Privacy Policy

Effective date: 18 September 2026. This Privacy Policy explains how Fair LSD (“we”, “us”, “our”) processes personal data when you visit https://fairlsd.com/, create an account, place an order, or contact us.

1. Controller

The controller responsible for processing is:

Organisation: Fair LSD
Address: Friedelstraße 53, 12047 Berlin, Germany
Email: [email protected]

2. What data we process

Depending on how you use the site, we may process:

Identity and contact data — name, email, phone, billing and shipping address
Account data — login identifiers, order history, preferences
Transaction data — products ordered, amounts, payment status, invoices
Age attestation — confirmation that you are 21 or older at checkout
Technical data — IP address, device/browser information, pages viewed, approximate location derived from IP
Communication data — messages you send via forms or email
Marketing preferences — newsletter or popup sign-ups where offered, and consent status
Cookie and consent data — choices recorded by our consent management tool

3. Purposes and legal bases

We process personal data for the following purposes under the GDPR:

Contract performance (Art. 6(1)(b)) — processing orders, payments, delivery, account management, customer support
Legal obligations (Art. 6(1)(c)) — accounting, tax, and regulatory record-keeping
Legitimate interests (Art. 6(1)(f)) — securing the shop, preventing fraud and misuse, improving site performance, and understanding aggregate traffic (balanced against your rights)
Consent (Art. 6(1)(a)) — non-essential cookies/analytics/marketing where required, and optional email communications you opt into

4. Cookies and similar technologies

We use essential cookies to run the shop (for example cart and session). Analytics and other non-essential technologies run only after you consent where the law requires it. You can change or withdraw cookie preferences at any time via “Manage cookies” in the site footer. Detailed cookie categories are maintained by our consent tool (Complianz).

5. Analytics

If enabled, we may use Google Analytics (or similar) to understand how the site is used. Where consent is required, analytics scripts load only after acceptance. IP anonymisation and consent-mode settings may be applied according to our cookie configuration.

We share data only as needed to operate the shop, for example:

hosting and infrastructure providers
payment and banking partners for order settlement
shipping and logistics partners
email and form providers when you contact us or subscribe
security, anti-spam, and consent-management providers
professional advisors (legal, accounting) where necessary

Processors act under contracts that require appropriate data protection. We do not sell your personal data.

7. International transfers

Some providers may process data outside the EU/EEA. Where that happens we rely on an adequacy decision or appropriate safeguards such as Standard Contractual Clauses, unless an exemption applies.

8. Retention

We keep personal data only as long as needed for the purposes above:

order and invoice records — typically for the statutory accounting period
account data — while the account remains active, then deleted or anonymised within a reasonable period after closure unless law requires longer retention
support correspondence — for as long as needed to resolve the request and document the outcome
consent and cookie logs — according to our consent tool settings and legal needs
analytics data — according to the tool’s configured retention

9. Your rights

Under the GDPR you may have the right to access, rectify, erase, restrict, or object to certain processing, and the right to data portability. Where processing is based on consent, you may withdraw consent at any time without affecting prior lawful processing. You also have the right to lodge a complaint with a supervisory authority (for example in your EU member state of residence, or the authority competent for our establishment).

To exercise your rights, email [email protected]. We may need to verify your identity before fulfilling a request.

10. Security

We apply appropriate technical and organisational measures to protect personal data. No method of transmission or storage is completely secure; please use a strong unique password for your account.

11. Children

The shop is intended for adults aged 21+. We do not knowingly collect personal data from anyone under 21. If you believe we have done so, contact us and we will delete the data where required.

12. Changes to this policy

We may update this Privacy Policy periodically. The “Last updated” date at the top of the page will change when we do. Material changes may also be highlighted on the site where appropriate.