Loading…
1. Controller
Shajiya Akhi, TULI — Designer Desi Wear, Silberstr. 10, 45139 Essen, Germany. Email: info@tuliloom.com. For any data-protection question, reach us at this address.
2. Data processed & purposes
Order fulfilment (name, address, email, optional phone, order details) on the basis of Art. 6(1)(b) GDPR (contract). Payment processing via Stripe incl. PayPal/Klarna/Apple Pay/Google Pay. Invoice and accounting data to meet statutory retention duties (Art. 6(1)(c) GDPR). Newsletter only after explicit double-opt-in consent (Art. 6(1)(a) GDPR) — we store the sign-up and confirmation timestamps as proof.
3. Cookies & analytics
Strictly necessary cookies (cart, consent) are set without consent (§ 25(2) TDDDG). Statistics/marketing services — Google Analytics 4, Google Ads and the Meta Pixel — load only after your consent via our cookie banner (Art. 6(1)(a) GDPR, § 25(1) TDDDG). IP anonymisation is active for Google Analytics. You can withdraw consent at any time via the “Cookie settings” link in the footer.
4. Recipients / processors
Vercel Inc. (hosting, EU region Frankfurt), Supabase (database & file storage, Frankfurt), Stripe Payments Europe Ltd. (payments), Resend (transactional email), DHL (delivery), Google Ireland Ltd. (analytics/ads, consent-based), Meta Platforms Ireland Ltd. (pixel, consent-based) and fal.ai (FAL, Inc., USA — virtual try-on, consent-based). Art. 28 GDPR processing agreements are in place with all processors.
5. Your rights
You have the right to access, rectification, erasure, restriction, portability and objection, and the right to withdraw consent at any time. You may also lodge a complaint with a supervisory authority (for Essen: the State Commissioner for Data Protection NRW). Contact: info@tuliloom.com.
6. Retention
Order and invoice data are kept for up to ten years per German commercial/tax law; newsletter data until consent is withdrawn; consent cookies for twelve months.
7. Virtual try-on
When you use virtual try-on, you voluntarily upload a photo of yourself. Processing is based solely on your explicit consent (Art. 6(1)(a), Art. 9(2)(a) GDPR), given via a checkbox before upload. Your photo is not stored by us and is not used to train AI. It is transmitted once to our provider fal.ai (FAL, Inc., USA) to generate the try-on image and discarded from our system immediately afterwards. The photo is processed solely to generate the try-on image and is not used to train AI models. The transfer involves processing in the USA (safeguarded by EU Standard Contractual Clauses). You can withdraw consent at any time with future effect by no longer using the feature.