Privacy policy

Privacy Policy

This privacy policy describes how Pancreitis, operated by Culani LLC (212 N. 2nd St. Ste 100, Richmond, KY 40475, United States), collects, processes, and protects your personal data when you visit our website pancreitis.com or shop with us.

1. Data Collected

  • Contact details: name, email address, telephone number, delivery address
  • Order data: order history, encrypted payment information
  • Device data: IP address, browser type, operating system
  • Usage data: pages visited, click behavior, referring URLs
  • Cookies (see section 4)

2. Purpose of Processing

  • Processing and delivery of orders
  • Customer communication and support
  • Fraud prevention and security
  • Improvement of our website and services
  • Marketing communications (only with explicit consent)

3. Legal Bases for Processing (GDPR Article 6)

  • Performance of a contract (Article 6(1)(b)): processing of orders, payments, and deliveries
  • Legal obligation (Article 6(1)(c)): statutory tax retention requirements, consumer legislation
  • Legitimate interest (Article 6(1)(f)): fraud prevention, website security, analytics services
  • Consent (Article 6(1)(a)): marketing communications and non-essential cookies

4. Cookies and Consent

We use cookies. On your first visit to our website, we ask for your consent via a cookie banner. You can withdraw your consent at any time through the Cookie Settings in the footer. We use the following cookie categories:

  • Strictly necessary cookies: necessary for the store to function correctly (shopping cart, session, security). No consent required.
  • Functional cookies: remember your preferences (language, region).
  • Analytics cookies: Google Analytics (anonymized, IP anonymization enabled) — consent required.
  • Marketing cookies: for personalized advertising — consent required.

5. Retention Periods

  • Order data: 7 years (statutory tax retention requirement)
  • Customer account data: for as long as your account is active + 2 years after the last activity
  • Analytics data: a maximum of 26 months
  • Marketing communications: until consent is withdrawn

6. Disclosures to Third Parties

Data is only disclosed to the following categories where necessary for the performance of the contract:

  • Payment processors: Stripe, PayPal, Apple Pay, Google Pay, Shop Pay
  • Shipping partners: PostNL and partner couriers
  • Hosting services: Shopify Inc. (platform and data storage — US, Standard Contractual Clauses apply)
  • Analytics services: Google Analytics (anonymized)

All third parties are contractually required to comply with applicable data protection legislation.

7. International Transfers

Your data may be transferred to Shopify Inc. (Canada/US) and Google LLC (US). Such transfers take place on the basis of Standard Contractual Clauses (SCCs) approved by the European Commission in accordance with GDPR Article 46.

8. Your Rights

Under the GDPR, you have the right to:

  • Access your personal data
  • Rectification of inaccurate data
  • Erasure of your data ("right to be forgotten")
  • Restriction of processing
  • Data portability
  • Object to processing based on legitimate interests
  • Withdraw consent (without affecting the lawfulness of previous processing)

You can exercise your rights via contact@pancreitis.com. We will respond within 30 days.

9. Right to Lodge a Complaint

You have the right to lodge a complaint with the Dutch Data Protection Authority (AP): autoriteitpersoonsgegevens.nl

10. Contact Details

  • Trade name: Pancreitis
  • Operator / Company: Culani LLC, 212 N. 2nd St. Ste 100, Richmond, KY 40475, United States
  • Address: Voorstraat 48, Utrecht, Netherlands
  • Email: contact@pancreitis.com
  • Telephone: +31 61 374 8903