Introduction

Welcome to AfroRoots Radiance. We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website, make a purchase, or interact with us through any of our channels.

Please read this policy carefully. By using our website, you agree to the collection and use of your personal information as described in this document.

AfroRoots Radiance operates in accordance with the General Data Protection Regulation (GDPR) — European Union Regulation 2016/679 — and applicable German data protection law.

1. Who We Are

Business Name: AfroRoots Radiance
Business Address: North Rhine Westphalia, Germany
Email Address: info@afrorootsradiance.com
Phone Number: +4915217850934
Website: www.afrorootsradiance.com

AfroRoots Radiance is the data controller responsible for your personal data collected through this website.

If you have any questions about this Privacy Policy or how we handle your data, please contact us at info@afrorootsradiance.com or call us on +4915217850934.

2. What Personal Data We Collect

We collect personal data that you provide to us directly, as well as data collected automatically when you use our website.

Data you provide to us directly includes:

• Full name
• Email address
• Delivery address
• Billing address
• Phone number (if provided)
• Payment information (processed securely through Stripe — we do not store your card details)
• Order history and purchase details
• Messages and enquiries submitted through our contact form
• Custom order requests and related communications
• Newsletter subscription details

Data collected automatically when you visit our website includes:

• IP address
• Browser type and version
• Device type
• Pages visited and time spent on each page
• Referring website or source
• Cookies and similar tracking technologies (see our Cookie Policy section below)

3. How We Use Your Personal Data

We use your personal data for the following purposes:

To process and fulfil your orders:
We use your name, delivery address, email address, and payment details to process your purchase, arrange delivery through Etsy, and send you order confirmations and shipping updates.

To manage your account:
If you create an account on our website, we use your data to manage your account, save your order history, and provide a smoother shopping experience.

To respond to your enquiries:
When you contact us through our contact form, email at info@afrorootsradiance.com, phone at +4915217850934, or social media channels, we use your information to respond to your questions and provide customer support.

To send marketing communications:
If you have subscribed to our newsletter or opted in to receive marketing emails, we will send you updates about new collections, promotions, and brand news. You can unsubscribe at any time by clicking the unsubscribe link in any of our emails.

To process custom orders:
Information submitted through our custom order form is used solely to fulfil your bespoke product request and communicate with you throughout the production process.

To improve our website:
We use automatically collected data to understand how visitors use our website, identify areas for improvement, and ensure our website functions correctly.

To comply with legal obligations:
We may use and retain your data where required to comply with applicable laws, regulations, and legal processes, including German tax and commercial law.

4. Legal Basis for Processing Your Data

Under the GDPR, we are required to have a legal basis for processing your personal data. We rely on the following legal bases:

Contractual necessity:
We process your data to fulfil the contract between us when you place an order — including processing payment through Stripe, arranging delivery through Etsy, and handling returns.

Legitimate interests:
We process certain data based on our legitimate business interests, such as improving our website, preventing fraud, and communicating with customers about their orders.

Consent:
Where we send you marketing communications or use non-essential cookies, we do so only with your consent. You may withdraw your consent at any time.

Legal obligation:
We may process your data where required to comply with a legal obligation, such as retaining financial records for tax purposes.

5. How We Share Your Data

We do not sell, rent, or trade your personal data to third parties. We may share your data with trusted third-party service providers who assist us in operating our business, including:

Payment processors:
We use Stripe to securely process all transactions on our website. Your payment details are handled directly by Stripe and are not stored on our servers. Stripe operates in accordance with PCI DSS (Payment Card Industry Data Security Standard) compliance. You can read Stripe’s Privacy Policy at www.stripe.com/privacy.

Delivery and logistics providers:
We fulfil and ship all orders through Etsy. Your name and delivery address are shared with Etsy and their associated shipping partners to ensure your order reaches you safely and on time. You can read Etsy’s Privacy Policy at www.etsy.com/legal/privacy.

Email marketing platforms:
If you have subscribed to our newsletter, your email address is stored with our email marketing provider and used solely for the purpose of sending you brand updates and promotional communications.

Website hosting and analytics:
Our website www.afrorootsradiance.com is hosted on a secure server and we may use analytics tools such as Google Analytics to understand website usage patterns and improve our service.

Legal authorities:
We may disclose your data to law enforcement or regulatory authorities if required to do so by law or in response to a valid legal request.

All third-party providers we work with are required to handle your data securely and in accordance with applicable data protection law.

6. International Data Transfers

AfroRoots Radiance is based in North Rhine Westphalia, Germany, and operates within the European Union. Both Stripe and Etsy may process data outside the European Economic Area (EEA). Where this occurs, we ensure that appropriate safeguards are in place to protect your data in accordance with GDPR requirements, such as Standard Contractual Clauses approved by the European Commission.

7. How Long We Keep Your Data

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, and reporting requirements.

• Order data: Retained for 10 years in accordance with German commercial and tax law (Handelsgesetzbuch / Abgabenordnung)
• Customer account data: Retained for as long as your account is active, or until you request deletion
• Marketing data: Retained until you unsubscribe or withdraw consent
• Contact form enquiries: Retained for up to 2 years unless ongoing correspondence requires longer retention
• Custom order data: Retained for up to 3 years for quality and dispute resolution purposes

8. Your Rights Under GDPR

As a data subject under the GDPR, you have the following rights regarding your personal data:

Right of access:
You have the right to request a copy of the personal data we hold about you.

Right to rectification:
You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.

Right to erasure:
You have the right to request that we delete your personal data, subject to certain legal exceptions.

Right to restriction of processing:
You have the right to request that we restrict the processing of your personal data in certain circumstances.

Right to data portability:
You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transfer it to another controller.

Right to object:
You have the right to object to the processing of your personal data where we rely on legitimate interests as our legal basis.

Right to withdraw consent:
Where we process your data based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Right to lodge a complaint:
You have the right to lodge a complaint with the relevant data protection supervisory authority. In Germany, this is the Federal Commissioner for Data Protection and Freedom of Information (Bundesbeauftragter für den Datenschutz und die Informationsfreiheit — BfDI).

BfDI Contact:
Website: www.bfdi.bund.de
Email: poststelle@bfdi.bund.de

To exercise any of your rights, please contact us at:
Email: info@afrorootsradiance.com
We will respond to your request within 30 days.

9. Cookies

Our website www.afrorootsradiance.com uses cookies to improve your browsing experience and help us understand how visitors use our site.

What are cookies?
Cookies are small text files placed on your device when you visit a website. They help the website remember your preferences and activity.

Types of cookies we use:

Essential cookies:
These are necessary for the website to function correctly — for example, to keep items in your shopping cart or to maintain your login session. These cookies cannot be disabled.

Analytics cookies:
We use analytics tools such as Google Analytics to understand how visitors interact with our website. This data is anonymised and used only to improve our website performance.

Marketing cookies:
If you have consented, we may use cookies to deliver relevant advertising and track the effectiveness of our marketing campaigns.

How to manage cookies:
You can control and manage cookies through your browser settings. Most browsers allow you to refuse or delete cookies. Please note that disabling certain cookies may affect the functionality of our website.

For more information about cookies and how to manage them, visit www.aboutcookies.org.

10. Data Security

We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, loss, destruction, or alteration.

Our website www.afrorootsradiance.com uses SSL (Secure Socket Layer) encryption technology, indicated by the padlock icon in your browser address bar, to ensure that any data you submit is transmitted securely. All payment transactions are processed through Stripe, which maintains the highest level of payment security certification available in the industry.

While we take every reasonable precaution to protect your data, no method of transmission over the internet is completely secure. We cannot guarantee absolute security but we are committed to protecting your information to the best of our ability.

11. Children’s Privacy

Our website is not directed at children under the age of 16. We do not knowingly collect personal data from children under 16. If you believe we have inadvertently collected data from a child under 16, please contact us immediately at info@afrorootsradiance.com or call +4915217850934 and we will take steps to delete the information promptly.

12. Links to Third-Party Websites

Our website may contain links to third-party websites, including our social media pages on Instagram, Facebook, and TikTok, as well as our Etsy shop. We are not responsible for the privacy practices of these websites and encourage you to read their privacy policies before providing any personal information.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business practices, legal requirements, or data protection regulations. Any changes will be posted on this page at www.afrorootsradiance.com/privacy-policy with an updated date at the top.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your data. Your continued use of our website after any changes constitutes your acceptance of the updated policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your personal data, please do not hesitate to contact us:

AfroRoots Radiance
Business Address: North Rhine Westphalia, Germany
Email: info@afrorootsradiance.com
Website: www.afrorootsradiance.com

We are committed to resolving any concerns you may have about our data practices promptly and transparently.

This Privacy Policy was last reviewed and updated in July 2026.