Privacy policy

We want you to feel comfortable on our website. The protection of your privacy and your personal rights matters to us. Please read this Privacy Policy carefully to understand how we handle your data. You can rely on transparent and fair data processing and we work to handle your data carefully and responsibly.

This Privacy Policy explains how we use your personal data. We adhere to the requirements of the European General Data Protection Regulation (GDPR) and applicable national data protection law. This policy applies to our web shop at https://store.patrickputzker.com and to our main website at https://patrickputzker.com (together, our "website").

Responsible Person

The person responsible within the meaning of the GDPR and other applicable data protection law is:

SoulFrame LLC
3833 Powerline Road, Suite 701-E
33309 Fort Lauderdale, Florida
United States

Represented By

Patrick Putzker

Contact Information

Email: store@patrickputzker.com
Website: store.patrickputzker.com

Scope of the Processing of Personal Data

In principle, we only collect and use your personal data where necessary to provide a functional website and our content and services — for example, when you create a customer account, log in, place an order, sign up to our newsletter, or contact us. Collection and use of your personal data generally takes place with your consent, with limited exceptions where prior consent is not possible for actual reasons and processing is permitted by law.

The security of your personal data is a high priority for us. We protect data stored with us through technical and organisational measures designed to prevent loss or misuse by third parties. To protect your personal data, it is transmitted in encrypted form using SSL/TLS. You can recognise this by the lock symbol your browser displays when an SSL connection is active. Our technical security measures are regularly reviewed and adapted to the state of the art. The same principles apply to companies that process data on our behalf and according to our instructions.

Purposes of Processing and Legal Basis

We collect, process, and use your personal data for the following purposes:

  • Establishing and performing contractual relationships (orders, deliveries of digital downloads)
  • Sending newsletters where you have signed up
  • Responding to enquiries and providing customer support
  • Operating, securing, and optimising our website
  • Complying with legal obligations (e.g. record-keeping for tax purposes)

The processing of your personal data may be based on the following legal grounds:

  • Art. 6 (1) lit. a GDPR — your consent for a specific processing purpose
  • Art. 6 (1) lit. b GDPR — performance of a contract or pre-contractual measures (e.g. you place an order or ask about a product)
  • Art. 6 (1) lit. c GDPR — compliance with a legal obligation (e.g. tax record-keeping)
  • Art. 6 (1) lit. f GDPR — our legitimate interest in operating a secure, user-friendly website and conducting our business, including engaging service providers to process orders, payments, and communications

Duration of Storage and Routine Deletion

We process and store your personal data only for as long as needed to fulfil the relevant purpose, or as required by law. Once the purpose has ceased to exist or has been fulfilled, your personal data is deleted or blocked. Where blocking applies, deletion follows once legal or contractual retention periods no longer prevent it and the protection of your interests does not require continued storage.

Server Log Files

If you visit our website without registering or providing personal data, only the connection data that your browser transmits to our server is processed. The following may be recorded automatically in server log files:

  • Date, time, and frequency of access
  • The referring page or link
  • Volume of data transferred
  • Browser type and version
  • Operating system
  • Internet service provider
  • IP address assigned by your internet provider

The legal basis for this processing is Art. 6 (1) lit. b and f GDPR. The collection and storage of this data is necessary to operate the website, ensure its functionality, and deliver its content reliably.

Cookies and Tracking Technologies

We use cookies and similar technologies on our website. Details are set out in our Cookie Policy which forms part of this Privacy Policy.

Customer Account, Guest Orders, and Order Processing

Registration. You can register on our website by providing personal data via an input form. Registration creates a customer account that you can use to place orders and access purchased downloads. Processing for this purpose serves the performance of the contract of use or pre-contractual measures (Art. 6 (1) lit. b GDPR). You can delete your customer account at any time.

Data stored in your customer account. For the conclusion and processing of contracts we need contact details — name, email address, billing address, and information about your chosen payment method. You can store this in your customer account.

Guest checkout. You can also place orders as a guest without registering. The data you provide during a guest order is processed under Art. 6 (1) lit. b GDPR for the purpose of fulfilling the contract. We retain this data for the period needed to process and fulfil your order. Data that we are required to retain for legal reasons (e.g. tax retention obligations) is blocked rather than deleted.

Order confirmation and contract documents. Following your order, you receive an order confirmation and any further documents required for an effective conclusion of contract. Processing is based on Art. 6 (1) lit. b GDPR.

Security and abuse prevention. Based on Art. 6 (1) lit. c and f GDPR, we use and store your personal data and technical information to the extent necessary to prevent or prosecute misuse or other unlawful behaviour on our website, e.g. to maintain data security in the event of attacks on our IT systems.

Disclosure of Personal Data to Third Parties

Your personal data is only passed on where there is a legal obligation to do so, or to carefully selected service providers and partners that are contractually obliged to comply with data protection law.

a) Disclosure to service providers (Art. 6 (1) lit. b and f GDPR). Various service providers work for us in the operation and optimisation of our website and the processing of contracts — including hosting (Shopify), payment processing (Shopify Payments / Stripe, PayPal), newsletter delivery (Kit / ConvertKit), appointment booking (Calendly), and contact form handling (Formspree). We pass on the data required for those specific purposes (e.g. name, email, address). Where these companies act as processors on our behalf, they may only use the data in accordance with our instructions. We agree appropriate data security measures with them and monitor them.

b) Disclosure to payment service providers (Art. 6 (1) lit. b GDPR). When you pay for an order, your data is transmitted to the payment provider you selected — either Shopify Payments (operated by Stripe Payments Europe Ltd) or PayPal — solely to the extent necessary to process the payment. We do not collect or store full payment card numbers or bank details.

c) Disclosure to authorities (Art. 6 (1) lit. c and f GDPR). We will disclose your data to third parties or government authorities where we are legally required to do so (e.g. court or official orders) or where it is necessary for the prosecution of criminal offences or to exercise our legal rights and claims.

Shopify (Hosting)

Our website is hosted by Shopify Inc. (and its EU affiliate Shopify International Limited, Ireland). Personal data collected on this website is stored on Shopify's servers. This may include IP addresses, contact requests, metadata and communications data, contract and contact data, names, page accesses, and other data generated through use of the website. We use Shopify for the purpose of fulfilling contracts with our visitors and customers and in our legitimate interest in providing a secure, fast, and efficient online offering. Shopify processes your data only to the extent necessary to fulfil its service obligations and according to our instructions.

Shopify Statistics

We use Shopify's built-in statistics feature, which provides us with aggregated information on the reach of our website and visitor behaviour. The data is processed on servers operated by Shopify International Limited (Ireland). The legal basis is Art. 6 (1) lit. f GDPR. You can object to this processing at any time in our cookie settings.

Shopify Payments / Stripe

Where you choose a payment method offered through Shopify Payments, processing is carried out by the technical service provider Stripe Payments Europe Ltd, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland. We pass on the information you provide during checkout together with details of your order (name, address, payment details, invoice amount, currency, and transaction number). Data is only passed on for the purpose of payment processing and only to the extent necessary. Stripe's privacy notice is available at https://stripe.com/privacy.

PayPal

If you pay via PayPal (including PayPal-mediated card payments, direct debit, "buy now pay later", or similar where offered), we transmit your payment data to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg, as part of payment processing. The transfer takes place under Art. 6 (1) lit. b GDPR and only to the extent necessary for payment processing. For PayPal-mediated methods that involve credit, PayPal may carry out a credit check using your address data under Art. 6 (1) lit. f GDPR. You can object to such processing at any time by sending a message to PayPal. PayPal's privacy notice is available at https://www.paypal.com/en/webapps/mpp/ua/privacy-full.

Kit (formerly ConvertKit) — Newsletter

We use Kit (operated by ConvertKit, LLC, 505 W. Broad Street #602, Boise, Idaho 83702, USA) to send our newsletter and to embed sign-up forms and popups on our website.

When you sign up for the newsletter, your email address (and any other details you choose to provide) is transmitted to Kit and stored there for the purpose of sending the newsletter. Processing is based on your consent (Art. 6 (1) lit. a GDPR). You can withdraw your consent at any time by clicking the unsubscribe link in any newsletter email or by contacting us. Withdrawal of consent does not affect the lawfulness of prior processing.

Kit also sets cookies and uses tracking technologies to measure newsletter opens, link clicks, and engagement. Details are set out in our Cookie Policy. Kit is a US-based provider; data transferred to the United States is protected under the EU-U.S. Data Privacy Framework where applicable, and otherwise on the basis of EU Standard Contractual Clauses and additional safeguards. Kit's privacy notice is available at https://kit.com/privacy.

Calendly — Appointment Booking

We use Calendly (Calendly, LLC, 271 17th St NW, 10th Floor, Atlanta, GA 30363, USA) to embed a booking widget on our website that allows you to schedule calls with us. When you book a call, the data you enter (name, email, time selection, and any notes you add) is transmitted to and stored by Calendly. Processing is based on Art. 6 (1) lit. b GDPR (pre-contractual measures and contract performance) and on your consent (Art. 6 (1) lit. a GDPR) where applicable. Calendly is a US-based provider; data transferred to the United States is protected as described above. Calendly's privacy notice is available at https://calendly.com/privacy.

Formspree — Contact Form

Our contact form is processed via Formspree (Formspree, Inc., 21750 Hardy Oak Blvd, Ste 104 #26968, San Antonio, TX 78258, USA). When you submit the contact form, the data you provide (name, email address, message content) is transmitted to Formspree and forwarded to us by email. Processing is based on Art. 6 (1) lit. b GDPR (pre-contractual measures) and Art. 6 (1) lit. f GDPR (our legitimate interest in receiving and responding to enquiries). Formspree is a US-based provider; data transferred to the United States is protected as described above. Formspree's privacy notice is available at https://formspree.io/legal/privacy-policy.

Data Transfers to Third Countries

Some of our service providers are based in the United States. Where we transfer personal data outside the European Economic Area, we take additional measures to ensure an adequate level of data protection in accordance with Art. 44 et seq. GDPR. This includes relying on the EU-U.S. Data Privacy Framework (where the recipient is certified), the EU Standard Contractual Clauses, and additional technical and organisational measures such as encryption.

Your Rights

Under the GDPR, you have the following rights in respect of your personal data:

  • Right of access (Art. 15 GDPR) — to obtain confirmation of whether and how we process your personal data and to receive a copy
  • Right to rectification (Art. 16 GDPR) — to have inaccurate data corrected and incomplete data completed
  • Right to erasure (Art. 17 GDPR) — to have your data deleted where the conditions are met
  • Right to restriction of processing (Art. 18 GDPR) — to have processing restricted where the conditions are met
  • Right to data portability (Art. 20 GDPR) — to receive your data in a structured, commonly used, machine-readable format
  • Right to object (Art. 21 GDPR) — to object to processing based on Art. 6 (1) lit. e or f GDPR, including profiling
  • Right to withdraw consent (Art. 7 (3) GDPR) — at any time, with effect for the future
  • Right to lodge a complaint with a supervisory authority (Art. 77 GDPR) — in particular in the EU Member State of your habitual residence, place of work, or place of the alleged infringement

To exercise any of these rights, please contact us at store@patrickputzker.com.

Automated Decision-Making

We do not use automated decision-making or profiling.

Do Not Track

Many browsers offer a "Do Not Track" preference. Our website does not currently respond to Do Not Track signals; however, you can object to non-essential processing through our cookie settings.

"Do Not Sell My Personal Information"

We do not sell personal data that directly identifies you (such as your name, address, or phone number).

Children's Data

Our website is not directed at children, and we do not knowingly collect data from children. If you become aware that a child has provided us with personal data without parental consent, please contact us and we will take the necessary steps to remove that information.

External Links

Our website contains links to other providers' online offerings. We have no influence over the content of linked sites or their compliance with data protection law.

Accuracy

It is important that the data we hold about you is accurate and current. Please keep us informed of any changes.

Changes and Updates

We may update this Privacy Policy from time to time. Please review it regularly. We will publish updates here and, where changes require your cooperation (such as renewed consent) or other individual notification, we will inform you directly.

Queries and Complaints

Any questions or complaints about this policy should be directed to store@patrickputzker.com. If you believe that we have not complied with this policy or with applicable data protection law, please notify us so we can address it.

Last updated: 27th May 2026