Privacy Policy
UniShaman (unishaman.com) Last updated: November 3, 2026
1. Who we are
This website, unishaman.com, is operated by Viiskanta Constellation, FI28596934. We are the data controller for personal data collected through this website.
2. What this policy covers
This policy explains what personal data we collect when you visit our shop, create an account, place an order, or contact us, why we use it, who we share it with, and what rights you have. It follows the EU General Data Protection Regulation (GDPR) and applicable national law.
3. Personal data we collect
Order and account data
- Name, billing and shipping address, email address, phone number
- Order contents, order history, shipping method and delivery details
- Account login details (your password is stored in encrypted form)
- Wishlist items, if you use the wishlist feature
Payment data Payments are processed by Stripe. We do not see or store your full card number or security code. We receive limited information such as payment status, the last four digits of your card, the card brand, and a transaction ID.
Technical data
- IP address, browser type, device information, pages viewed, date and time of visit
- Cookies and similar technologies (see section 9)
Communications
- Messages you send us through contact forms or email, and our replies
4. Why we use your data and our legal basis
| Purpose | Data used | Legal basis |
|---|---|---|
| Processing and delivering your order | Order, contact, address, payment status | Performance of a contract (GDPR Art. 6(1)(b)) |
| Taking payment and preventing fraud | Payment and technical data | Contract; our legitimate interest in preventing fraud (Art. 6(1)(f)) |
| Customer account | Account and order data | Contract |
| Customer support and returns | Contact and order data, messages | Contract; legitimate interest |
| Bookkeeping, tax and legal obligations | Order and payment records | Legal obligation (Art. 6(1)(c)) |
| Site security and basic site operation | Technical data | Legitimate interest |
| Analytics and marketing, if used | Cookie and usage data | Consent (Art. 6(1)(a)) |
| Newsletters, if offered | Email address | Consent |
5. Who we share data with
We share personal data only with service providers that need it to run the shop, and only as far as necessary:
- Printful – our print-on-demand fulfilment partner. We send your name, shipping address, email address, phone number (where required by the carrier) and order details so your items can be printed and shipped. Printful acts as an independent controller for this data for its own fulfilment and customs purposes.
- Stripe and the payment methods offered through it (such as cards, Apple Pay, Google Pay, Link, Cash App Pay, Revolut Pay and MobilePay) – payment processing and fraud prevention.
- Shipping carriers used by Printful – delivery.
- Hosting, email and website service providers – to host the site, store data and send transactional emails. [name your hosting provider]
- Accounting and tax advisers – to meet bookkeeping and tax obligations. [if applicable]
- Authorities – where we are legally required to disclose data.
We do not sell your personal data.
6. International transfers
Some of our providers, including Stripe and Printful, may process data outside the European Economic Area, including in the United States. Where this happens, we rely on safeguards required by GDPR, such as the European Commission’s Standard Contractual Clauses or an adequacy decision, as provided by the relevant provider.
7. How long we keep data
- Order and invoice records: kept for the period required by bookkeeping and tax law (typically 6–10 years, depending on country). [adjust to your country]
- Customer accounts: until you ask us to delete the account, or after a long period of inactivity.
- Support messages: [for example, 24 months] after the matter is closed.
- Marketing consents: until you withdraw consent.
- Technical logs: [for example, 12 months] or less.
8. Your rights
Under GDPR you have the right to:
- access the personal data we hold about you
- have inaccurate data corrected
- have your data erased, where there is no legal reason for us to keep it
- restrict or object to certain processing, including processing based on legitimate interest
- receive your data in a portable format
- withdraw consent at any time, without affecting earlier processing
To use these rights, email [privacy email address]. We may ask you to confirm your identity. We aim to reply within one month.
You also have the right to complain to your local data protection authority. [Name and website of the authority in your country, e.g. the national data protection ombudsman.]
9. Cookies
We use cookies and similar technologies that are necessary for the shop to work, such as keeping items in your cart, keeping you logged in and completing checkout securely. Stripe may also set cookies or use scripts to detect fraud and process payments.
[If you use analytics, advertising or social media tools, list them here: provider, purpose, cookie lifetime. Non-essential cookies require your consent before they are set, and you should provide a cookie banner that lets visitors accept or decline them.]
You can delete or block cookies in your browser settings, but parts of the shop, including the cart and checkout, may stop working.
10. Security
We use reasonable technical and organisational measures to protect your data, including encrypted (HTTPS) connections and restricted access to administrator accounts. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security.
11. Children
Our shop is not directed at children, and we do not knowingly collect personal data from children under 16. If you believe a child has given us personal data, contact us and we will delete it.
12. Automated decisions
We do not make decisions about you based solely on automated processing that significantly affect you. Our payment provider may use automated fraud checks when you pay.
13. Links to other websites
The shop may link to third-party websites. We are not responsible for their privacy practices, so please read their policies.
14. Changes to this policy
We may update this policy from time to time. The latest version is always published on this page, with the date of the last update at the top.
