​​Privacy Policy

​​Privacy Policy

Last updated: [22.04.2026]

This Privacy Policy explains how Faith Driven, operated by Maximilian Bender (“we”, “us”, “our”), collects, uses, stores, and shares personal data when you visit our website, place an order, contact us, or otherwise interact with us.

Controller
Faith Driven
Business owner: Maximilian Bender
Salmdorfer Straße 15
85540 Haar
Germany
Email: admin@faith-driven.de

If you have any questions about this Privacy Policy or would like to exercise your data protection rights, please contact us at the email address above or at our postal address.

What data we collect

When you visit our website, we may automatically collect technical data that is necessary to display the website securely and reliably. This may include your IP address, date and time of access, requested pages, referrer URL, browser type and version, operating system, device information, and server log data.

When you place an order, we process the data necessary to conclude and perform the contract. This may include your name, billing address, shipping address, email address, phone number, ordered items, order value, payment status, and any information you provide during checkout.

If you contact us, we process the data contained in your message, such as your name, email address, order number, and the content of your enquiry.

If you create a customer account, we process the data you provide for account registration and account management.

We do not currently use analytics or advertising tools that are not strictly necessary for operating the website. If we introduce analytics, advertising, remarketing, or similar tools in the future, we will update this Privacy Policy and, where legally required, request your consent before such tools are activated. 

Purposes and legal bases

We process personal data to provide our website, ensure the security and stability of our systems, respond to enquiries, process orders, receive payment, ship goods, handle returns, comply with legal obligations, and defend or enforce legal claims where necessary.

The legal bases for processing are, depending on the situation, Article 6(1)(b) GDPR where processing is necessary for the performance of a contract or to take steps at your request before entering into a contract, Article 6(1)(c) GDPR where processing is necessary to comply with a legal obligation, Article 6(1)(f) GDPR where processing is necessary for our legitimate interests, for example website security, fraud prevention, customer service, and business administration, and Article 6(1)(a) GDPR where we rely on your consent. 

Recipients of data

We only share personal data where this is necessary for the purposes described above. Depending on how the shop is operated, recipients may include our hosting provider, email provider, payment service provider, shipping service provider, IT service providers, and professional advisers where necessary.

Please complete the following list before publication and remove any recipients you do not actually use:

Hosting provider: ​Supabase Inc, Render
Shop infrastructure provider: Nicepage
Payment provider(s): PayPal
Shipping provider(s):
Transactional email provider:
Other processors: 

International data transfers

If we use service providers outside the European Union or the European Economic Area, or if data is accessed from outside the EU/EEA, we will ensure an appropriate level of protection in accordance with applicable data protection law, for example by relying on an adequacy decision or on the European Commission’s Standard Contractual Clauses, where required. Please specify your actual providers and safeguards before publication. 

Storage periods

We retain personal data only for as long as necessary for the respective purpose. Order, invoice, and tax-relevant data are retained for the periods required by applicable commercial and tax law. Contract-related correspondence is retained as long as necessary for contract handling and legal retention obligations. Customer account data is retained until the account is deleted or as otherwise required by law. 

Cookies and similar technologies

Our website may use technically necessary cookies or similar technologies that are required to provide core website functions, such as page delivery, shopping cart functionality, security, or user-selected settings.

We do not currently use non-essential analytics, advertising, or marketing cookies. If this changes in the future, such technologies will only be activated after any legally required consent has been obtained, and this Privacy Policy will be updated accordingly.

You can also configure your browser to block or delete cookies. Please note that blocking technically necessary cookies may affect website functionality. 

Automated decision-making

We do not currently make decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you.

Your rights

Under applicable data protection law, you may have the right to request access to your personal data, rectification of inaccurate data, erasure of your data, restriction of processing, objection to processing, and data portability where the legal requirements are met. Where processing is based on consent, you may withdraw your consent at any time with effect for the future.

You also have the right to lodge a complaint with a competent supervisory authority, in particular in the Member State of your habitual residence, your place of work, or the place of the alleged infringement. 

Data security

We use appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or unauthorised access. However, no internet transmission or storage system can be guaranteed to be completely secure.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time in order to reflect legal, technical, or operational changes. The version published on this page is the current version.

Contact

If you have questions about this Privacy Policy or our processing of personal data, please contact:

Faith Driven
Maximilian Bender
Salmdorfer Straße 15
85540 Haar
Germany
admin@faith-driven.de