Privacy Policy

At Rune Helmets Official, we are committed to protecting your personal data. This Privacy Policy describes how we collect, use, and share your information when you visit or make a purchase from our store.

1. Information We Collect

To provide our services and fulfill your orders, we collect the following information:

• Order Information: Name, shipping address, billing address, email address, and Phone Number (Mandatory for international courier coordination and customs clearance).
• Device Information: We automatically collect certain information about your device, including your IP address and cookies, to analyze how visitors interact with our store.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Order Fulfillment: To process payments, arrange shipping, and provide you with invoices and order confirmations.
• Production Progress: We will communicate with you via Email to provide updates, including photos or videos of your helmet's handmade progress.
• Marketing: We may use your email address to send you promotional offers or our latest product catalogs. You may opt-out of these communications at any time.
• Optimization: We may use analytics tools to understand how visitors use our store and to improve it. These tools set cookies only after you choose "Advertising & measurement" in our cookie banner.

Legal Basis: We process your data to perform our contract with you (processing orders, shipping, and support), to comply with legal obligations (tax, customs, and audit records), and with your consent (marketing emails and analytics cookies). You may withdraw your consent at any time.

3. Sharing Your Information

We share your Personal Information with third parties to help us operate our business:

• Service Providers: WordPress/WooCommerce (platform) and our payment processor (PayPal). We do not receive or store your full card number at any point.
• Logistics & Customs: We share your data with the carrier handling your order (DHL, UPS, FedEx, or Pos Indonesia) and the Customs/Tax Authorities of your country. This is necessary to facilitate the delivery and the collection of mandatory VAT/Import Duties.
• Fraud Prevention: Our checkout uses Google reCAPTCHA to block automated fraud. Google receives your IP address and information about how you interact with the page, subject to Google's own privacy policy.
• Analytics: We use Google Analytics to count visits and see which pages people open. It sets cookies only after you choose "Advertising & measurement" in the cookie banner. Until then no analytics cookie is placed, although Google may still receive a cookieless signal that a page was viewed, which cannot be tied to you. Once accepted, Google receives your IP address (used only to work out an approximate location and not stored by Google Analytics), browser and device details, the pages you open, and that approximate location, subject to Google's own privacy policy. The cookies involved are listed in our Cookie Policy.
• Live Chat: When you open a chat with us, our live chat provider (tawk.to) processes the name, email address, and message content you choose to provide, together with your IP address and browser details. Chat transcripts are stored on tawk.to's servers and are used only to answer your questions.
• International Transfers: Rune Helmets Official operates from Indonesia. If you are located in the European Economic Area, the United Kingdom, or California, your personal data is transferred to and stored in Indonesia, which is not covered by an EU adequacy decision. We transfer this data because it is necessary to fulfil the order you place with us, and we protect it with the measures described in this policy.
• Country Detection: To show prices and delivery estimates for your country, our server sends your IP address to ipapi.co, which returns only your country. The result is cached for 12 hours. No cookie is set and nothing is stored in your browser.
• Sign-in with Google: If you choose to sign in or register using Google, Google receives the sign-in request and shares your name and email address with us so we can create or access your account, subject to Google’s own privacy policy.
• Content Delivery: Some pages load a stylesheet from jsDelivr, a content delivery network. Your browser contacts jsDelivr directly, so jsDelivr receives your IP address and browser details. No cookie is set.
• Hosting: Our website and its database are hosted by Hostinger, which stores this data on our behalf and processes it only on our instructions.

4. Children's Privacy

Our store and products (Motorcycle Helmets) are intended for use by adults only who are of legal age to hold a driver's license in their jurisdiction. We do not knowingly collect personal information from individuals under the age of 18.

5. Data Retention

When you place an order through the Site, we will maintain your Order Information for our records for a period of 7 years to comply with international tax, legal, and audit obligations.

6. Your Rights

If you are located in the European Economic Area or the United Kingdom (GDPR), you have the right to access the personal data we hold about you, to have it corrected, to have it erased, to receive a copy in a portable format, to restrict or object to how we process it, and to lodge a complaint with your national supervisory authority. If you are a California resident (CCPA/CPRA), you have the right to know what personal information we collect and why, to request its deletion, to request a copy, and not to be discriminated against for exercising those rights. Rune Helmets Official does not sell or share your personal information, and has never done so. To exercise any of these rights, contact us at the email address below. We will respond within 30 days. We may ask you to confirm your identity first — normally by replying from the email address used on the order. Orders already placed are an exception to erasure: we are required to keep order and tax records for 7 years, as described under Data Retention above.

---

Contact & Data Controller