2. Privacy policy

WESTROW

Last updated: October 17, 2026

1. Introduction

This Privacy Policy explains how WESTROW collects, uses, stores, shares, and protects personal information when customers visit our online store, place orders, contact customer support, or interact with our services.

WESTROW is operated by Tamer Simsek, an individual trader based in Germany.

Our store serves customers in the United States. As our business is operated from Germany, personal data processing carried out in connection with this establishment is subject to applicable European data protection legislation, including the General Data Protection Regulation (GDPR). Applicable United States privacy laws may provide additional rights.

By using our website, customers acknowledge that personal information may be processed as described in this policy. Where consent is legally required, we request it separately.

2. Data controller

The party responsible for determining the purposes and means of processing personal data is:

Business name: WESTROW

Data controller: Tamer Simsek

Business type: Individual trader

Address: Mörfelder Landstraße 138, 60598 Frankfurt am Main, Germany

Privacy contact email: support@westrowlxury.shop

Website: [Store domain to be added before publication]

3. Information we collect

Depending on how customers interact with our store, we may collect the following categories of personal information:

Personal identification information

• First and last name.

• Email address.

• Telephone number.

• Billing and shipping addresses.

Order and transaction information

• Products purchased.

• Order numbers and order history.

• Transaction amounts and currency.

• Payment status and related transaction references.

• Refund and cancellation information.

Payment information is processed through our payment service providers. WESTROW does not require customers to send full payment card details directly to customer support.

Technical and usage information

• IP address.

• Browser type and device information.

• Operating system.

• Pages visited and interactions with our store.

• Referring websites.

• Cookie identifiers and other online identifiers.

Customer communications

We may retain messages, inquiries, refund requests, product photographs, and other information voluntarily supplied when customers communicate with WESTROW.

4. How we use personal information

We process personal information for the following purposes:

1. Processing and confirming orders.

2. Accepting and verifying payments.

3. Arranging product fulfillment and international shipping.

4. Providing shipment tracking and delivery updates.

5. Managing refunds, cancellations, and customer service.

6. Preventing fraud and protecting the security of our store.

7. Meeting tax, accounting, and legal obligations.

8. Understanding website performance.

9. Delivering relevant advertising where legally permitted.

10. Sending marketing communications where the recipient has consented or where another lawful basis permits them.

We do not use personal information for purposes incompatible with those described in this policy without an appropriate legal basis.

5. Legal bases for processing under the GDPR

Where the GDPR applies, WESTROW processes personal data on the following legal bases under Article 6:

Performance of a contract, Article 6(1)(b)

Processing information necessary to accept orders, collect payments, arrange delivery, handle contractual requests, and provide customer service relating to purchases.

Compliance with a legal obligation, Article 6(1)(c)

Maintaining records and processing information as required by applicable tax, accounting, consumer protection, and other legal requirements.

Legitimate interests, Article 6(1)(f)

Protecting the business against fraud, maintaining website security, managing routine operations, and improving customer service, subject to the rights and interests of affected individuals.

Consent, Article 6(1)(a)

Processing based on permission, including non-essential tracking technologies and marketing activities where consent is required.

Customers may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6. Shopify and service providers

Our online store is powered by Shopify.

Shopify provides the e-commerce infrastructure used to operate the store, process checkout transactions, manage orders, and support website functionality.

Personal information may be shared with service providers where reasonably necessary for the purposes described in this policy, including:

• Shopify, for e-commerce hosting and store management.

• Payment processing providers, for payment authorization and refunds.

• Fulfillment partners in China, for preparing and dispatching orders.

• International carriers and shipping providers, for delivery and tracking.

• Meta Platforms, through Meta Pixel, for advertising measurement and related marketing activities where permitted.

• Technical and security service providers supporting website operations.

We share only information reasonably necessary for the relevant services, subject to applicable legal obligations.

Some providers may process information as independent controllers under their own privacy policies.

7. International data transfers

WESTROW operates from Germany, sells to customers in the United States, and uses fulfillment services located in China.

Personal information may therefore be transferred to, accessed from, or processed in Germany, the United States, China, and other countries where authorized service providers operate.

When personal data is transferred outside the European Economic Area and the GDPR requires transfer protections, appropriate safeguards are used, such as applicable adequacy decisions, the European Commission's Standard Contractual Clauses, or another lawful transfer mechanism.

Customers may contact us for further information about applicable transfer safeguards.

8. Cookies and tracking technologies

Our store uses cookies and similar technologies to support essential website functions, maintain customer sessions, operate checkout, and measure advertising performance where permitted.

Essential cookies

These technologies are used for functions such as:

• Shopping cart operations.

• Checkout and order processing.

• Security and fraud prevention.

• Session management.

• Remembering necessary website preferences.

Strictly necessary technologies may operate without separate consent where applicable law permits.

Meta Pixel

WESTROW uses Meta Pixel for advertising-related purposes.

Meta Pixel may collect information about website interactions, including page views, product views, cart activity, checkout events, purchases, and associated browser identifiers.

This information helps us:

• Measure the effectiveness of advertisements on Facebook and Instagram.

• Understand customer interactions with our website.

• Attribute purchases to advertising campaigns.

• Build advertising audiences where legally permitted.

• Improve advertising relevance.

Meta may process information under its own privacy terms, available at:

https://www.facebook.com/privacy/policy/

How to reject or control tracking

Where legally required, non-essential tracking technologies, including advertising cookies, will be activated only after the customer has provided valid consent.

Customers can decline or withdraw consent through the cookie preference controls available on our website.

Customers may also:

• Adjust browser settings to block or delete cookies.

• Manage advertising preferences through their Facebook or Instagram accounts.

• Use available browser privacy controls.

• Contact WESTROW to exercise applicable privacy rights.

Disabling certain cookies may affect website preferences or non-essential functionality but should not prevent essential shopping and checkout operations.

9. Marketing communications

WESTROW may send transactional emails concerning purchases, shipping updates, payment confirmations, customer support, and refunds.

Marketing communications will be sent only where permitted by applicable law.

Customers can unsubscribe from marketing emails using the unsubscribe instructions included in those messages or by contacting customer support.

Unsubscribing from marketing does not prevent necessary transactional communications relating to an existing order.

10. Data retention

We retain personal information only for as long as reasonably necessary for the purposes described in this policy or as required by applicable law.

Retention periods depend on the type of information and the reason for processing.

Order, payment, and accounting records may be retained for periods required by applicable financial and tax legislation.

Customer service records may be retained for the time reasonably necessary to resolve requests, document transactions, or address legal claims.

Information processed solely on the basis of consent will be deleted or anonymized when consent is withdrawn, unless another lawful basis requires continued retention.

11. Information security

WESTROW uses reasonable administrative, organizational, and technical measures designed to protect personal information against unauthorized access, disclosure, alteration, and loss.

Payment transactions are handled through supported payment service providers and their security infrastructure.

No method of internet transmission or electronic storage can be guaranteed to be completely secure.

12. GDPR privacy rights

Where the GDPR applies, individuals may have the following rights, subject to applicable conditions and legal exceptions:

• The right to access their personal data.

• The right to correct inaccurate information.

• The right to request deletion of personal data.

• The right to restrict certain processing activities.

• The right to receive portable copies of eligible personal data.

• The right to object to processing based on legitimate interests.

• The right to withdraw consent.

• Rights relating to qualifying automated decision-making.

Requests may be submitted through our privacy contact email.

We may request information reasonably necessary to verify the identity of the person submitting a request.

Individuals may also lodge a complaint with a competent supervisory authority.

The supervisory authority for our location in Hesse, Germany, is:

The Hessian Commissioner for Data Protection and Freedom of Information

Website: https://datenschutz.hessen.de

13. California privacy rights

California residents may have additional rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA), where those laws apply to WESTROW.

These rights may include:

• The right to know what personal information is collected and how it is used.

• The right to request access to personal information.

• The right to request deletion of eligible personal information.

• The right to correct inaccurate personal information.

• The right to opt out of the sale or sharing of personal information.

• The right to limit certain uses of sensitive personal information, where applicable.

• The right not to be discriminated against for exercising statutory privacy rights.

The categories of personal information processed are described in Section 3. The purposes and categories of recipients are described in Sections 4 and 6.

WESTROW does not charge customers for exercising applicable privacy rights.

Advertising and information sharing

WESTROW does not offer customers' personal information for sale in exchange for money as part of its ordinary retail operations.

However, use of Meta Pixel for cross-context behavioral advertising may constitute "sharing" of personal information under California law, even when no monetary payment is received.

Where California law applies, eligible customers may request that WESTROW stop selling or sharing their personal information for purposes covered by the CCPA/CPRA.

Customers may submit requests through the privacy contact email or applicable privacy preference controls on our website.

Where legally required, recognized opt-out preference signals, including Global Privacy Control, will be honored.

WESTROW does not knowingly sell or share the personal information of consumers under 16 years of age.

Authorized agents may submit requests on behalf of eligible California residents, subject to legally permitted verification requirements.

14. Children's privacy

WESTROW is a general retail store and is not directed toward children under the age of 13.

We do not knowingly collect personal information directly from children under 13.

If we become aware that personal information has been collected from a child in violation of applicable law, we will take appropriate steps to delete it.

15. Third-party websites

Our website may contain links to services or websites operated by third parties.

WESTROW is not responsible for the privacy practices of independently operated third-party websites.

Customers should review the applicable privacy policies before providing personal information to such services.

16. Changes to this policy

WESTROW may update this Privacy Policy when necessary to reflect changes in our operations, technology, legal obligations, or data processing practices.

The current version will be published on our website with its effective update date.

Where required by applicable law, additional notice or consent will be obtained.

17. Contact information

For questions, privacy inquiries, or requests to exercise personal data rights, contact:

Store: WESTROW

Legal seller and data controller: Tamer Simsek

Business address: Mörfelder Landstraße 138, 60598 Frankfurt am Main, Germany

Customer support email: support@westrowlxury.shop

Website: support@westrowlxury.shop