Privacy Policy
1. Who we are
This Privacy Policy explains how Black Reckon, trading as Black Reckon (“we,” “us,” “our”), collects, uses, and protects your personal data when you visit https://blackreckon.com or buy from us.
We are the data controller responsible for your personal data.
Contact details:
- Business name: Black Reckon
- Address: Wollenberger Straße 7, 13053 Berlin, Germany
- Email: Sale@blackreckon.com
If you have questions about this policy or how we handle your data, please contact us at the email above.
2. The data we collect
We collect and process the following categories of personal data.
Information you give us:
- Name, billing address and delivery address
- Email address and telephone number
- Order details and purchase history
- Account login details, if you create an account
- Any information you include in messages to us
Information we collect automatically:
- IP address and approximate location
- Browser type, device information and operating system
- Pages visited, time on site and referring website
- Cookie and similar tracking data, subject to your consent
Information we do not collect:
- We do not ask for or store more data than we need to fulfill your order and run our business.
- [Confirm: we do not process special category data such as health, ethnicity, or political views, and customers should not send it to us.]
Payment data. We do not store your full card details. Payments are processed by our payment providers (e.g., Stripe, PayPal, Klarna), who handle your card data under their privacy terms and their own security standards.
3. How we use your data, and our legal basis
Under the GDPR we must have a legal basis for each use of your data. The table below sets out what we do and why.
| What we do | Why | Legal basis |
|---|---|---|
| Process and deliver your order | To fulfil our contract with you | Contract (Art. 6(1)(b)) |
| Take payment and prevent fraud | To complete the sale securely | Contract; Legitimate interests |
| Send order and delivery updates | To keep you informed about your purchase | Contract |
| Handle returns, refunds and warranties. | To meet our legal and contractual duties | Contract: Legal obligation |
| Respond to your inquiries. | To provide customer service | Legitimate interests |
| Send marketing emails, if you opt in | To tell you about products and offers | Consent (Art. 6(1)(a)) |
| Analyse website use, if you consent | To improve our site and service | Consent |
| Keep accounting and tax records | To meet German legal retention duties | Legal obligation |
| Comply with export and sale rules for optics | To meet our legal duties on regulated goods | Legal obligation |
You can withdraw consent at any time where consent is the basis, without affecting anything done before you withdrew it.
4. Marketing communications
We only send marketing emails if you have opted in. Every marketing email includes an unsubscribe link, and you can opt out at any time by clicking it or emailing us.
We use Hostinger email provider to manage our mailing list.
Opting out of marketing does not stop essential service messages about orders you have placed, which we must send to fulfill your order.
5. Cookies and analytics
Our website uses cookies. A cookie is a small file stored on your device that helps the site work and helps us understand how you use it.
Essential cookies are necessary for the site to function, such as keeping items in your basket and remembering you are logged in. These do not require consent.
Analytics cookies. We use Google Analytics to understand how visitors use our site, but only if you consent through our cookie banner. Google Analytics sets cookies and processes data, including your IP address. Google may transfer this data outside the EU; see section 7. You can opt out through our cookie banner or through Google’s own opt-out tools.
You can manage or refuse cookies through our cookie banner and through your browser settings. Blocking essential cookies may stop parts of the site working.
For full detail, see our [cookie policy / cookie banner settings].
6. Who we share your data with
We do not sell your personal data. We share it only with parties who help us run our business, and only as far as they need it.
- Payment providers ([e.g. Stripe, PayPal, Klarna]) to process payments
- Shipping and logistics partners (e.g., DHL, DPD, UPS) to deliver your order
- Our website and hosting providers, including WooCommerce and our web host Hostinger
- Google, for website analytics, if you consent
- Professional advisers such as accountants, and authorities where the law requires it
Each of these processes your data under a contract that requires them to protect it and use it only for the agreed purpose.
7. International data transfers
Some of our providers, including Google, may process data outside the European Economic Area. Where that happens, we rely on legal safeguards approved under the GDPR, such as the European Commission’s Standard Contractual Clauses or an adequacy decision, to ensure your data stays protected to EU standards.
8. How long we keep your data
We keep your data only as long as we need it.
- Order and transaction data: retained for [e.g., 10 years] to meet German tax and commercial retention duties (Handelsgesetzbuch and Abgabenordnung).
- Account data: kept while your account is active, then deleted or anonymized after 30 days of inactivity.
- Marketing data: kept until you unsubscribe, then removed from active lists.
- Website analytics: retained for [14 or 26 months] in Google Analytics.
- Inquiries: kept for 14 days after the matter is resolved.
When we no longer need your data, we securely delete or anonymize it.
9. Your rights
Under the GDPR you have the right to
- Access the personal data we hold about you
- Rectify data that is inaccurate or incomplete
- Erase your data (“right to be forgotten”) where there is no overriding legal reason to keep it
- Restrict how we process your data
- Object to processing based on legitimate interests, and to direct marketing
- Data portability, receiving your data in a portable format
- Withdraw consent at any time where consent is the basis
- Not be subject to purely automated decisions with legal effect
To exercise any right, email us . We will respond within one month, as the GDPR requires. There is normally no charge.
Complaints. If you believe we have mishandled your data, please contact us first so we can put it right. You also have the right to complain to your data protection authority.
10. How we protect your data
We use appropriate technical and organizational measures to protect your data, including SSL encryption on our website, restricted access to personal data, and secure, reputable providers for payments and hosting. No method of transmission over the internet is completely secure, but we take reasonable steps to protect your information and notify you and the authorities of any breach as required by law.
11. Children
Our website and products are intended for adults. We do not knowingly collect data from anyone under [16 / the age of digital consent in your country]. If you believe a child has given us data, contact us and we will delete it.
12. Changes to this policy
We may update this policy from time to time. We will post the new version here with an updated “Last updated” date, and for significant changes we will [notify account holders by email / display a notice on the site]. Please check back periodically.
13. Contact us
For any privacy question or to exercise your rights:
This policy should be read alongside our Refund and Returns Policy.
