1. Scope of Application
Privacy Policy
Last updated: October 2026
1. Data Controller
The controller responsible for the processing of personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:
NicheEmbassy
Owner: Jamie Amling
Business name: [S3] - Network
Geibelstrasse 4
31582 Nienburg/Weser
Germany
Email: nicheembassy@gmail.com
Website: NicheEmbassy.com
In this Privacy Policy, “NicheEmbassy,” “we,” “us,” and “our” refer to the controller identified above.
2. General Information About Data Processing
We take the protection of your personal data seriously.
“Personal data” means any information relating to an identified or identifiable natural person. This may include your name, address, email address, IP address, payment information, order information, or other information that can be associated with you.
We process personal data only where necessary to operate our online store, process and fulfill orders, communicate with customers, comply with legal obligations, protect our legitimate interests, or where you have provided your consent.
Depending on the processing activity, we may rely in particular on the following legal bases under the GDPR:
- Art. 6(1)(a) GDPR – your consent;
- Art. 6(1)(b) GDPR – performance of a contract or steps taken prior to entering into a contract;
- Art. 6(1)(c) GDPR – compliance with a legal obligation;
- Art. 6(1)(f) GDPR – our legitimate interests or those of a third party.
Where processing is based on your consent, you may generally withdraw that consent at any time with effect for the future.
3. Shopify
Our online store is operated using the Shopify e-commerce platform.
When you visit or use our store, personal data may be processed, including:
- your name and contact details;
- billing and shipping addresses;
- email address;
- telephone number, where provided;
- order and transaction information;
- information about products purchased;
- IP address;
- browser and device information;
- cookie and online identifiers;
- information about how you use our store.
Shopify provides the technical infrastructure required to operate our online store and processes personal data in connection with these services.
Where processing is necessary to provide our store or fulfill your order, the legal basis is generally Art. 6(1)(b) GDPR.
Processing that is necessary for the secure and reliable operation of our store may also be based on our legitimate interests pursuant to Art. 6(1)(f) GDPR.
Where non-essential cookies or similar tracking technologies are used, they will, where legally required, only be activated after you have provided your consent.
The use of Shopify may involve the processing or transfer of personal data outside Germany or the European Economic Area. Where required by applicable law, appropriate safeguards for such international transfers are used.
Further information about Shopify's processing of personal data can be found in Shopify's privacy information.
4. Orders and Contract Fulfillment
When you place an order through our online store, we process the information required to process and fulfill your order.
This may include:
- first and last name;
- billing address;
- shipping address;
- email address;
- telephone number, where provided;
- products ordered;
- order number;
- order and shipping status;
- selected payment method;
- payment status;
- necessary payment and transaction information;
- information concerning returns, refunds, complaints, or customer service requests.
Processing is primarily carried out for the performance of our contract with you pursuant to Art. 6(1)(b) GDPR.
Where we are legally required to retain certain business, accounting, or tax information, processing is based on Art. 6(1)(c) GDPR.
5. Payment Providers
Depending on the payment method you select, personal data required to process your payment may be transmitted to the relevant payment service provider.
Shopify Payments
If you choose a payment method offered through Shopify Payments, the information required to process your payment will be processed and may be shared with the payment providers involved in the transaction.
Processing is carried out primarily for the performance of the contract pursuant to Art. 6(1)(b) GDPR and, where applicable, to comply with legal obligations.
PayPal
If you choose PayPal, personal data required to process the payment will be transmitted to PayPal.
This may include your name, email address, billing and shipping address, order details, payment amount, and transaction information.
Our processing is primarily necessary to process your payment and fulfill our contract with you pursuant to Art. 6(1)(b) GDPR.
PayPal may process personal data under its own responsibility for additional purposes, such as fraud prevention, identity verification, risk management, and compliance with legal obligations.
Stripe
Where Stripe is used for payment processing, information required for the relevant transaction may be transmitted to Stripe.
This may include contact information, payment information, order information, IP address, and technical information.
Our processing is primarily carried out for payment and contract fulfillment pursuant to Art. 6(1)(b) GDPR.
Klarna
If you select Klarna as your payment method, information required to process the transaction will be transmitted to Klarna.
Depending on the payment method selected, Klarna may process contact, identification, payment, and transaction information and may carry out identity, fraud prevention, risk, or creditworthiness checks.
Our processing is primarily carried out to provide your selected payment method and fulfill the contract pursuant to Art. 6(1)(b) GDPR.
Klarna may carry out additional processing under its own responsibility.
Apple Pay
If you choose Apple Pay, information required to process the payment will be processed for the purpose of completing your transaction.
Apple and other companies involved in processing the transaction may process personal data in accordance with their respective privacy policies.
Our processing is carried out for payment and contract fulfillment pursuant to Art. 6(1)(b) GDPR.
6. Shipping Providers
To deliver your order, we may transmit the personal data required for shipping to the shipping provider responsible for your delivery.
We may use the following shipping providers:
DHL, Hermes, DPD and UPS.
The information transmitted is generally limited to what is required to fulfill the delivery and may include your name, shipping address, shipment or order information and, where required or legally permitted, your contact information.
Processing is carried out for the fulfillment of our contract with you pursuant to Art. 6(1)(b) GDPR.
Where additional shipping notifications or delivery services are based on your consent, the applicable legal basis is Art. 6(1)(a) GDPR.
7. Contact and Gmail
If you contact us by email, we process the information you provide in order to respond to your request.
We use Gmail by Google for business email communications.
The personal data processed may include:
- your name;
- email address;
- content of your message;
- date and time of communication;
- technical metadata;
- relevant customer and order information.
If your inquiry concerns an existing or potential contractual relationship, processing is primarily based on Art. 6(1)(b) GDPR.
For other business inquiries, processing may be based on our legitimate interest in responding to communications pursuant to Art. 6(1)(f) GDPR.
8. Newsletter and Email Marketing
You may subscribe to our newsletter and other marketing communications.
For this purpose, we may process your email address, your name where provided, and information relating to your subscription.
Where consent is required, marketing emails are sent on the basis of your consent pursuant to Art. 6(1)(a) GDPR.
You may withdraw your consent at any time with effect for the future, including by using the unsubscribe link provided in our marketing emails.
Where technically available and legally permitted, we may process information about whether and how our marketing emails are used in order to measure and improve our communications.
Where consent is legally required for such measurement, this processing will only take place after you have provided your consent.
9. Cookies and Similar Technologies
Our online store uses cookies and similar technologies.
Cookies are small files or pieces of information that may be stored on or accessed from your device.
We distinguish in particular between technologies that are technically necessary and optional technologies used for analytics, personalization, advertising, and marketing.
Technically necessary technologies may be used to provide functions such as:
- shopping cart functionality;
- checkout;
- security;
- login and session functionality;
- storing privacy preferences;
- technical operation of the online store.
Subject to your choices, we may also use analytics, advertising, and marketing technologies.
We use Shopify's cookie/privacy banner to manage applicable privacy choices and consent.
Where required by law, non-essential cookies and similar technologies will only be activated after you have provided your consent.
You may generally change or withdraw your consent for the future through the privacy or cookie settings provided on our website.
10. Google Analytics
We may use Google Analytics to understand how visitors use our online store.
Google Analytics may process information including page views, interactions, approximate location information, browser and device information, and technical identifiers.
We use this information to understand how our store is used and to improve our services.
Where Google Analytics uses cookies or similar technologies that require consent, processing is based on your consent pursuant to Art. 6(1)(a) GDPR.
You may withdraw your consent through our cookie or privacy settings.
11. Google Ads
We use Google Ads to advertise our products and measure the effectiveness of our advertising campaigns.
This may include conversion tracking and remarketing technologies.
Information about how you interact with our store and advertisements may be processed for these purposes.
Where legally required, non-essential advertising and tracking technologies are only used after you have provided your consent pursuant to Art. 6(1)(a) GDPR.
12. Meta Pixel / Facebook and Instagram Advertising
We use advertising and measurement technologies provided by Meta in connection with advertising on Facebook and Instagram.
This may include the Meta Pixel.
The technology may allow certain actions in our store to be recorded, including:
- viewing a product page;
- adding a product to the shopping cart;
- beginning checkout;
- completing a purchase.
This information may be used to measure advertising performance, create audiences, optimize campaigns, and, depending on your consent and settings, provide more relevant advertising.
Where legally required, such non-essential tracking technologies are used on the basis of your consent pursuant to Art. 6(1)(a) GDPR.
13. TikTok Pixel / TikTok Ads
We use TikTok advertising and measurement technologies to measure and optimize our advertising campaigns.
This may include the TikTok Pixel.
Information about your use of our online store and certain actions, such as page views, shopping cart activity, or purchases, may be processed for advertising measurement and optimization purposes.
Where legally required, these tracking and marketing technologies are only used after you have provided your consent pursuant to Art. 6(1)(a) GDPR.
14. Pinterest Tag / Pinterest Ads
We use Pinterest advertising and conversion technologies.
This may include the Pinterest Tag, which allows us to measure certain interactions with our online store and evaluate the performance of Pinterest advertising campaigns.
Information processed may include page views, interactions with products, purchases, and technical device or browser information.
Where legally required, these technologies are only used after you have provided your consent pursuant to Art. 6(1)(a) GDPR.
15. Google reCAPTCHA
We may use Google reCAPTCHA to protect our website, forms, and other functions against automated access, spam, fraud, and abuse.
Technical information concerning your device, browser, and interactions with our website may be processed for this purpose.
Processing serves, in particular, to protect the security and integrity of our online store.
Where processing is based on our legitimate interests, the legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is protecting our website and services against spam, abuse, and automated attacks.
Where consent is legally required for the specific implementation of reCAPTCHA, processing will instead be based on Art. 6(1)(a) GDPR.
16. International Data Transfers
Some of the service providers we use, or their affiliated companies, may be located outside Germany or the European Economic Area or may process personal data in other countries.
This may include providers located in the United States and other third countries.
Where personal data is transferred outside the European Economic Area, we ensure, where legally required, that the applicable requirements for international data transfers are met.
Depending on the circumstances, this may include reliance on an adequacy decision of the European Commission or appropriate safeguards such as the European Commission's Standard Contractual Clauses.
17. Data Retention
We generally retain personal data only for as long as necessary for the purpose for which it was collected.
Order and business records may be retained for longer periods where required by applicable commercial, accounting, or tax laws.
After the applicable retention period expires, personal data will be deleted or anonymized unless another legal basis requires or permits further retention.
Where processing is based on your consent, the relevant data will generally be processed until you withdraw your consent or until the data is no longer required for the relevant purpose, subject to applicable legal retention obligations or other legal grounds.
18. Recipients of Personal Data
Where necessary for the purposes described in this Privacy Policy, personal data may be shared with categories of recipients including:
- hosting and e-commerce service providers;
- payment providers;
- banks and financial service providers;
- shipping and logistics providers;
- IT and security service providers;
- communication and email providers;
- analytics providers;
- marketing and advertising platforms;
- tax advisers, legal advisers, and other professional advisers;
- public authorities where disclosure is legally required.
Personal data is only shared where there is an appropriate legal basis for doing so.
19. Your Rights Under the GDPR
Subject to the applicable legal requirements, you may have the following rights:
Right of access – Art. 15 GDPR
You may request information about whether and how we process your personal data.
Right to rectification – Art. 16 GDPR
You may request the correction of inaccurate personal data or completion of incomplete personal data.
Right to erasure – Art. 17 GDPR
You may request deletion of your personal data where the legal requirements are met.
Right to restriction of processing – Art. 18 GDPR
You may request restriction of the processing of your personal data under the conditions provided by law.
Right to data portability – Art. 20 GDPR
Where applicable, you may request personal data you have provided to us in a structured, commonly used, machine-readable format or request its transmission to another controller.
Right to object – Art. 21 GDPR
Where we process personal data on the basis of Art. 6(1)(e) or Art. 6(1)(f) GDPR, you may have the right to object to such processing on grounds relating to your particular situation.
Where personal data is processed for direct marketing purposes, you may object to processing for such purposes at any time.
Withdrawal of consent
Where processing is based on your consent, you may withdraw that consent at any time with effect for the future. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
To exercise your privacy rights, please contact:
20. Right to Lodge a Complaint
Under Art. 77 GDPR, you have the right to lodge a complaint with a competent data protection supervisory authority if you believe that the processing of your personal data infringes applicable data protection law.
You may, in particular, contact the supervisory authority responsible for our place of business or another supervisory authority competent under applicable law.
21. Data Security
We implement appropriate technical and organizational measures designed to protect personal data against loss, misuse, unauthorized access, alteration, or unauthorized disclosure.
However, no method of transmission over the internet or electronic storage can guarantee absolute security.
22. International Customers
We offer our products to customers outside Germany and the European Union.
Depending on where you live, you may have additional privacy rights under applicable local privacy laws.
Where such laws apply to us, we will handle valid privacy requests in accordance with the applicable legal requirements.
For privacy-related inquiries, please contact:
23. Automated Decision-Making
NicheEmbassy generally does not make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you.
This does not prevent payment providers, fraud prevention services, or other independently responsible service providers from carrying out automated assessments or checks as part of their own services, including fraud, risk, identity, or creditworthiness checks.
24. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our online store, the services and providers we use, our processing activities, or applicable legal requirements.
The current version will be made available on our website.
Last updated: October 2026