Privacy policy

Last updated: June 14, 2026

Michiko Shida ("we", "us") operates this online store at michiko-shida.com. This Privacy Policy explains how we collect, use, and protect your personal data when you visit or make a purchase from our store.

Contact / Data Controller
Michiko Shida
Speyererstr. 5-7
60327 Frankfurt am Main, Germany
Email: ms@michiko-shida.com
Phone: +49 (0) 173 232 52 42

1. Personal Information We Collect

Depending on how you interact with our store, we may collect:

  • Contact details: name, address, billing/shipping address, phone number, email address
  • Payment information: credit/debit card details, PayPal account details, transaction information. Note: we do not store full card numbers — these are processed directly by our payment providers.
  • Order information: items purchased, order history, returns and exchanges
  • Device and usage information: IP address, browser type, pages visited, cookies

2. Legal Basis for Processing (Art. 6 GDPR)

We process your personal data on the following legal bases:

  • Performance of a contract (Art. 6(1)(b) GDPR): to process your order, arrange delivery, and handle returns
  • Legal obligation (Art. 6(1)(c) GDPR): to comply with tax and commercial law requirements (e.g. retention of invoices)
  • Legitimate interests (Art. 6(1)(f) GDPR): to prevent fraud, ensure security, and improve our services

3. How We Use Your Data

We use your personal data to:

  • Process and fulfil your orders, including payment and delivery
  • Send order confirmations and shipping notifications
  • Handle returns, refunds and customer enquiries
  • Comply with applicable legal obligations
  • Prevent fraud and ensure the security of our store

We do not use your data for marketing emails or share it with advertising partners unless you have explicitly consented.

4. Payment Processors

We use the following third-party payment providers. When you make a payment, your payment data is transmitted to and processed by them directly:

Shopify Payments / Stripe
Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland
Privacy policy: https://stripe.com/privacy

PayPal
PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg
Privacy policy: https://www.paypal.com/webapps/mpp/ua/privacy-full

These providers process your payment data as independent data controllers under their own privacy policies. We recommend reading their privacy policies.

5. Our Hosting Platform: Shopify

Our store is hosted on Shopify Inc. Shopify processes personal data on our behalf as a data processor. For information about how Shopify handles data, see the Shopify Privacy Policy. For data processed directly by Shopify, you may also visit the Shopify Privacy Portal.

6. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, and in particular:

  • Order data: 10 years (as required by German commercial and tax law)
  • Customer account data: until you delete your account or request erasure
  • Communication records: up to 3 years

7. International Data Transfers

Our store is hosted and operated using services based in the United States and Ireland. Where personal data is transferred outside the European Economic Area, we rely on the European Commission's Standard Contractual Clauses or equivalent safeguards.

8. Your Rights

Under the GDPR, you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Delete your data ("right to be forgotten"), where legally permitted
  • Restrict or object to certain types of processing
  • Data portability — receive your data in a structured, machine-readable format
  • Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at ms@michiko-shida.com.

9. Right to Lodge a Complaint

If you believe we have not handled your personal data in accordance with applicable law, you have the right to lodge a complaint with the competent supervisory authority:

Der Hessische Beauftragte für Datenschutz und Informationsfreiheit
Postfach 3163, 65021 Wiesbaden
www.datenschutz.hessen.de

10. Cookies

Our store uses cookies necessary for the functioning of the online store (e.g. shopping cart). We do not use tracking or advertising cookies. You can manage cookie settings in your browser at any time.

11. Children

Our store is not directed at children under the age of 16. We do not knowingly collect personal data from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date.