Privacy Policy

1. Introduction

With this privacy policy, we inform you about the type, scope, and purpose of the personal data we process. This policy applies to all processing of personal data carried out by us, both in the context of providing our services and in our online presence, including our website, mobile applications, and social media profiles (collectively referred to as the "Online Offering").

The terms used are to be understood as gender-neutral.

2. Controller Information

Responsible for data processing:
Alexander Lücke
Oderstr. 11
12051 Berlin
Germany
Email: alex@ordinarydrip.com

3. Hosting and Website Provider

Our website is hosted on Squarespace. The provider is Squarespace, Inc., 225 Varick Street, 12th Floor, New York, NY 10014, USA.

Our domain is registered and managed through Namecheap, Inc., 4600 East Washington Street, Suite 305, Phoenix, AZ 85034, USA. Namecheap may process technical data such as domain information and DNS settings in the context of domain management.

Privacy policy of Squarespace: https://www.squarespace.com/privacy
Privacy policy of Namecheap: https://www.namecheap.com/legal/general/privacy-policy/

4. Collection and Use of Personal Data

We collect and process personal data when it is necessary for the performance of a contract, for the provision of our online services, or to comply with legal obligations. This includes:

  • Name, email address, billing and shipping addresses

  • IP address and usage data

  • Account and login information (if a customer account is created)

  • Payment and transaction data

  • Communication data (e.g., when contacting us)

5. Customer Accounts

Customers have the option to create a personal account on our website. The account stores personal data such as name, email address, order history, and saved shipping information. This data is used to simplify future purchases and manage customer relationships.

6. Newsletter (Brevo)

We use Brevo (formerly Sendinblue) to manage and send newsletters. The provider is Sendinblue GmbH, Köpenicker Str. 126, 10179 Berlin, Germany.

When you sign up for our newsletter, your email address and, if provided, your name will be stored and processed by Brevo. Subscription follows the double opt-in process.
Brevo's privacy policy: https://www.brevo.com/legal/privacypolicy/

7. Social Media (Instagram)

We maintain an Instagram profile, which is a service provided by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland.

When visiting our Instagram profile, data may be collected and processed by Instagram/Meta for analytics or advertising purposes. We have limited influence on this data processing.
Instagram privacy policy: https://privacycenter.instagram.com/policy/

8. Meta Pixel (Facebook Pixel)

We use the Meta Pixel by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland.

The Meta Pixel allows us to analyze the behavior of visitors to our site to improve our advertising and marketing efforts. Data processed may include IP addresses, browser information, and user activity.
You can manage your preferences via your Meta account.
Meta privacy policy: https://www.facebook.com/privacy/policy/

9. Payment Providers (PayPal and Stripe)

We use the payment service providers PayPal and Stripe to process payments.

  • PayPal is a service by PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.
    PayPal may process payment data, IP addresses, and other data necessary for payment processing.
    PayPal privacy policy: https://www.paypal.com/privacy

  • Stripe is operated by Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland.
    Stripe processes payment data and may also use cookies for fraud prevention.
    Stripe privacy policy: https://stripe.com/privacy

Data is only transmitted to these providers to the extent necessary to process the payment.

10. Data Sharing with Service Providers

In order to provide our services efficiently, we work with external service providers (e.g., hosting, payment processing, email marketing, logistics). These providers may receive personal data only to the extent necessary to perform their specific tasks and are contractually obligated to process such data in accordance with applicable data protection laws (Art. 28 GDPR).

11. International Data Transfers

Some data may be processed by services based outside the EU (e.g., Squarespace, Meta). These transfers are conducted in compliance with GDPR requirements, using mechanisms such as standard contractual clauses approved by the European Commission.

12. Data Retention and Deletion

We store personal data only for as long as necessary for the specified purposes or as required by law. After the purpose has been fulfilled or the retention period has expired, the data will be deleted or anonymized.

13. Data Subject Rights

You have the right to:

  • Access your personal data (Art. 15 GDPR)

  • Rectify incorrect data (Art. 16 GDPR)

  • Delete your data (Art. 17 GDPR)

  • Restrict processing (Art. 18 GDPR)

  • Data portability (Art. 20 GDPR)

  • Object to data processing (Art. 21 GDPR)

  • Lodge a complaint with a supervisory authority (Art. 77 GDPR)

14. Security Measures

We take technical and organizational security measures to protect your data from unauthorized access, loss, or misuse. This includes the use of SSL/TLS encryption on our website.

15. Updates to This Privacy Policy

We reserve the right to update this privacy policy to reflect changes in legal requirements or our services. The current version is always available on our website.