Privacy policy

Privacy Policy

Last updated: October 17, 2026

Welcome to Fluffy Hats. We value your privacy and are committed to handling your personal information transparently and responsibly.

This Privacy Policy explains how we collect, use, share and protect personal data when you visit our website, purchase products or contact our customer support team.

1. Data Controller

Fluffy Hats is operated by:

ESVlife e.U.
Company Registration Number: FN 666825a
Gerichtsbergstraße 20
4840 Vöcklabruck
Austria

Email: support@fluffyhats.com

Website: https://fluffyhats.com

ESVlife e.U. is responsible for the personal data processed in connection with operating the Fluffy Hats online store.

2. Personal Information We Collect

Depending on how you interact with our store, we may process:

Name and contact information, including email address, phone number and delivery address.
Order details, purchased products, transaction amounts and order history.
Payment and transaction information provided through our payment service providers.
Customer service inquiries and correspondence.
Technical information, such as IP address, browser type, device information and website activity.
Marketing preferences and communication consent.

Payment card information is generally processed through the payment services offered at checkout. We do not need to receive full payment card details to fulfill your order.

3. How We Use Your Information

We process personal data for the following purposes and legal bases under the GDPR:

Order processing and fulfillment

To confirm purchases, process payments, arrange shipping, provide tracking updates and handle returns.

Legal basis: Performance of a contract (Article 6(1)(b) GDPR).

Customer service

To respond to inquiries, resolve complaints and assist with orders.

Legal basis: Performance of a contract or our legitimate interests in providing customer support (Article 6(1)(b) or (f) GDPR), as appropriate.

Legal and accounting obligations

To maintain legally required invoices, records and documentation.

Legal basis: Compliance with a legal obligation (Article 6(1)(c) GDPR).

Store security and fraud prevention

To protect our website, customers and transactions against misuse and fraud.

Legal basis: Our legitimate interests (Article 6(1)(f) GDPR), where applicable.

Marketing communications

To send promotional emails or other direct marketing communications where permitted by applicable law.

Legal basis: Consent (Article 6(1)(a) GDPR) or another applicable legal basis where legally permitted.

You may unsubscribe from marketing communications at any time.

Analytics and advertising

To understand website performance, measure campaigns and improve our advertising where these services are enabled.

Where required by law, we rely on your consent before using non-essential cookies or comparable tracking technologies.

4. Shopify and Our Service Providers

Our online store operates using Shopify.

We may share personal data with service providers where necessary to operate our business, including:

Shopify, for online store hosting, checkout and related services.
Payment service providers, for processing transactions.
DSers, where used for order and supplier management.
AliExpress sellers and fulfillment partners, where required to fulfill your order.
Shipping and logistics companies, for delivery and tracking.
Customer support and email service providers, where used to communicate with customers.
Analytics and advertising providers, where these services are enabled and legally permitted.

We share only the information reasonably necessary for the relevant service.

5. Dropshipping and Order Fulfillment

Fluffy Hats works with external suppliers and fulfillment partners.

To fulfill an order, we may provide the relevant supplier or logistics provider with information such as the recipient's name, shipping address, contact details, ordered products and shipping instructions.

These partners may operate outside Austria or the European Economic Area.

We remain your contractual seller even when a third-party fulfillment partner ships your order.

6. International Data Transfers

Some of our technology providers, suppliers or fulfillment partners may process personal information outside the European Economic Area, including in countries that may have different data protection standards.

Where the GDPR requires additional safeguards for international transfers, we must ensure that an appropriate legal transfer mechanism is in place.

For further information about transfers relating to your personal data, please contact support@fluffyhats.com.

7. Cookies and Tracking Technologies

Our website uses technologies necessary for essential functions such as shopping carts, checkout, security and website operation.

Additional analytics, advertising or personalization technologies may be used depending on the services enabled in our store.

Where legally required, non-essential tracking technologies are used only after obtaining your consent.

You can manage your available cookie and privacy preferences through the privacy controls provided on our website.

8. Data Retention

We retain personal data only for as long as necessary for the purposes described in this policy or as required by applicable law.

Certain business, invoice and accounting records are generally subject to a seven-year statutory retention period under Austrian law. Longer retention may be necessary in specific circumstances, including ongoing legal proceedings.

Other personal data, such as support correspondence and marketing information, is retained only as long as justified by its purpose and the applicable legal basis.

Where processing is based on consent, you may withdraw that consent at any time, without affecting the lawfulness of earlier processing.