Privacy Policy

Last updated: 06. May 2025

 

---

 

1. Who We Are

This Privacy Policy describes how your personal data is collected, used, and shared when you visit or make a purchase from HILLS, operated by 1337 CORP SLU, a company incorporated in Spain and acting as the data controller.

For all data-related queries or to exercise your rights under this policy, please contact us at:
customerservice@gadzhi.com

 

---

 

2. Information We Collect

We may collect and process the following types of personal data:

• Contact Information: name, email address, delivery and billing address, phone number (if provided)
  
  

• Order Information: products purchased, payment method, order history
  
  

• Technical Information: IP address, browser type, device type, time zone, pages visited
  
  

• Usage Information: site behaviour, referring URLs, marketing interactions
  
  

• Marketing Information: your preferences for receiving communications
  
  

We do not store full payment information. All transactions are securely processed via third-party platforms: PayPal, Apple Pay, and Google Pay.

 

---

 

3. How We Use Your Data

We use your personal data to:

• Process and fulfil your orders
  
  

• Communicate with you (order updates, customer service, etc.)
  
  

• Send marketing communications (if consented)
  
  

• Monitor usage and improve our website
  
  

• Detect and prevent fraud or abuse
  
  

• Comply with legal obligations
  
  

 

---

 

4. Legal Basis for Processing

We rely on the following legal grounds to process your data:

• Performance of a contract (to process your order)
  
  

• Your consent (for marketing communications)
  
  

• Legitimate interests (to maintain and improve our business and prevent fraud)
  
  

• Compliance with legal obligations
  
  

 

---

 

5. Third-Party Services and International Transfers

We share data with trusted third-party service providers:

• Payment processors: PayPal, Apple Pay, Google Pay
  
  

• Website host & eCommerce: Shopify
  
  

• Email marketing: Klayvio

• Analytics & advertising: Google Analytics, Facebook/Meta
  
  

Some of these providers are based outside the European Economic Area (EEA), including in the United States. Where your data is transferred outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission.

 

---

 

6. Data Retention

We retain personal data only as long as necessary to fulfil the purposes outlined above, including for legal, accounting, or tax obligations. Data related to orders may be kept for statutory record-keeping periods.

 

---

 

7. Your Rights Under GDPR

If you are located in the EEA, you have the right to:

• Access your personal data
  
  

• Correct or update your data
  
  

• Request deletion of your data
  
  

• Object to or restrict processing
  
  

• Request data portability
  
  

• Withdraw consent (where applicable)
  
  

To exercise these rights, contact: customerservice@gadzhi.com

 

---

 

8. Age Restriction

This website and our services are intended for use only by individuals aged 18 or older. We do not knowingly collect personal data from anyone under 18. If you believe we have inadvertently collected data from a minor, please contact us so we can delete it promptly.

 

---

 

9. Security Measures

We implement appropriate technical and organisational measures to safeguard your personal data. However, no online service can be completely secure, and we cannot guarantee absolute security of your data.

 

---

 

10. Updates to This Privacy Policy

We may update this Privacy Policy from time to time. The most current version will always be posted on this page with the "Last updated" date. Where appropriate, we may notify you via email or other contact methods.

 

---

 

11. Contact

For any questions, concerns, or data protection requests, please contact:
customerservice@gadzhi.com