Privacy Policy

1. Who we are

This site is operated by PLUMAS COLLECTIVE. For any privacy-related questions, please contact us at info@plumascollective.com.

2. Data we process

• Order and checkout data processed by Shopify (our processor) when you buy.
• Technical data (IP, user agent) strictly necessary to deliver the site.
• With your consent: analytics and marketing identifiers (cookies, pixels).

3. Legal basis (GDPR Art. 6)

• Contract performance — processing your order.
• Legal obligation — invoicing and tax records.
• Consent — analytics and marketing cookies; you can withdraw at any time.
• Legitimate interest — site security and fraud prevention.

4. Recipients & transfers

We share data with: Shopify (checkout & order management), Vercel (hosting), and — only with consent — Google (Analytics) and Meta (Pixel). Some recipients may transfer data outside the EEA under Standard Contractual Clauses.

5. Your rights

Under GDPR you have the right to access, rectify, erase, restrict and port your data, and to object to processing. You can lodge a complaint with the Hellenic Data Protection Authority (HDPA) or your local supervisory authority.

6. Cookies

See our Cookie Policy for the full list and to change your preferences.