Privacy Policy for CalmShift products

Effective date: April 21, 2026

This Privacy Policy explains how personal data is processed when you interact with CalmShift products and related services offered through glexironoxxle.ddd. The policy is written for customers and visitors in Germany and across the European Economic Area who browse ritual guidance, purchase goods, download digital materials, or contact the team about product questions.

Who is responsible for product-related data

CalmShift operates the Glexironoxxle website experience and coordinates product fulfillment, customer communication, and service improvement. For questions that relate specifically to product orders, delivery, refunds, or digital access, you can use the contact pathways described on the contact page. The operational address for correspondence is Oderfelder Str. 6, 20149 Hamburg, Germany. For written privacy requests, include enough detail to identify your order or message without sharing unrelated sensitive information.

What this policy covers about products

This policy focuses on data processing activities that exist because CalmShift sells and supports products such as digital guides, printed journals, and bundled ritual items. It explains which categories of data are collected, why they are needed to deliver the product you chose, how long they are kept, and which rights you can exercise. General website browsing that does not relate to a product interaction is still described here when it affects product pages, checkout-related flows, or post-purchase support.

Categories of personal data tied to products

Identity and contact data can include your name, email address, phone number when you provide it, and delivery address for physical goods. Product interaction data can include the items you purchased, the date of purchase, payment status references provided by payment partners, download access logs for digital goods, and support messages that reference a product issue. Technical data can include browser type, device category, and limited network identifiers when those signals are needed to secure transactions or prevent misuse of product downloads.

Why product data is processed

Contractual fulfillment for purchases

CalmShift processes your contact and delivery details to confirm an order, ship physical products within Germany, provide tracking information when available, and deliver digital goods through a controlled link or file access path. Without this processing, the product cannot be supplied in a reliable way. Processing may also include communicating about delays, stock limits, or clarifications that protect both sides from incorrect shipments.

Customer support tied to a product

When you contact CalmShift about a product, the content of your message is processed to respond with accurate guidance. This can include explaining how a journal is structured, how a digital guide is accessed, or how a bundled item is intended to be used as part of an evening ritual routine. Support data is limited to what is relevant to the product conversation and is not used to build unrelated profiles.

Legal compliance and accounting records

Certain product transactions must be documented for tax and commercial record-keeping rules applicable in Germany. This can include invoice-related fields and payment references. Retention follows statutory minimums and is described in more detail under retention.

Legal bases under the GDPR for product processing

Where processing is necessary to perform a contract with you, such as delivering a purchased product, the legal basis is Article 6(1)(b) GDPR. Where processing is necessary for compliance with a legal obligation, such as retaining accounting records, the legal basis is Article 6(1)(c) GDPR. Where you give clear consent, such as optional marketing communications that explicitly relate to CalmShift products, the legal basis is Article 6(1)(a) GDPR. Where CalmShift has a legitimate interest in securing its services, preventing fraud, and protecting product downloads from abuse, the legal basis may be Article 6(1)(f) GDPR, balanced against your rights and freedoms.

How long product data is kept

Order records tied to physical products are kept for the period required by commercial and tax law in Germany, typically for multiple years, unless a shorter period is permitted and no ongoing obligation exists. Digital delivery access logs are kept for a limited window that is long enough to verify legitimate access and troubleshoot delivery issues, then reduced or anonymized where feasible. Support messages are kept only as long as needed to resolve the thread and maintain a minimal record of product-related decisions, unless a longer period is required by law or legitimate security needs.

Recipients and processors involved with products

CalmShift may rely on service providers that support product operations, such as hosting providers, email delivery services, payment service providers, and shipping partners. Those providers process data only on documented instructions and provide appropriate safeguards. If a provider is located outside the European Economic Area, CalmShift relies on mechanisms such as Standard Contractual Clauses or other approved transfer tools, together with supplementary measures where appropriate, to protect product-related personal data.

Your rights regarding product-related data

You may request access to personal data processed about you, request correction of inaccurate data, request deletion where legal requirements are met, request restriction of processing in defined cases, object to processing based on legitimate interests where applicable, and request data portability where processing is based on contract or consent and carried out by automated means. You may also withdraw consent at any time where consent is the legal basis, without affecting the lawfulness of processing based on consent before withdrawal. You may lodge a complaint with a supervisory authority, including in Germany.

Security measures for product transactions

CalmShift implements reasonable technical and organizational measures to protect product order data and customer communications. Measures can include access limitations for staff and providers, secure transmission where supported by your connection, and separation of environments where feasible. No method of transmission or storage is completely risk-free, but CalmShift works to reduce risk in proportion to the nature of the products sold and the data involved.

Cookies and similar technologies in relation to products

The website may use cookies or local storage that affect how product pages function, such as remembering consent choices or keeping a session stable while you review offerings. Detailed information is provided in the Cookies Policy, which should be read alongside this document when your question is specifically about storage technologies.

Updates to this product-focused policy

CalmShift may update this Privacy Policy when products change, when legal requirements evolve, or when operational practices are adjusted in a material way. The updated version will be published on glexironoxxle.world with a revised effective date. If you have an ongoing product relationship, significant changes may also be communicated through a reasonable channel when practical.

How to contact CalmShift about privacy

For privacy requests that relate to CalmShift products, use the contact options presented on the contact page. You can reference your order details in a careful manner. The following line repeats the project contact identifier used on the site: message@glexironoxxle.world. If a request requires identity verification, CalmShift may ask for proportionate information to protect your account and product access from unauthorized changes.

2026