Privacy policy

Last updated: January 31, 2026

Hephesta operates this store and website, including all related information, content, features, tools, products and services (the “Services”). The Services are powered by Shopify Inc., which enables us to provide you with a curated shopping experience.

This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you visit, use, or make a purchase through the Services, or otherwise communicate with us.

If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy governs with respect to the collection, processing, and disclosure of personal information.

By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy.

1. Data Controller

For the purposes of applicable data protection laws, including the General Data Protection Regulation (GDPR), the data controller is:

WeevilEDC GmbH
Kaiserstraße 71/1/5
1070 Vienna
Austria

📧 Email: shop@hephesta.com
📞 Phone: +43 664 3441665

2. Personal Information We Collect

When we refer to “personal information”, we mean information that identifies, relates to, describes, or can reasonably be linked to an identifiable individual.

Depending on how you interact with the Services, we may collect or process the following categories of personal information:

  • Contact details: name, billing address, shipping address, email address, phone number

  • Payment information: payment method, transaction details, payment confirmations (payment processing is handled by third-party providers)

  • Account information: login credentials, preferences, settings

  • Transaction information: products viewed, added to cart or wishlist, purchased, returned, or exchanged

  • Communications: messages sent to us via email or contact forms

  • Device information: IP address, browser type, operating system, device identifiers

  • Usage data: interactions with the Services, navigation behavior, timestamps

We do not intentionally collect sensitive personal data.

3. Sources of Personal Information

We may collect personal information from the following sources:

  • Directly from you, when you place an order, create an account, or contact us

  • Automatically, through cookies and similar technologies when you use the Services

  • From service providers, such as payment processors, shipping partners, and IT providers

  • From Shopify, as the platform hosting our online store

4. Legal Bases for Processing (EEA / GDPR)

For users located in the European Economic Area (EEA), we process personal data based on the following legal grounds pursuant to Article 6 GDPR:

  • Performance of a contract (Art. 6(1)(b) GDPR), e.g. order processing, delivery, customer support

  • Compliance with legal obligations (Art. 6(1)(c) GDPR), e.g. tax and accounting requirements

  • Consent (Art. 6(1)(a) GDPR), e.g. for marketing communications or non-essential cookies

  • Legitimate interests (Art. 6(1)(f) GDPR), e.g. ensuring website security, preventing fraud, improving our Services

Where processing is based on consent, you may withdraw your consent at any time with future effect.

5. How We Use Your Personal Information

We use personal information for the following purposes:

  • Providing and operating the Services, including processing orders, payments, deliveries, returns, and exchanges

  • Account management, including authentication and customer support

  • Improving and personalizing the Services, including analytics and usability improvements

  • Marketing and advertising, where permitted by law and subject to your consent

  • Security and fraud prevention, including protecting our Services and customers

  • Legal compliance, including responding to lawful requests by authorities

6. Cookies and Consent Management

Our website uses cookies and similar technologies to ensure essential functionality and to improve user experience.

We use a cookie consent management tool to manage your cookie preferences.
Non-essential cookies (e.g. analytics or marketing cookies) are only set after you have given your explicit consent.

You may change or withdraw your consent at any time via the cookie settings link available on our website.

Further information about cookies and their purposes can be found in this Privacy Policy and in the cookie preferences panel.

7. Disclosure of Personal Information

We may disclose personal information to third parties where necessary and lawful, including:

  • Shopify Inc., as our e-commerce platform provider

  • Payment service providers (e.g. PayPal, Stripe, Klarna)

  • Shipping and fulfillment partners

  • IT and hosting providers

  • Marketing partners, where consent has been given

All third parties process personal information only for specified purposes and in accordance with applicable data protection laws.

8. Shopify and Third-Country Transfers

Our store is hosted by Shopify Inc.
Personal information may be transferred to and processed in countries outside the EEA, including Canada and the United States.

Where required, such transfers are safeguarded by Standard Contractual Clauses or other legally recognized transfer mechanisms to ensure an adequate level of data protection.

Further information is available at:
https://privacy.shopify.com

9. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, including legal, accounting, and reporting obligations.

10. Your Rights

Depending on your location, you may have the following rights:

  • Right of access

  • Right to rectification

  • Right to erasure

  • Right to restriction of processing

  • Right to data portability

  • Right to object to processing

  • Right to withdraw consent

EEA residents may lodge a complaint with their local data protection authority.
In Austria, this is the Austrian Data Protection Authority (Datenschutzbehörde).

11. Children’s Privacy

The Services are not intended for children.
We do not knowingly collect personal information from individuals under the age of majority in their jurisdiction.

12. Security

We implement appropriate technical and organizational measures to protect personal information.
However, no method of transmission over the internet is completely secure.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect legal, technical, or business changes.
The updated version will be published on this website with a revised “Last updated” date.

14. Contact

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us at:

admin@weeviledc.com
WeevilEDC GmbH, Kaiserstraße 71/1/5, 1070 Vienna, Austria