BackYour data matters
Privacy policy
We believe transparency builds trust. Here's how we handle your personal information and keep it secure.
Privacy policy of shoplab GmbH
At shoplab, accessible from shoplab.cc, one of our main priorities is the privacy of our visitors. This Privacy Policy explains which information shoplab collects and records, and how we use it.
If you have additional questions or require more information about our Privacy Policy, do not hesitate to contact us at [email protected].
General Data Protection Regulation (GDPR)
The controller for the processing of your data is shoplab GmbH, Benzstrasse 8, 85551 Kirchheim near Munich, Germany (full company details are in our imprint).
The legal basis on which shoplab GmbH collects and uses the personal information described in this Privacy Policy depends on the personal information we collect and the specific context in which we collect it:
- shoplab GmbH needs to perform a contract with you (Art. 6(1)(b) GDPR).
- You have given shoplab GmbH permission to do so (Art. 6(1)(a) GDPR).
- Processing your personal information is in the legitimate interests of shoplab GmbH (Art. 6(1)(f) GDPR).
- shoplab GmbH needs to comply with the law (Art. 6(1)(c) GDPR).
shoplab GmbH will retain your personal information only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your information to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our policies.
If you are a resident of the European Economic Area (EEA), you have certain data protection rights. If you wish to be informed what personal information we hold about you, or if you want it removed from our systems, please contact us.
In certain circumstances, you have the following data protection rights:
- The right to access, update or delete the information we have on you.
- The right to rectification.
- The right to object.
- The right of restriction.
- The right to data portability.
- The right to withdraw consent.
- The right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).
The supervisory authority responsible for shoplab GmbH is the Bavarian Data Protection Supervisory Authority (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA), Promenade 18, 91522 Ansbach, Germany. You can also turn to the supervisory authority of the place where you live or work.
Log files
shoplab follows a standard procedure of using log files. These files log visitors when they visit websites. All hosting companies do this as part of their hosting analytics. The information collected by log files includes internet protocol (IP) addresses, browser type, internet service provider (ISP), date and time stamp, referring and exit pages, and possibly the number of clicks. An IP address is personal data under the GDPR, so this information is treated as such. Its purpose is to operate and secure the site, analyse trends, and understand how the site is used - not to identify you personally.
Cookies and web beacons
Like any other website, shoplab uses cookies. Cookies store information such as a visitor's preferences and the pages on the website that were accessed. We use this information to improve the visitor experience by adapting our content to browser type and other details.
Analytics cookies are only set after you have accepted them in our cookie banner. You can change your choice at any time via "Cookie settings" in the footer, and you can block or delete cookies in your browser settings.
These are the entries this website stores in your browser:
- shoplab-cookie-consent (local storage, set by us, not consent-gated) - records your cookie decision, "granted" or "denied", so the banner does not ask again. It is written when you decide, never before, and stays until you clear your browser storage. If your browser blocks storage, we keep the decision in memory for the current session only.
- NEXT_LOCALE (cookie, set by us, not consent-gated) - remembers which language version you are viewing (it is written only when you choose a language in the footer switcher, never automatically) so we can serve you the German or English version. It is set to expire after one year; some browsers shorten that to a few days. You can delete it at any time in your browser settings.
- Google Analytics 4 cookies in the _ga family (_ga and _ga_<measurement-id>), set by Google - audience measurement. Set only after you accept analytics cookies; the names and lifetimes are set by the provider.
- Meta Pixel cookies, primarily _fbp (plus _fbc if you reach us via a link carrying a Meta click ID), set by Meta - measurement of page views and interactions. Set only after you accept analytics cookies; the names and lifetimes are set by the provider.
Services we use
We use the following third-party services to run this website. Google Analytics 4 and the Meta Pixel are loaded only after you have accepted analytics cookies; without your consent they are never loaded at all. If you withdraw your consent, we stop sending them data immediately, and they are not loaded again on any later page you open.
- Google Analytics 4 (Google Ireland Limited) - audience measurement and aggregated website statistics. Loaded only with your consent.
- Meta Pixel (Meta Platforms Ireland Limited) - loads Meta's pixel script, registers one page view and reports the interaction events we define ourselves, for example opening our contact form. Loaded only with your consent.
- Resend (Resend, Inc.) - delivery of the enquiries you send through our contact form to [email protected]. This is necessary to receive and answer your enquiry; the form cannot be submitted without it.
The companies named above are the providers' usual counterparties for customers in the European Economic Area. Where the terms we have signed with a provider name a different group company, that agreement is the operative one.
We do not display advertising on this website, we do not use advertising networks or third-party ad servers, and we do not sell your personal information.
Transfers outside the EU
Resend, Inc. is based in the United States. The enquiries you send through our contact form are therefore transmitted to a provider in a third country. That transfer is safeguarded by the provider's data processing agreement, including the EU Standard Contractual Clauses adopted by the European Commission.
Google Analytics 4 and the Meta Pixel are provided by the European companies named above, and both providers can pass data on to their US parent companies on the same basis. Neither service runs before you have given your consent.
How long we keep your data
We keep personal data only for as long as we need it for the purposes described in this policy, or for as long as a statutory retention period requires.
- Server log files: [retention period to be added by shoplab before launch]
- Enquiries sent through our contact form, meaning your name, company, email address, phone number, website, the services you select, your message and whether you ticked the newsletter box: [retention period to be added by shoplab before launch]
- Analytics data held by Google Analytics 4 and the Meta Pixel: the retention configured in the provider's account settings [to be added by shoplab before launch]
Third-party links and privacy policies
This Privacy Policy does not apply to other websites we link to. We advise you to consult the respective privacy policies of those providers, which also explain how to opt out of certain options.
You can disable cookies through your individual browser options. Detailed information about cookie management in specific browsers can be found on the browser vendors' respective websites.
Scope of this policy
This Privacy Policy applies only to our online activities and to visitors of this website, with regard to the information they share here or that is collected here. It does not apply to information collected offline or via channels other than this website. Our services are aimed at businesses; we do not knowingly collect personal information from children.
Consent and withdrawal
Where we rely on your consent - which is the case for analytics cookies - you give it in our cookie banner and can withdraw it at any time via "Cookie settings" in the footer. Withdrawing your consent does not affect the lawfulness of processing carried out before the withdrawal.
Note: this policy is pending legal review - our lawyer will confirm the final wording before launch.
Get a free consultation
Expert guidance tailored to your Shopify business.