Privacy Policy – Duchique

Last updated: August 2026

Duchique operates this online store and website, including the related information, content, features, tools, products and services offered through it (the “Services”). Our store is powered by Shopify, which provides the e-commerce platform that enables us to offer the Services to you.

This Privacy Policy explains how we collect, use, disclose and otherwise process your personal data when you visit or use our Services, make a purchase or other transaction, or otherwise communicate with us.

If there is any conflict between our Terms of Service and this Privacy Policy regarding the collection, use or disclosure of your personal data, this Privacy Policy will apply.

Please read this Privacy Policy carefully.

1. Personal Data We Collect

“Personal data” means information relating to an identified or identifiable individual. It does not include information that has been anonymised so that an individual can no longer reasonably be identified.

Depending on how you interact with our Services, we may collect and process the following categories of personal data:

• Contact information, such as your name, email address, telephone number, billing address and shipping address.

• Order and transaction information, such as products purchased, returned or cancelled, order history, delivery information and transaction details.

• Payment information, such as payment status, transaction information and information required to process your payment. Payment information may also be processed directly by our payment providers.

• Account information, where applicable, such as login information, preferences and account settings.

• Customer service information, including messages, requests, complaints and other information you provide when communicating with us.

• Device and technical information, such as your IP address, browser type, device type, operating system and other technical identifiers.

• Usage information, including information about how you browse and interact with our website, such as pages viewed, products viewed, items added to your cart and interactions with website features.

• Marketing and preference information, such as your marketing preferences and, where applicable, your consent choices.

2. How We Collect Personal Data

We may collect personal data:

• Directly from you when you place an order, create an account, subscribe to marketing communications, contact us or otherwise provide information to us.

• Automatically when you use our website, including through cookies and similar technologies.

• From Shopify and other service providers that help us operate our store.

• From payment providers, shipping and logistics providers, analytics providers and other business partners where necessary to provide our Services.

• From advertising or marketing partners where permitted by applicable law.

3. How We Use Your Personal Data

We process personal data only where we have an appropriate legal basis under applicable data protection law.

Providing Our Services

We may process your personal data to:

• Process and fulfil your orders;

• Process payments;

• Arrange shipping and delivery;

• Handle returns, refunds and customer service requests;

• Manage customer accounts;

• Communicate with you about your orders; and

• Provide the products and Services you request.

This processing is generally necessary for the performance of our contract with you.

Legal Obligations

We may process personal data where necessary to comply with legal obligations, including accounting, tax, consumer protection and other applicable legal requirements.

Legitimate Interests

Where appropriate, we may process personal data based on our legitimate interests, including to:

• Operate and improve our business and website;

• Prevent fraud and misuse;

• Protect the security of our Services;

• Understand how customers use our Services; and

• Establish, exercise or defend legal claims.

Where we rely on legitimate interests, we consider whether our interests are overridden by your rights and freedoms.

Marketing and Advertising

Where permitted by applicable law, we may use your personal data to send marketing communications and provide or measure advertising.

Where consent is legally required, we will obtain your consent before carrying out such processing.

You can unsubscribe from email marketing at any time by using the unsubscribe link included in our marketing emails or by contacting us.

4. Cookies and Similar Technologies

We and our service providers may use cookies and similar technologies to operate our website, remember preferences, understand website usage, improve our Services and, where permitted, provide personalised advertising.

Where required by applicable law, non-essential cookies and similar tracking technologies will only be used after you have provided your consent.

You can manage your cookie preferences through the cookie consent tools available on our website, where applicable.

For additional information about the cookies used on our website, please refer to our Cookie Policy or cookie preference tool.

5. How We Share Personal Data

We may share personal data with third parties where necessary for the purposes described in this Privacy Policy.

These recipients may include:

• Shopify and providers of our e-commerce infrastructure;

• Payment processors and payment service providers;

• Shipping, fulfilment and logistics providers;

• IT, hosting and technical service providers;

• Customer support providers;

• Analytics providers;

• Marketing and advertising providers, where permitted by law;

• Professional advisers, such as accountants, legal advisers and auditors;

• Government authorities, regulators or law enforcement authorities where required by law; and

• Parties involved in a merger, acquisition, restructuring, sale of assets or similar business transaction.

6. Shopify

Our online store is powered by Shopify.

Shopify processes personal data in connection with providing its e-commerce platform and related services. Depending on the Shopify services and features being used, Shopify may process certain personal data on our behalf and may also process certain personal data for its own purposes.

When you interact with our Shopify-powered store, information about your interactions, device, transactions and purchases may be processed by Shopify.

Shopify may process personal data in countries outside Finland and the European Economic Area (“EEA”), subject to applicable data protection requirements and safeguards.

For more information about how Shopify processes personal data, please refer to Shopify's applicable privacy information.

7. International Transfers

Some of our service providers, fulfilment partners and other recipients may be located outside Finland or the EEA.

As a result, your personal data may be transferred to and processed in countries outside the EEA.

Where personal data is transferred outside the EEA to a country that has not been recognised as providing an adequate level of data protection, we use appropriate safeguards where required by applicable law. These may include the European Commission's Standard Contractual Clauses or another legally recognised transfer mechanism.

Where applicable, additional safeguards may also be implemented depending on the circumstances of the transfer.

8. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including to:

• Fulfil orders and provide our Services;

• Maintain necessary business and transaction records;

• Comply with accounting, tax and other legal obligations;

• Resolve disputes;

• Prevent fraud; and

• Establish, exercise or defend legal claims.

The applicable retention period depends on the type of personal data, the purpose for which it is processed and any applicable legal requirements.

When personal data is no longer required, we will delete or anonymise it where appropriate.

9. Data Security

We use appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

However, no method of transmission over the internet or electronic storage can be guaranteed to be completely secure.

You are responsible for keeping any account credentials confidential and should contact us if you believe your account or personal information has been compromised.

10. Your Rights

If you are located in Finland or elsewhere in the EEA, you may have the following rights under the General Data Protection Regulation (“GDPR”), subject to applicable conditions and exceptions:

• Right of access – You may request information about the personal data we process about you and obtain a copy of that data.

• Right to rectification – You may request correction of inaccurate or incomplete personal data.

• Right to erasure – You may request deletion of your personal data in certain circumstances.

• Right to restriction – You may request that we restrict the processing of your personal data in certain circumstances.

• Right to data portability – You may have the right to receive certain personal data in a structured, commonly used and machine-readable format and transmit it to another controller.

• Right to object – You may object to certain processing based on legitimate interests and to processing for direct marketing purposes.

• Right to withdraw consent – Where processing is based on your consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

• Right to lodge a complaint – You have the right to lodge a complaint with the competent data protection supervisory authority.

To exercise your privacy rights, contact us at support@duchique.com.

We may need to verify your identity before completing certain requests.

11. Marketing Communications

You may opt out of receiving promotional emails from us at any time by using the unsubscribe link included in our marketing emails.

Even if you unsubscribe from marketing communications, we may still send you non-marketing communications that are necessary in connection with your orders, transactions, account or customer service requests.

12. Children's Privacy

Our Services are not intended for children, and we do not knowingly collect personal data from children in circumstances where doing so would be unlawful.

If you believe that a child has provided personal data to us improperly, please contact us at support@duchique.com so that we can investigate and, where appropriate, delete the information.

13. Third-Party Websites

Our Services may contain links to websites, applications or services operated by third parties.

We are not responsible for the privacy, security or content practices of third parties. We encourage you to review their privacy policies before providing personal data to them.

14. Complaints

If you have concerns about how we process your personal data, please contact us first at support@duchique.com.

If you are located in Finland, you also have the right to lodge a complaint with the Office of the Data Protection Ombudsman of Finland or, where applicable, another competent supervisory authority in the EEA.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices, Services, legal requirements or other operational reasons.

When we update this Privacy Policy, we will publish the revised version on this page and update the “Last updated” date.

Where required by law, we will provide additional notice of material changes.

16. Contact Us

If you have questions about this Privacy Policy, our processing of your personal data, or wish to exercise your privacy rights, please contact:

Duchique
Email: support@duchique.com

For personal data processed by Duchique for the purposes described in this Privacy Policy, Duchique acts as the data controller unless otherwise stated.