Privacy policy

Effective Date: 25.09.26

This Privacy Policy describes how SupplyDraw (the "Site", "we", "us", or "our") collects, uses, and discloses your Personal Information when you visit, use our services, or make a purchase from supplydraw.com (the "Site").

As a business, we are committed to protecting your privacy and processing your data in accordance with the General Data Protection Regulation (GDPR) and applicable national data protection laws.

1. The Data Controller

For the purposes of the GDPR, the data controller responsible for your personal information is: SupplyDraw 

Support Contact: supplydraw@gmail.com

2. Personal Information We Collect

When you visit the Site, we collect certain information about your device, your interaction with the Site, and information necessary to process your purchases. We may also collect additional information if you contact us for customer support.

Device Information

  • Purpose of collection: To load the Site accurately for you, and to perform analytics on Site usage to optimize our operations.

  • Source of collection: Collected automatically when you access our Site using cookies, log files, web beacons, tags, or pixels.

  • Information collected: Version of web browser, IP address, time zone, cookie information, what sites or products you view, search terms, and how you interact with the Site.

Order Information

  • Purpose of collection: To provide products or services to you, process your payment information, arrange for shipping, provide you with invoices and/or order confirmations, communicate with you, screen our orders for potential risk or fraud, and provide you with relevant marketing (if in line with your preferences).

  • Source of collection: Collected directly from you.

  • Information collected: Name, billing address, shipping address, payment information (including credit card numbers), email address, and phone number.

Customer Support Information

  • Purpose of collection: To provide customer support and resolve disputes or inquiries.

  • Source of collection: Collected directly from you when you contact our support team.

  • Information collected: Name, email address, order details, and any other information you choose to provide in your correspondence.

3. Legal Basis for Processing (GDPR)

If you are a resident of the European Economic Area (EEA), we process your personal information under the following lawful bases:

  • Your consent: For example, when you opt-in to receive our email newsletters.

  • The performance of the contract between you and the Site: To process and fulfill your orders.

  • Compliance with our legal obligations: Such as retaining transaction records for tax and accounting purposes.

  • For our legitimate interests: Which do not override your fundamental rights and freedoms, such as fraud prevention, network security, and business analytics.

4. Sharing Your Personal Information

We share your Personal Information with service providers to help us provide our services and fulfill our contracts with you.

  • Shopify: We use Shopify to power our online store. You can read more about how Shopify uses your Personal Information here: https://www.shopify.com/legal/privacy.

  • Payment Processors: We utilize secure payment gateways (such as Shopify Payments). Your payment data is transmitted securely and encrypted.

  • Logistics Partners: We share your name, shipping address, and phone number with shipping carriers to deliver your orders.

  • Legal Compliance: We may share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant, or other lawful requests for information we receive, or to otherwise protect our rights.

5. International Data Transfers

Our store is hosted on Shopify, meaning your data may be transferred, stored, and processed outside the EEA, including in Canada and the United States. When your personal data is transferred outside the EEA, we ensure it is protected by relying on recognized legal mechanisms, such as the European Commission's Standard Contractual Clauses or ensuring the recipient is located in a jurisdiction with adequate data protection laws.

6. Cookies and Tracking Technologies

We use cookies to enhance your browsing experience, analyze site traffic, and serve targeted advertisements.

  • Necessary Cookies: Required for the operation of our Site (e.g., adding items to a cart, secure checkout).

  • Analytics Cookies: Allow us to recognize and count the number of visitors and see how visitors move around our Site.

  • Marketing Cookies: Used to track visitors across websites to display relevant advertisements.

You can choose to accept or decline cookies through your browser settings. Please note that disabling cookies may affect the functionality of our Site.

7. Data Retention

When you place an order through the Site, we will retain your Order Information for our records for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements (such as bookkeeping laws).

8. Your Data Protection Rights

If you are a resident of the EEA, you have the following rights regarding your personal data:

  • Right to Access: You have the right to request copies of your personal data.

  • Right to Rectification: You have the right to request that we correct any information you believe is inaccurate or incomplete.

  • Right to Erasure (Right to be Forgotten): You have the right to request that we erase your personal data, under certain conditions.

  • Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data, under certain conditions.

  • Right to Object to Processing: You have the right to object to our processing of your personal data, particularly for direct marketing purposes.

  • Right to Data Portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.

To exercise any of these rights, please contact our support team at supplydraw@gmail.com.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal, or regulatory reasons.

10. Complaints

If you are an EEA resident and you believe we are unlawfully processing your personal information, you have the right to complain to your local data protection supervisory authority. 

11. Contact Us

For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e-mail: supplydraw@gmail.com