask for, so no consent is required (§ 25 (2) No. 2 TDDDG). We use no other cookies.

5. Customer account

If you create an account we store your name, email address, password (only as a secure hash), phone number, a saved delivery address and the items you liked. Legal basis: Art. 6 (1) (b) GDPR (contract). We keep it until you ask us to delete your account, subject to the retention periods in section 14.

6. Orders, payment and delivery

For an order we process your name, email, phone number, delivery address, the items, the price, your chosen payment method and the payment details you give us (for example a Revolut tag, a PayPal email address or the name on your bank account, which we need to match your payment), the order status and tracking number, and the time you accepted our terms. Purpose: to make and perform the contract, deliver your order and match your payment. Legal basis: Art. 6 (1) (b) GDPR, and Art. 6 (1) (c) GDPR for our tax and commercial law duties.

7. WhatsApp

After checkout you can send us your order on WhatsApp, and we may contact you there about your order at the number you gave. Using WhatsApp is voluntary; you can also contact us by email or through the contact form. WhatsApp is operated by Meta Platforms Ireland Limited, which processes your phone number, messages and shared files under its own terms and privacy policy. Legal basis: Art. 6 (1) (b) GDPR and our legitimate interest in efficient customer service (Art. 6 (1) (f) GDPR).

8. Contact form and support messages

If you write to us we process your name, email address, order reference and message to answer you (Art. 6 (1) (b) or (f) GDPR). We delete messages when your request is dealt with, unless we must keep them for legal reasons.

9. Custom requests and photos

If you send a custom request we process your contact details, your description and the photos you upload to prepare a quote and, if you accept it, to make your order (Art. 6 (1) (b) GDPR). If no order results, we delete the request and the photos within 6 months.

10. Withdrawals

If you withdraw from a contract we process your name, email address, order reference and your declaration to handle the withdrawal and confirm receipt (Art. 6 (1) (b) and (c) GDPR).

11. Emails

We send order confirmations, confirmations of withdrawals and password reset links by email. We use [EMAIL SERVICE PROVIDER] to send them.

12. Who receives your data

13. Transfers outside the EU/EEA

Some of the recipients above are or may be located outside the EU/EEA (for example in the USA or in the country of our supplier). Where that is the case, the transfer relies on an EU adequacy decision (for example the EU–US Data Privacy Framework for certified providers), on standard contractual clauses, or, for delivery of your order, on Art. 49 (1) (b) GDPR.

14. How long we keep data

Order, invoice and payment data: for as long as tax and commercial law require us to keep them (generally between 6 and 10 years), then we delete them. Account data: until you ask us to delete the account. Messages and custom requests: see sections 8 and 9.

15. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). Where we process data based on your consent you can withdraw it at any time. To use your rights, write to support@kickshop.shop.

16. Right to complain

You can complain to a data protection supervisory authority, for example the authority of the German federal state where we are based (you can find it through the Federal Commissioner for Data Protection, bfdi.bund.de) or of the place where you live.

17. Security and other information

Our website uses encrypted connections (HTTPS), and passwords are stored only as secure hashes. Administrator accounts are separate from customer accounts, are protected with strong passwords and optional two-factor authentication, and what administrators do with customer data is logged. Backups are encrypted: an encrypted copy of our database is kept on the server, and another is sent by email to the shop owner so that we can restore the shop if the server fails. Providing data is required to place an order; without it we cannot make or perform the contract. We do not use automated decision-making or profiling.

Last updated: 2026-10-24

Chat on WhatsApp