Privacy Policy.

Pikeline ("we", "us", "our") is the data controller responsible for this website. We are located in Luxembourg at: 49, rue des Champs, L-7521 Mersch. Contact: contact@pikeline.shop.

This privacy policy explains how we collect, use, and protect your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and the Luxembourg law of 1 August 2018.

When you place an order, Shopify collects the following data on our behalf:

• Name and surname:To identify you and address your order
• Delivery address:To ship your order
• Email address:To send your order confirmation and shipping updates
• Payment information:Processed securely by Shopify Payments — we never see your card details
• Phone number (optional):For delivery coordination if provided
• IP address and browser data:For fraud prevention and security

We process your personal data under the following legal bases:

• Contract performance (Art. 6(1)(b) GDPR): Processing your order, shipping, and after-sales.
• Legal obligation (Art. 6(1)(c) GDPR): Accounting and tax records as required by Luxembourg law.
• Legitimate interest (Art. 6(1)(f) GDPR): Fraud prevention and security.

Order data (name, address, order history) is kept for 10 years as required by Luxembourg accounting law.

If you request deletion before that period, we will anonymise your personal identifiers while retaining the minimum data required for our legal obligations.

We share your data only with service providers who process it on our behalf:

• Shopify Inc. (Canada/USA): Order management, payment processing, and checkout. Shopify is certified PCI-DSS Level 1. Data may be transferred outside the EEA under Standard Contractual Clauses.
• Vercel Inc. (USA): Website hosting. Data may be transferred outside the EEA under Standard Contractual Clauses.
• Shipping carriers: Your name and delivery address are shared with the carrier to deliver your order.

We do not sell your personal data to any third party.

This website uses only functional cookies necessary for the shopping cart to work. No analytics, tracking, or advertising cookies are set without your consent.

• Cart session cookie: Stores your cart contents locally so items are not lost between pages. Essential — no consent required.
• Shopify checkout cookies: Set by Shopify on their domain when you proceed to checkout. Subject to Shopify's own privacy policy.

You have the right to:

• Access a copy of your personal data (Art. 15)
• Correct inaccurate data (Art. 16)
• Request deletion ("right to be forgotten") (Art. 17)
• Restrict processing (Art. 18)
• Data portability (Art. 20)
• Object to processing based on legitimate interest (Art. 21)
• Withdraw consent at any time (where processing is based on consent)

To exercise your rights, contact us at: contact@pikeline.shop

You also have the right to lodge a complaint with the Commission Nationale pour la Protection des Données (CNPD) in Luxembourg: cnpd.public.lu