Privacy policy

Privacy Policy

Last updated: August 26, 2026

CHOSEN NOT LUCKY (“we”, “us” or “our”) operates this online store and website. This Privacy Policy explains how we collect, use, store and disclose your personal information when you visit our website, place an order, contact us or otherwise use our services.

Our online store is powered by Shopify.

1. Controller

The controller responsible for the processing of personal data in connection with this website is:

Justin Diehl
trading as Chosen
c/o flexdienst – #21827
Kurt-Schumacher-Straße 74
67663 Kaiserslautern
Germany

Email: support@chosen-notlucky.de

2. Personal Information We Collect

Depending on how you interact with our store, we may collect and process the following categories of personal information:

Contact information, such as your name, email address, telephone number, billing address and shipping address.
Order and transaction information, including products purchased, returned or exchanged and information relating to your orders.
Payment information necessary to process your payment.
Account information if you create a customer account.
Communications you send to us, including customer service requests.
Technical and usage information, such as your IP address, browser type, device information and information about how you use our website.
Cookie and similar technology information where applicable.

3. How We Collect Personal Information

We may collect personal information:

directly from you when you place an order, create an account, contact us or otherwise provide information to us;
automatically when you use our website, including through cookies and similar technologies;
from service providers that help us operate our store, process payments, fulfil orders, provide shipping services or operate our website;
from other third parties where permitted by applicable law.

4. How and Why We Use Your Personal Information

We process personal information for the following purposes:

Processing and Fulfilling Orders

We use your personal information to process payments, confirm orders, fulfil purchases, arrange shipping, process returns and refunds and provide customer service.

Where necessary to perform a contract with you or to take steps at your request before entering into a contract, the legal basis is Article 6(1)(b) GDPR.

Legal Obligations

We may process and retain information where necessary to comply with legal obligations, including tax, accounting and commercial record-keeping requirements.

The legal basis is Article 6(1)(c) GDPR.

Customer Service and Business Operations

We may process information to respond to enquiries, maintain the security of our store, prevent fraud and operate and improve our business.

Where applicable, this processing is based on our legitimate interests pursuant to Article 6(1)(f) GDPR, provided that your interests or fundamental rights and freedoms do not override those interests.

Marketing

Where required by law, we will only send electronic marketing communications where you have provided the necessary consent.

Where processing is based on consent, the legal basis is Article 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future.

5. Shopify

Our online store is hosted by Shopify.

Shopify processes personal information in connection with your use of our store in order to provide its ecommerce platform and related services.

Information processed through our store may therefore be transmitted to and processed by Shopify and its service providers.

For more information about how Shopify processes personal information, please refer to Shopify’s Consumer Privacy Policy.

6. Service Providers and Recipients

We may disclose personal information where necessary to companies that provide services on our behalf, including:

Shopify and ecommerce service providers;
payment processors;
shipping and logistics providers;
IT, hosting and cloud service providers;
customer support providers;
accounting, tax and professional advisers;
marketing and analytics providers, where legally permitted.

We only disclose information to the extent necessary for the relevant purpose or where otherwise permitted or required by law.

7. Shipping and Order Fulfilment

When you place an order, information necessary to deliver your order may be shared with the relevant shipping or logistics provider.

This may include your name, shipping address, contact information and information required to identify and deliver your shipment.

The legal basis for this processing is generally Article 6(1)(b) GDPR.

8. Cookies and Similar Technologies

Our website may use cookies and similar technologies that are necessary for the operation of the store.

Additional cookies or technologies, including those used for analytics, advertising or personalisation, will be used in accordance with applicable data protection and cookie laws and, where required, only after obtaining your consent.

You can manage your choices through the cookie or privacy settings provided on our website where available.

9. International Data Transfers

Some of our service providers, including Shopify and its service providers, may process personal information outside Germany or the European Economic Area.

Where personal information is transferred to a country outside the European Economic Area, we rely on legally recognised transfer mechanisms where required, such as an adequacy decision by the European Commission or appropriate safeguards including Standard Contractual Clauses.

10. Data Retention

We retain personal information only for as long as necessary for the purposes for which it was collected or as required by applicable law.

The applicable retention period may depend on the type of information, the purpose of processing and applicable statutory retention obligations.

Once personal information is no longer required and no legal obligation requires us to retain it, it will be deleted or otherwise handled in accordance with applicable data protection law.

11. Your Rights

Subject to the requirements and limitations of applicable law, you may have the right to:

request access to your personal information;
request correction of inaccurate personal information;
request deletion of your personal information;
request restriction of processing;
object to certain processing;
receive certain personal information in a portable format;
withdraw your consent at any time where processing is based on consent.

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

To exercise your rights, please contact us at:

support@chosen-notlucky.de

We may need to verify your identity before processing your request.

12. Right to Lodge a Complaint

You have the right to lodge a complaint with a competent data protection supervisory authority if you believe that the processing of your personal information violates applicable data protection law.

You may contact the supervisory authority responsible for your place of residence or the supervisory authority responsible for us.

13. Children’s Privacy

Our store is not intended for children, and we do not knowingly collect personal information from children in circumstances where doing so would violate applicable law.

If you believe that a child has provided us with personal information improperly, please contact us.

14. Security

We take appropriate technical and organisational measures designed to protect personal information against unauthorised access, loss, alteration or disclosure.

However, no method of electronic transmission or storage can guarantee absolute security.

15. Third-Party Websites

Our website may contain links to websites or services operated by third parties.

We are not responsible for the privacy practices of third-party websites. We recommend reviewing their privacy policies before providing personal information.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, legal requirements or data processing practices.

The current version will be published on this website and the “Last updated” date will be adjusted accordingly.

17. Contact

If you have questions about this Privacy Policy or would like to exercise your data protection rights, please contact: