Privacy Policy

Last updated: 27 August 2026

This Privacy Policy explains how Gaja's Vintage, operated by Gaja Bohte and trading through the online shop Gaja Earth, collects, uses, stores and protects personal information when you visit our website, create an account, place an order, contact us, subscribe to our emails, or otherwise interact with our shop.

Gaja Earth is hosted by Shopify, which provides the technology used to operate our online shop, checkout, customer accounts and related services.

1. Who is responsible for your personal data?

The responsible party for the processing of personal data through Gaja Earth is:

Gaja's Vintage
Owner: Gaja Bohte
Auf dem Zehnthöbel 20b, 64572, Büttelborn, 

Germany

Email: gajaearth.shop@gmail.com
Phone: +49 16 36674240

Gaja Earth is the online shop operated by Gaja's Vintage.

2. What personal information do we collect?

Depending on how you use Gaja Earth, we may collect the following information:

Information you provide to us

This may include:

• Your name

• Billing and delivery address

• Email address

• Telephone number, where provided

• Information you provide when contacting us

• Information associated with your customer account

• Order and transaction information

• Information you provide when subscribing to our newsletter or marketing emails

• Information you provide when requesting a return, cancellation or other customer service

Information collected when you use our website

When you visit Gaja Earth, certain technical information may be collected automatically, such as:

• IP address

• Browser and device information

• Operating system

• Information about how you interact with our website

• Pages and products you view

• Information about your shopping cart and checkout activity

• Cookies and similar technologies

Some of this information is collected through Shopify and its services.

Payment information

When you make a purchase, payment information is processed by Shopify and the relevant payment provider or payment method selected at checkout.

Depending on the payment method available to you, this may include card payments, Shop Pay, Apple Pay, Google Pay and other payment methods offered through our Shopify checkout.

We do not need to store your complete payment card details ourselves in order to process your order.

3. How do we use your information?

We use personal information for the following purposes:

To process and fulfil your orders

We use your information to:

• Process your purchase

• Take and verify payment

• Prepare and ship your order

• Send order and shipping notifications

• Handle returns, cancellations and refunds

• Provide customer support

• Keep records required by law

To provide and manage customer accounts

If you create a customer account, we use the information associated with your account to provide account functionality, including access to your orders and account information.

To communicate with you

We may use your contact information to respond to questions, requests and customer-service messages.

We may also send you necessary messages relating to your orders, account or transactions.

Marketing and newsletters

If you choose to subscribe to Gaja Earth marketing emails, we may use your email address to send you information about:

• New drops and collections

• Shop updates

• Special offers

• Other Gaja Earth news

We use a double opt-in process for email marketing. This means that after subscribing, you are asked to confirm your email address before receiving marketing communications.

You can unsubscribe from marketing emails at any time using the unsubscribe link included in our emails.

Shop reminders and personalised shopping features

Our Shopify shop may use features that provide reminders or personalised shopping experiences, including:

• Cart reminders

• Browse reminders

• Back-in-stock notifications

• Price-drop notifications

• Other Shop-related reminders

These features may use information about products you have viewed, added to your cart or previously interacted with.

Website operation, security and fraud prevention

We may process technical and transaction information to:

• Keep the website functioning

• Protect the shop and our customers

• Detect and prevent fraudulent or harmful activity

• Maintain the security of payments and accounts

• Troubleshoot technical problems

• Improve the performance of the shop

Legal and accounting obligations

We may process and retain information where this is necessary to comply with legal, tax, accounting or other statutory obligations, or to establish, exercise or defend legal claims.

4. Legal bases for processing

Where the GDPR applies, we process personal data on one or more of the following legal bases:

• Contract: where processing is necessary to process and fulfil an order or provide a service you have requested.

• Legal obligation: where we are required to retain or process information under applicable law.

• Legitimate interests: where processing is necessary for purposes such as maintaining the security and functionality of our shop, preventing fraud, managing our business and improving our services, provided that our interests do not override your rights.

• Consent: where we ask for your consent, for example for certain marketing or non-essential cookies and similar technologies. You may withdraw consent at any time without affecting processing that took place before withdrawal.

5. Shopify and our service providers

Gaja Earth is operated using Shopify.

Shopify processes personal information on our behalf to provide services including hosting, checkout, customer accounts, order management, payment-related services, security, analytics and other shop functionality.

We also use service providers where necessary to operate the shop, including payment and shipping providers.

Your information may therefore be processed by these providers only to the extent necessary to provide their services or fulfil their legal obligations.

Shopify Network Intelligence

Shopify Network Intelligence is enabled for our shop.

When enabled, Shopify may securely use customer data from our shop together with data from other Shopify merchants and Shopify in order to provide certain enhanced services. These services may include improved shop functionality, personalization, performance and advertising-related features.

Other Shopify merchants do not receive access to your personal data from our shop.

Shopify may process information about your interactions with our shop and may share information with third parties where necessary to provide these services.

For more information about how Shopify processes personal data and your rights in relation to Shopify's processing, please see Shopify's Privacy Policy and Shopify's privacy portal at Shopify Privacy Portal.

6. Cookies and similar technologies

Gaja Earth uses cookies and similar technologies that are necessary for the operation and security of the shop.

We may also use non-essential cookies and similar technologies for purposes such as analytics, personalization and marketing.

Our Shopify cookie banner allows visitors to make choices about non-essential cookies where consent is required.

You can manage your cookie preferences through the cookie controls provided on our website.

7. Data sharing and third parties

We may share personal information with third parties where necessary to operate Gaja Earth, including:

• Shopify

• Payment providers and financial institutions involved in processing your payment

• Shipping and delivery providers, including DHL

• Service providers that help us operate our website, communications or business

• Authorities or other parties where disclosure is required by law or necessary to protect our rights or prevent fraud

We do not sell your personal information as a general business practice.

8. Social media and external links

Our website may contain links to external websites or social media platforms, including Instagram.

If you follow a link to another website or platform, that service's own privacy policy and terms apply.

We are not responsible for the privacy practices of external websites or platforms that we do not control.

9. How long do we keep your information?

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy.

Some information must be retained for longer periods because of legal, tax and accounting requirements.

Information associated with customer accounts may be retained while the account remains active, unless deletion is requested or retention is otherwise required or permitted by law.

Marketing information is retained until you unsubscribe or otherwise withdraw your consent, subject to any information we are required to retain for other legitimate purposes.

10. Your rights

Depending on the circumstances and applicable law, you have rights including:

• The right to request access to your personal data

• The right to request correction of inaccurate data

• The right to request deletion of your data

• The right to request restriction of processing

• The right to object to certain processing

• The right to data portability

• The right to withdraw consent where processing is based on consent

You also have the right to lodge a complaint with a data protection supervisory authority.

To exercise your rights, please contact us using the contact details below.

We may need to verify your identity before processing certain requests.

11. International data transfers

Because Shopify and some of the service providers we use may operate internationally, your personal information may be processed outside Germany or the European Economic Area.

Where personal data is transferred outside the EEA, appropriate safeguards required by applicable data protection law will be used where necessary.

12. Children's privacy

Gaja Earth is not intended for children to make purchases independently.

We do not knowingly collect personal information from children for marketing purposes.

If you believe that a child has provided us with personal information unnecessarily, please contact us so that we can review the situation.

13. Data security

We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse or alteration.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our shop, services, technology or legal requirements.

The latest version will always be published on this page, together with the date of the most recent update.

15. Contact

If you have questions about this Privacy Policy or would like to exercise your data protection rights, please contact:

Gaja's Vintage
Owner: Gaja Bohte
Email: gajaearth.shop@gmail.com
Phone: +49 16 36674240
Auf dem Zehnthöbel 20b, 64572 Büttelborn

Last updated: 27 August 2026