Your Data Rights (EU / GDPR)
Your Data Rights Under GDPR
Knitsilk Europe ("we", "us", "our") is committed to protecting your personal data and respecting your rights under the General Data Protection Regulation (GDPR) (EU) 2016/679. This page explains what personal data we collect, why we collect it, and the rights you have as a data subject in the EU, UK, or Switzerland.
1. Who Is the Data Controller?
Knitsilk Europe (Primary Data Controller)
Mjiju Silk Mills
71 JM Road
Bangalore – 560 002, India
Email: care@knitsilk.eu
Shopify Inc. (Platform Provider & Independent Data Controller)
Our online store is powered by Shopify Inc., 151 O’Brien Street, Ottawa, Ontario, Canada K2P 2L8. Shopify acts as an independent data controller for certain data it collects and processes through its platform, including:
- Payment processing: Shopify processes payment data to complete transactions securely.
- Fraud prevention & security: Shopify analyses order and behavioural data to detect and prevent fraud.
- Shopify Network Intelligence (Enhanced Services): If enabled, Shopify may use your activity data across its merchant network to power personalised advertising and analytics. You can opt out via the Shopify Privacy Portal.
- Platform analytics & improvements: Shopify uses aggregated data to improve its platform and services.
- Legal compliance: Shopify retains certain data to meet its own legal obligations.
Shopify’s processing of your personal data is governed by Shopify’s Privacy Policy. To exercise your rights directly with Shopify, visit the Shopify Privacy Portal.
2. What Personal Data We Collect
- Identity data: name, username
- Contact data: email address, billing and shipping address, phone number
- Transaction data: details of products purchased and payment history
- Technical data: IP address, browser type, device identifiers, cookies
- Usage data: how you interact with our website
- Marketing preferences: your preferences for receiving marketing from us
3. Legal Bases for Processing
- Contract performance: to process your orders and manage your account
- Legal obligation: to comply with applicable laws (e.g., tax, accounting)
- Legitimate interests: fraud prevention, security, improving our services
- Consent: for non-essential cookies and marketing communications — you may withdraw consent at any time
4. Your Rights as an EU Data Subject
Right of Access (Art. 15)
You have the right to request a copy of the personal data we hold about you.
Right to Rectification (Art. 16)
You have the right to request correction of inaccurate or incomplete personal data.
Right to Erasure / “Right to be Forgotten” (Art. 17)
You have the right to request deletion of your personal data where there is no compelling reason for us to continue processing it.
Right to Restriction of Processing (Art. 18)
You have the right to request that we restrict the processing of your personal data in certain circumstances.
Right to Data Portability (Art. 20)
You have the right to receive your personal data in a structured, commonly used, machine-readable format.
Right to Object (Art. 21)
You have the right to object to processing based on legitimate interests or for direct marketing purposes.
Right to Withdraw Consent (Art. 7)
Where processing is based on consent, you may withdraw it at any time. To manage cookie consent, visit your Privacy Choices page.
Right Not to Be Subject to Automated Decision-Making (Art. 22)
You have the right not to be subject to decisions based solely on automated processing or profiling.
5. How to Exercise Your Rights
Use the form below to select your request(s) and send them directly to our team. We will respond within 30 days and may need to verify your identity.
To exercise rights against Shopify’s processing, visit the Shopify Privacy Portal.
Submit Your Data Rights Request
Select the right(s) you wish to exercise:
🔒 Your request will open your email client pre-filled and sent to care@knitsilk.eu. We will respond within 30 days.
6. Cookies & Tracking Technologies
Non-essential cookies are only placed with your explicit consent. Manage or withdraw consent via our cookie banner or browser settings. See our full Privacy Policy for details.
7. Data Retention
We retain personal data only as long as necessary. Transaction records are typically retained for 7 years in line with EU tax law.
8. International Transfers
Your data may be transferred to and processed in countries outside the EEA, including:
- India — Mjiju Silk Mills, Bangalore (our production base)
- Canada & USA — Shopify Inc. and its infrastructure
Appropriate safeguards such as Standard Contractual Clauses (SCCs) are in place. See Shopify’s Privacy Policy for their transfer safeguards.
9. Right to Lodge a Complaint
Our lead supervisory authority (Luxembourg):
Commission Nationale pour la Protection des Données (CNPD)
15, Boulevard du Jazz, L-4370 Belvaux, Luxembourg
🌐 cnpd.public.lu
10. Updates to This Page
We may update this page from time to time to reflect changes in our practices or applicable law.
Last updated: May 2026