Last Updated: March 25, 2025
1. Introduction
Welcome to DoorMarts (doormarts.de). ELITE FROST LIMITED ("we," "us," "our," or "DoorMarts") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website doormarts.de, including any other media form, media channel, mobile website, or mobile application related or connected thereto (collectively, the "Site") and use our services. Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site.
This policy is intended to comply with the requirements of the General Data Protection Regulation (GDPR) for our users in the European Union (EU) and European Economic Area (EEA), the UK General Data Protection Regulation (UK GDPR), the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) for residents of California, the Australian Privacy Principles (APP) under the Privacy Act 1988 for residents of Australia, and Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).
This store is operated by ELITE FROST LIMITED under the brand name DoorMarts.
2. Data Controller
The data controller responsible for your personal data is:
ELITE FROST LIMITED
Flat 7, Dune Crest
105 Banks Road
POOLE
Dorset
BH13 7QQ
United Kingdom
Trade Register Number: 15624799
VAT Number: GB469954815
Email: Contact@doormarts.de
Phone: +44 7440 218303
3. What Personal Data We Collect
We may collect personal information from you in a variety of ways, including, but not limited to, when you visit our site, register on the site, place an order, subscribe to a newsletter, respond to a survey, fill out a form, and in connection with other activities, services, features or resources we make available on our Site.
3.1. Information You Provide to Us
We collect personal information you voluntarily provide to us when you:
- Create an account: Name, email address, password.
- Place an order: Name, billing address, shipping address, email address, phone number, and payment information (processed by our third-party payment processors, see Section 7).
- Contact customer support: Name, email address, phone number, and the content of your communications.
- Subscribe to marketing communications: Email address, name.
- Participate in surveys or promotions: Information you provide in your responses.
- Submit information through forms: Any information you choose to provide.
3.2. Information We Collect Automatically
When you access and use our Site, we may automatically collect certain information about your device and usage, including:
- Device Information: IP address, browser type and version, operating system, device type, unique device identifiers, and mobile network information.
- Usage Information: Pages you viewed, links you clicked, your navigation to, through, and from our Site (including date and time), products you viewed or searched for, page response times, download errors, length of visits to certain pages, and page interaction information (such as scrolling, clicks, and mouse-overs).
This information is collected through cookies, web beacons, log files, and similar technologies. For more details, please see our Cookie Policy.
We use third-party tools for analytics and advertising, including:
- Google Analytics: To understand how visitors engage with our Site.
- Google Ads (via Google Tag Manager): For advertising and conversion tracking.
- Facebook Pixel: For advertising and tracking conversions from Facebook ads.
4. Legal Basis for Processing Personal Data (GDPR & UK GDPR)
If you are located in the European Economic Area (EEA) or the United Kingdom (UK), our legal basis for collecting and using the personal information described above will depend on the personal information concerned and the specific context in which we collect it. We will normally collect personal information from you only:
- Where we need the personal information to perform a contract with you (e.g., to fulfill your order).
- Where the processing is in our legitimate interests and not overridden by your data protection interests or fundamental rights and freedoms (e.g., for fraud prevention, site security, customer service, direct marketing (where permitted), and improving our services).
- Where we have your consent to do so (e.g., for certain marketing activities or the use of non-essential cookies).
- Where we have a legal obligation to collect personal information from you (e.g., for tax and accounting purposes).
5. How We Use Your Personal Data
We use the information we collect or receive:
- To provide and manage our services: Fulfill your orders, process payments, deliver products, and manage your account.
- To communicate with you: Send you transaction confirmations, shipping notifications, respond to your inquiries, provide customer support, and send administrative information.
- For marketing and promotional purposes: Send you newsletters, special offers, and promotions that may be of interest to you, subject to your consent where required by law. You can opt-out of marketing communications at any time.
- To personalize your experience: Understand your preferences and tailor content and product offerings.
- To improve our Site and services: Analyze usage trends, monitor the effectiveness of our marketing campaigns, and improve the Site's functionality and user experience.
- For security and fraud prevention: To protect our Site, services, and users from fraudulent activity and security threats.
- To comply with legal obligations: To meet legal and regulatory requirements, such as tax and accounting laws, and to respond to lawful requests from public authorities.
6. Cookies and Tracking Technologies
We use cookies and similar tracking technologies (like web beacons and pixels) to access or store information. Specific information about how we use such technologies and how you can refuse certain cookies is set out in our Cookie Policy. We utilize a Cookie Consent Manager to help manage your preferences for these technologies in compliance with GDPR and ePrivacy directives.
7. Data Sharing and Disclosure
We do not sell your personal information in the traditional sense. However, we may share your information with third parties in the following situations:
- Service Providers: We share information with third-party vendors, service providers, contractors, or agents who perform services for us or on our behalf and require access to such information to do that work. Examples include:
- Payment processing: We use Shopify Payments to process your payments. Shopify Payments is a third-party service and their use of your personal information is governed by their privacy policy. We do not store your full credit card details.
- Shipping and delivery: We share your shipping address and contact details with our shipping providers (e.g., DHL, FedEx, UPS) to deliver your orders.
- Marketing and analytics: We use tools like Google Analytics, Google Ads, and Facebook Pixel for marketing and analytics purposes.
- IT and system administration services.
- Customer service tools.
- Legal Requirements and Law Enforcement: We may disclose your information if required to do so by law or in the good faith belief that such action is necessary to: (a) comply with a legal obligation or a request from public authorities (e.g., a court order or subpoena); (b) protect and defend our rights or property; (c) prevent or investigate possible wrongdoing in connection with the Services; (d) protect the personal safety of users of the Services or the public; or (e) protect against legal liability.
- Business Transfers: We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
- With Your Consent: We may disclose your personal information for any other purpose with your consent.
8. International Data Transfers
Your information, including personal data, may be transferred to — and maintained on — computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those in your jurisdiction. Our business is based in the UK, and we serve customers in Germany, the EU, the UK, the US, Canada, and Australia.
If you are located in the EEA, UK, or Switzerland, this means your personal data may be transferred outside these regions. When we transfer your personal data to countries outside the EEA, UK, or Switzerland, we will ensure that appropriate safeguards are in place to protect your personal data, such as by using Standard Contractual Clauses (SCCs) approved by the European Commission or the UK Information Commissioner's Office (ICO), or by relying on an adequacy decision where applicable.
Specifically, data shared with service providers in the United States (e.g., Google, Facebook, Shopify) may be transferred based on SCCs or their participation in relevant data privacy frameworks recognized as providing adequate protection.
9. Data Security
We have implemented appropriate technical and organizational security measures designed to protect the security of any personal information we process. These measures aim to prevent accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, personal data. However, please also remember that we cannot guarantee that the internet itself is 100% secure. Although we will do our best to protect your personal information, transmission of personal information to and from our Site is at your own risk. You should only access the services within a secure environment.
10. Data Retention
We will retain your personal information only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your information to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable tax/revenue laws), resolve disputes, and enforce our legal agreements and policies. For example, order information is typically kept for a period required by financial and tax regulations.
Data collected for analytics purposes via cookies may be retained for shorter periods as specified in our Cookie Policy or by the third-party provider (e.g., Google Analytics typically retains data for a set period like 14-26 months, but this can vary).
11. Your Data Protection Rights
Depending on your location and applicable law, you may have the following rights regarding your personal data:
- Right to Access: You have the right to request copies of your personal data.
- Right to Rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
- Right to Erasure (Right to be Forgotten): You have the right to request that we erase your personal data, under certain conditions.
- Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data, under certain conditions.
- Right to Object to Processing: You have the right to object to our processing of your personal data, under certain conditions, particularly where we are relying on legitimate interests as our legal basis.
- Right to Data Portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.
- Right to Withdraw Consent: If we are processing your personal data based on your consent, you have the right to withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal information conducted in reliance on lawful processing grounds other than consent.
- Right to Lodge a Complaint: You have the right to lodge a complaint with a data protection supervisory authority in your jurisdiction if you believe that our processing of your personal data infringes applicable data protection laws.
- For the UK: Information Commissioner's Office (ICO)
- For Germany: The relevant regional Data Protection Authority (Landesdatenschutzbehörde).
- For other EU countries: Your local data protection authority.
11.1. Specific Information for California Residents (CCPA/CPRA)
If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):
- Right to Know: You have the right to request information about the categories and specific pieces of personal information we have collected about you, the categories of sources from which the personal information is collected, the business or commercial purpose for collecting, selling, or sharing personal information, and the categories of third parties to whom we disclose personal information.
- Right to Delete: You have the right to request the deletion of your personal information that we have collected, subject to certain exceptions.
- Right to Correct Inaccurate Information: You have the right to request the correction of inaccurate personal information that we maintain about you.
- Right to Opt-Out of Sale/Sharing: We do not "sell" personal information in the traditional sense of exchanging it for monetary consideration. However, the CCPA/CPRA definition of "sale" and "sharing" is broad and may include activities like sharing information for cross-context behavioral advertising (e.g., through certain cookies). You have the right to opt-out of the "sale" or "sharing" of your personal information. You can manage your cookie preferences through our Cookie Consent Manager or by clicking the "Do Not Sell or Share My Personal Information" link if available in our website footer.
- Right to Limit Use and Disclosure of Sensitive Personal Information (SPI): We do not collect sensitive personal information for the purpose of inferring characteristics about you. If we were to collect SPI for such purposes, you would have the right to limit its use and disclosure.
- Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.
To exercise your California privacy rights, please contact us using the details in Section 15.
11.2. Specific Information for Australian Residents (APP)
If you are an Australian resident, this Privacy Policy outlines how we collect, use, and disclose your personal information in accordance with the Australian Privacy Principles (APPs) under the Privacy Act 1988. You have the right to access your personal information and seek correction of it. If you have a complaint about how we have handled your personal information, please contact us. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC).
11.3. Specific Information for Canadian Residents (PIPEDA)
If you are a Canadian resident, this Privacy Policy outlines how we manage your personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). We are committed to being accountable for our practices, obtaining appropriate consent for collection, use, and disclosure of personal information, and providing individuals with access to their personal information. You have the right to access your personal information and request corrections if it is inaccurate. For any inquiries or complaints, please contact us.
11.4. Exercising Your Rights
To exercise any of these rights, please contact us at Contact@doormarts.de or by mail at the address provided in Section 2. We may need to verify your identity before processing your request. We will respond to your request within the timeframe required by applicable law (e.g., within one month for GDPR requests, and 45 days for CCPA requests, extendable under certain conditions).
12. Children's Privacy
Our Site and services are not directed to individuals under the age of 16 (or a higher age in certain jurisdictions). We do not knowingly collect personal information from children under 16. If we become aware that a child under 16 has provided us with personal information, we will take steps to delete such information. If you believe that we might have any information from or about a child under 16, please contact us at Contact@doormarts.de.
13. Third-Party Links
Our Site may contain links to other websites that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.
15. Contact Us
If you have any questions or concerns about this Privacy Policy, our privacy practices, or if you wish to exercise your data protection rights, please contact us:
ELITE FROST LIMITED (trading as DoorMarts)
Attn: Privacy Compliance Officer
Flat 7, Dune Crest
105 Banks Road
POOLE
Dorset
BH13 7QQ
United Kingdom
Email: Contact@doormarts.de
Phone: +44 7440 218303