Privacy policy
1. Controller
Neha Aggarwal, Nehacouture Im The Playce Mall, Alte Potsdamerstr 7, 10785 Berlin, Germany. Email: nehacoutureberlin@gmail.com, phone: +49 151 75316266.
We are not required to appoint a data protection officer.
2. What data we process and why
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Orders, delivery, pickup, payment, customer service | Name, address, email, phone, order details, payment status | Art. 6(1)(b) (contract) |
| Customer account (optional) | Login email, order history, addresses | Art. 6(1)(b) |
| Keeping invoices and accounting records | Order and invoice data | Art. 6(1)(c) (legal obligation) |
| Live chat, WhatsApp, video consultation | Name, contact details, message content | Art. 6(1)(b) or (f) |
| Reviews | Name, review text, photos (if uploaded) | Art. 6(1)(a) (consent) |
| Newsletter (optional) | Email address | Art. 6(1)(a) (consent) |
| Security and running the shop | IP address, browser data, server logs | Art. 6(1)(f) (legitimate interest) |
| Analytics and advertising (only with consent) | Cookies, usage data | Art. 6(1)(a); § 25(1) TDDDG |
3. Recipients and service providers
We only share data where needed for the purpose concerned:
- Shopify (Shopify International Ltd., Ireland): shop system, hosting, checkout, customer accounts, Shopify Inbox (live chat). Data processing agreement under Art. 28 GDPR.
- Payment service providers for card payments (processed through the Shopify checkout) and our bank for bank transfers.
- DHL (Deutsche Post DHL Group): shipping. We pass on your name and delivery address and, if you agreed, your email/phone for delivery notifications.
- Our Hamburg unit (logistics partner for grocery and flowers): if you order grocery or flowers, the unit receives the order details needed for shipping and customer service.
- Judge.me: review requests and displaying reviews.
- WhatsApp (Meta Platforms Ireland Ltd.): if you contact us via WhatsApp.
- Only with your consent (analytics & marketing):
- Google Analytics 4 and Google Ads (Google Ireland Ltd.): audience measurement and measuring ad performance.
- Meta Pixel (Meta Platforms Ireland Ltd.): measuring and showing ads on Facebook and Instagram.
- Pinterest Tag (Pinterest Europe Ltd., Ireland): measuring and showing ads on Pinterest.
- Shopify Collabs and BixGrow (partner and influencer programmes): record whether you came to us through a partner's link, so we can pay their commission.
Some providers also process data outside the EU (in particular in the USA). Such transfers are based on the EU-US Data Privacy Framework or EU Standard Contractual Clauses.
4. Cookies
We use technically necessary cookies (e.g. cart, checkout, language) without consent (§ 25(2) TDDDG). All other cookies (analytics, marketing) are only set if you agree in the cookie banner. You can withdraw your consent at any time via the "Cookie settings" link in the footer.
5. Retention
We keep data only as long as needed for the purpose. Invoices and accounting records are kept for up to 10 years (§ 147 AO, § 257 HGB), and business letters for up to 6 years. Customer accounts remain until you ask us to delete them.
6. Your rights
You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21 GDPR). You can withdraw any consent at any time with effect for the future. An email to nehacoutureberlin@gmail.com is enough.
You may lodge a complaint with a data protection supervisory authority, for example the Berlin Commissioner for Data Protection and Freedom of Information, Alt-Moabit 59–61, 10555 Berlin.
7. Last updated
This privacy policy was last updated on 2 November 2026.