6. Data Sharing

We may share personal data with service providers where necessary to operate our business. These may include: • Shopify, as our e-commerce platform • Payment providers such as Shopify Payments and PayPal • Email and communication service providers • Analytics and technical service providers • Advertising and measurement partners such as Meta, where applicable and subject to any consent required by law • Providers that assist us in securely delivering digital products or operating our website These providers may process personal data only for purposes connected to the services they provide to us and subject to applicable contractual and legal requirements. We do not sell or rent your personal data. We may also disclose personal data where required by law, regulation, court order, or competent authority.

7. International Data Transfers

Some of our service providers may process personal data outside your country of residence. Where personal data is transferred outside the European Economic Area or another jurisdiction requiring appropriate safeguards, we rely on legally recognized transfer mechanisms where required, which may include adequacy decisions or Standard Contractual Clauses approved by the European Commission.

8. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy or as required by applicable law. For example: • Transaction, tax, and accounting information may be retained for the period required by applicable law, which may extend to several years • Marketing information may generally be retained until you withdraw your consent or unsubscribe • Customer support correspondence may be retained for as long as reasonably necessary to handle requests and protect legitimate business interests • Technical and analytics information may be retained according to the applicable service provider's retention settings and legal requirements