Privacy policy

Last updated: July 17, 2026

Data Controller Business Details

Controller: Larryhot

Registered Physical Address: Moselring 10/12, 56068 Koblenz, Germany

Official Privacy Contact: +49 651 7900351 | hello@larryhot.com

Categories of Personal Data We Collect

  • Identity data: Full legal given and family name, billing address, delivery shipping address, contact telephone number, registered email address
  • Transaction data: Complete purchase history, delivery tracking records, return service applications and all customer support correspondence
  • Website technical data: Visitor IP address, device & browser specifications, mandatory functional cookies required to complete checkout and basic site navigation
  • Voluntarily submitted data: Newsletter subscription sign-ups, online consultation messages and customer survey feedback

    We never store complete credit card numbers, CVV security codes or private bank account information on our internal servers. All payment transactions are processed through Shopify PCI-DSS Level 1 certified secure payment gateways.

Legal Bases for Personal Data Processing

  1. Article 6(1)(b) GDPR / DSGVO: Processing necessary to execute binding purchase contracts, fulfil delivery obligations and provide after-sales support services
  2. Article 6(1)(a) GDPR / DSGVO: Sending commercial marketing emails solely based on your explicit, active opt-in consent
  3. Article 6(1)(f) GDPR / DSGVO: Legitimate business interest to prevent fraudulent orders, maintain website cybersecurity and resolve payment disputes
  4. Statutory tax & commercial recordkeeping obligations under German federal law

Third-Party Data Sharing Restrictions

We only share the minimum necessary subset of your personal data with fully DSGVO-compliant service partners, including the Shopify e-commerce platform, German domestic logistics carriers, certified payment processors and anti-fraud security institutions. Larryhot will never sell, rent, lease or trade your personally identifiable information to third-party advertising platforms for commercial profit.

Statutory Consumer Rights Under DSGVO/GDPR

All EEA residents may submit verified written requests via our service email to exercise the below rights free of administrative charges:
  • Right to access a full copy of all personal data we store under your customer profile
  • Right to rectify inaccurate, outdated contact and delivery address information
  • Right to request permanent full erasure of all your stored personal records
  • Right to temporarily restrict ongoing processing of your personal information
  • Right to receive your data in a standard machine-readable portable electronic format
  • Right to fully withdraw marketing email subscription consent at any time

Cookie & Website Tracking Disclosure

Only mandatory functional cookies required for checkout and basic page browsing activate automatically upon site visit. All optional analytics, remarketing and advertising tracking cookies require your explicit active opt-in consent before activation. You may disable all cookie tracking functions permanently at any time via your device browser’s settings panel.

Data Security & Legal Retention Periods

Our entire website operates on 256-bit SSL encrypted transmission systems that meet all EU and German federal data security standards. All order and transaction records will only be retained for the minimum timeframe required by German tax and commercial recordkeeping legislation, then permanently and irreversibly erased once all legal storage obligations expire.

Data Breach Mandatory Notification Clause

If a personal data security breach occurs that poses a substantial risk of harm to affected customers, we will complete internal investigation and notify impacted users as well as the competent German state data protection authority within 72 hours, in full compliance with DSGVO mandatory breach reporting rules.

Minor User Protection Statement

Our online shop services are exclusively intended for users aged 18 years or older. We will not actively collect personal identifiable information from minors without verified written consent provided by their legal guardians.