Privacy policy

Last updated: 6 October 2026

Supplier EU (“Supplier EU”, “we”, “us”, or “our”) operates this website and online store and provides digital products, supplier information, educational resources, and related services (collectively, the “Services”).

Our store is powered by Shopify, which provides the ecommerce infrastructure that enables us to offer our Services.

This Privacy Policy explains how we collect, use, store, and disclose your personal data when you visit our website, purchase our products, contact us, or otherwise use our Services.

We process personal data in accordance with applicable European Union and European Economic Area data protection laws, including the General Data Protection Regulation (“GDPR”).

1. Personal Data We Collect

“Personal data” means information relating to an identified or identifiable individual.

Depending on how you interact with our Services, we may collect the following categories of personal data:

Contact information, such as your name, email address, telephone number, and billing address.

Order and transaction information, including products purchased, order history, transaction details, payment status, refunds, and related purchase information.

Payment information. Payments are processed through Shopify and/or third-party payment providers. We generally do not directly store complete payment card details.

Account information, where applicable, including login details, account preferences, and settings.

Communications, including information you provide when contacting customer support, submitting a contact form, or otherwise communicating with us.

Device and technical information, such as your IP address, browser type, device information, operating system, and other technical identifiers.

Usage information, including information about how you interact with our website, such as pages and products viewed and other activity on our Services.

2. How We Collect Personal Data

We may collect personal data:

• Directly from you when you make a purchase, create an account, contact us, subscribe to communications, or otherwise provide information to us.
• Automatically when you browse or interact with our website, including through cookies and similar technologies.
• From Shopify and service providers that help us operate our business.
• From payment processors, analytics providers, advertising partners, and other third parties where permitted by law.

3. How We Use Your Personal Data

We may use your personal data for the following purposes:

Providing our Services. This includes processing orders, providing access to purchased digital products, managing customer accounts, and providing customer support.

Processing transactions. We use relevant information to process and verify payments, refunds, and other transactions.

Communicating with you. We may send order confirmations, product access information, customer support responses, important service notices, and other communications relating to your purchases or account.

Improving our Services. We may analyse how customers interact with our website to improve our store, products, user experience, and customer support.

Marketing and advertising. Where permitted by law, we may use your information to send promotional communications or provide advertising relating to our Services. Where consent is required, we will request your consent before carrying out such processing.

Security and fraud prevention. We may process information to detect, investigate, and prevent fraudulent, abusive, illegal, or malicious activity and to protect our customers, website, and business.

Legal compliance. We may process personal data where necessary to comply with applicable laws, regulatory requirements, legal proceedings, or lawful requests from authorities.

4. Legal Bases for Processing

Where the GDPR applies, we process personal data only where we have a valid legal basis.

Depending on the circumstances, our legal bases may include:

Performance of a contract — where processing is necessary to process your order, provide purchased digital content, or otherwise fulfil our agreement with you.

Legitimate interests — where processing is reasonably necessary to operate, protect, secure, or improve our business and Services, provided that those interests are not overridden by your rights and freedoms.

Consent — where you have given us permission for specific processing, such as certain marketing activities or the use of non-essential cookies.

Legal obligation — where processing is necessary for us to comply with applicable laws or regulatory requirements.

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

5. How We Share Personal Data

We may share personal data with third parties where reasonably necessary to operate and provide our Services.

These third parties may include:

Shopify, which provides the ecommerce platform and infrastructure used to operate our online store.

Payment processors, which process customer payments and transactions.

Technology and service providers, including providers of digital product delivery, website functionality, hosting, analytics, email services, customer support, fraud prevention, and other services required to operate our business.

Advertising and marketing providers, where permitted by applicable law and subject to any consent requirements.

Professional advisers, such as accountants, lawyers, insurers, or other professional service providers where reasonably necessary.

Government authorities or other parties, where disclosure is required by law, necessary to respond to lawful requests, protect our legal rights, investigate fraud, or enforce our agreements.

We may also disclose personal data in connection with a merger, acquisition, restructuring, financing, sale, or transfer of all or part of our business.

We do not sell personal data to unrelated third parties for their independent use in exchange for money.

6. Shopify

Our online store is powered by Shopify.

Shopify processes certain personal data when you visit or interact with our store, including information necessary to provide ecommerce functionality, process transactions, maintain security, prevent fraud, and provide its services.

Personal data processed through Shopify may be transferred to or processed in countries outside your country of residence.

Shopify may also process certain information for its own purposes as permitted under applicable law and its privacy terms.

For additional information regarding Shopify's processing of personal data, please review Shopify's applicable privacy documentation.

7. Cookies and Similar Technologies

We and our service providers may use cookies, pixels, and similar technologies to operate our website, remember preferences, understand website usage, improve our Services, maintain security, and, where permitted, provide advertising.

Some cookies are necessary for our website and online store to function properly.

Other cookies, such as analytics or advertising cookies, may require your consent under applicable law.

Where required by EU/EEA law, non-essential cookies will only be used after you provide consent.

You may manage applicable cookie preferences using the cookie consent controls available on our website.

You may also be able to control cookies through your browser settings. Disabling certain cookies may affect the functionality of our website.

8. Marketing Communications

Where permitted by law, we may send you marketing communications relating to our products, Services, promotions, or other relevant offers.

Where consent is required, we will only send such communications after obtaining your consent.

You may unsubscribe from marketing emails at any time by using the unsubscribe link contained in the relevant email or by contacting us.

Unsubscribing from marketing communications does not prevent us from sending necessary transactional or service-related communications, such as order confirmations, purchased product access information, security notices, or customer support responses.

9. Third-Party Websites and Services

Our website or digital products may contain links to third-party websites, suppliers, marketplaces, social media platforms, or other external services.

These third parties operate independently from us and may collect or process personal data according to their own privacy policies.

We are not responsible for the privacy practices, security, accuracy, availability, or content of independent third-party websites or services.

We encourage you to review the privacy policies of third-party services before providing personal information to them.

10. International Data Transfers

Some of our service providers may process personal data outside the European Economic Area (“EEA”).

Where personal data is transferred outside the EEA, we will rely on an appropriate legal transfer mechanism where required by applicable law.

These mechanisms may include:

• An adequacy decision adopted by the European Commission;
• Standard Contractual Clauses approved by the European Commission; or
• Another legally recognised safeguard for international data transfers.

11. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected.

The applicable retention period may depend on the nature of the information, our contractual relationship with you, accounting and tax requirements, legal obligations, fraud-prevention requirements, dispute resolution, and other legitimate business needs.

When personal data is no longer required, we may delete, anonymise, or otherwise securely dispose of it in accordance with applicable law.

12. Data Security

We use reasonable technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration, destruction, or disclosure.

However, no method of electronic transmission or storage is completely secure. Therefore, we cannot guarantee absolute security of personal data.

You are responsible for maintaining the confidentiality of any account credentials you use in connection with our Services.

13. Your GDPR Rights

If the GDPR applies to you, you may have certain rights regarding your personal data, including the right to:

• Request access to personal data we hold about you.
• Request correction of inaccurate or incomplete personal data.
• Request deletion of your personal data in applicable circumstances.
• Request restriction of processing in applicable circumstances.
• Object to certain processing based on legitimate interests.
• Object to direct marketing at any time.
• Request portability of certain personal data where applicable.
• Withdraw consent at any time where processing is based on consent.
• Lodge a complaint with a competent data protection supervisory authority.

These rights may be subject to conditions, exceptions, or limitations under applicable law.

We may need to verify your identity before processing certain privacy requests.

To exercise your rights, contact us at suppliereu.support@gmail.com.

14. Automated Decision-Making

We do not intend to make decisions that produce legal or similarly significant effects on you solely through automated processing unless permitted by applicable law.

Some service providers may use automated systems for purposes such as fraud detection, payment security, and risk assessment.

15. Children's Privacy

Our Services are not intended for children.

We do not knowingly collect personal data from children in violation of applicable law.

If you believe that a child has provided personal data to us unlawfully, please contact us at suppliereu.support@gmail.com so that we can investigate and, where appropriate, delete the information.

16. Complaints

If you have concerns about how we process your personal data, please contact us first so that we can attempt to resolve the issue.

You may also have the right to lodge a complaint with the competent data protection supervisory authority in the EU/EEA country where you live, work, or where you believe an infringement of applicable data protection law occurred.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our Services, business practices, technology, legal requirements, or other operational reasons.

When we make changes, we will publish the updated Privacy Policy on our website and update the “Last updated” date at the top of this policy.

We encourage you to review this Privacy Policy periodically.

18. Contact Us

If you have questions about this Privacy Policy, would like to exercise your data protection rights, or have a privacy-related complaint, please contact us:

Supplier EU
Email: suppliereu.support@gmail.com

For the purposes of applicable data protection law, the legal entity operating Supplier EU is the data controller responsible for the processing of personal data described in this Privacy Policy.