Privacy &
Cookies
This notice explains what happens to personal data when you visit Christian Cherry’s sites, join a list, play the game, contact support or buy merch.
1. Who is responsible
The data controller is Christian Cherry, an independent artist and online trader based in Cyprus. Contact: christian@christiancherry.com. This address is also used for privacy requests.
2. What we collect and why
- Orders: name, email, delivery and billing details, items, size, payment and fulfilment status. We use these to take payment, fulfil the contract, prevent fraud, provide support and meet accounting or legal duties.
- Mailing and SMS lists: contact details, signup source and consent records. We use these to send the updates you requested. You can unsubscribe at any time.
- Support: messages, order references and information you send us. We use these to answer you and resolve problems.
- Site and campaign data: pages, approximate device/browser information, referral source, campaign tags and actions such as music, video, game, merch or signup interactions. Optional analytics and advertising measurement are used only according to your privacy choice.
- Essential site data: cart contents, checkout state, security information and your privacy preference. This is needed to run the site and checkout.
3. Legal bases
We process data when it is necessary to perform a contract, comply with law, pursue legitimate interests such as fraud prevention and customer support, or when you have given consent for marketing, analytics or advertising. You can withdraw consent at any time without affecting earlier lawful processing.
4. Services that receive data
- Stripe processes checkout, payment, fraud prevention and receipts.
- Printful receives the order and delivery details required to manufacture and ship merch.
- Vercel hosts the website and its server functions.
- Resend may deliver transactional order emails.
- Kit runs the email list and Laylo runs SMS signups.
- Google Analytics/Tag Manager and Meta provide optional measurement and advertising tools after consent.
- Spotify, Apple Music, YouTube, Instagram and Substack may receive technical data when you load or open their embedded or linked content.
Some providers operate outside the EEA. Where required, transfers rely on an adequacy decision, standard contractual clauses or another lawful safeguard. Their own privacy notices also apply when you use their services.
5. Cookies and similar storage
Essential storage keeps the cart, checkout and privacy settings working. Optional analytics and advertising technologies help measure campaigns and build audiences. You can accept or reject optional tracking from the privacy panel. Embedded third-party media can contact its provider when loaded.
6. How long data is kept
Order and transaction records are normally kept for the period required by tax, accounting, dispute and fraud-prevention rules. Support messages are kept only while useful for the request and reasonable follow-up. Marketing records are kept until you unsubscribe or the list is cleaned. Analytics and advertising retention follows the settings used in those platforms. Data may be kept longer where a legal claim or law requires it.
7. Your rights
Depending on the circumstances, you can ask for access, correction, deletion, restriction, portability or object to processing. You can always object to direct marketing. Email christian@christiancherry.com. You may also complain to the Office of the Commissioner for Personal Data Protection in Cyprus.
8. Children and security
The shop is not intended for children who cannot legally enter a purchase contract. We use service providers, access controls and encrypted connections designed to protect data, but no internet service can promise absolute security.
9. Changes
We may update this notice when the site or services change. The date above shows the current version.