Privacy Policy – LOQAL GmbH (for customers in the United States)
This policy explains how LOQAL GmbH ("LOQAL", "we", "us") collects, uses and shares personal information when you visit loqal.world or buy from us, and which rights you have under U.S. state privacy laws, including the California Consumer Privacy Act as amended by the CPRA ("CCPA"). Customers in the EU/EEA can read our GDPR privacy notice.
1. Who we are
LOQAL GmbH, Findorffstraße 22, 28215 Bremen, Germany. Email: info@loqal.world, phone: +49 421 3032123.
2. Personal information we collect
Identifiers and contact details – name, shipping and billing address, email address, phone number (when you order or contact us).
Commercial information – products ordered, order history, designs and places you choose.
Payment information – processed directly by our payment providers; we do not store full card numbers.
Internet activity – IP address, browser type, pages visited and timestamps in our server logs (deleted after 14 days).
Approximate location – the country derived from your IP address to preselect language and currency. This lookup runs on our own server and is not stored.
Communications – messages you send us by email, contact form or support chat.
We do not collect sensitive personal information as defined by the CCPA, and we do not knowingly collect information from children under 16.
3. How we use it
to produce, ship and support your order and to process payments;
to answer your questions;
to send our newsletter if you have subscribed and confirmed your subscription;
to keep our website secure and working;
to meet legal, tax and accounting obligations.
4. Who we share it with
We disclose personal information only to service providers that act on our behalf:
Shopify – our shop and checkout platform (product images may be loaded from Shopify's servers);
Printful – produces and ships your order, including through its U.S. facilities, and passes your shipping details to the carrier;
Payment providers – Shopify Payments and PayPal;
OpenAI – processes messages you type into our support chat to generate answers;
Hetzner (hosting, Germany) and IONOS (email, Germany).
Our website does not use analytics or advertising trackers. Place names you search for are sent from our server to mapping services (OpenStreetMap services, LocationIQ) without any information about you.
5. Sale and sharing of personal information
We do not sell your personal information, and we do not share it for cross-context behavioral advertising. In the past 12 months we have not done so.
Our checkout runs on Shopify. Shopify offers merchants optional advertising features that could count as "sharing" under some state laws. To make sure your information is not used this way, you can opt out at any time using the link below. We also treat a Global Privacy Control (GPC) signal from your browser as a valid opt-out request.
Your Privacy Choices – Do Not Sell or Share My Personal Information
6. Cookies
We only use cookies and browser storage that are necessary for the shop to work: your chosen language and currency (180 days) and your cart. A marketing cookie that links an order to one of our ad links is only set if you agree to it in our cookie notice. The Shopify checkout sets its own cookies, described in Shopify's cookie policy.
7. How long we keep it
Order and invoice records are kept for up to 10 years because of German tax and commercial law. Server logs are deleted after 14 days. Unconfirmed newsletter sign-ups are deleted. Other information is deleted when it is no longer needed.
8. Your rights
Depending on the state you live in (including California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon and others), you have the right to:
know what personal information we have collected about you and access a copy of it;
correct inaccurate personal information;
delete your personal information;
opt out of the sale or sharing of personal information and of targeted advertising;
not be discriminated against for exercising these rights.
To make a request, email info@loqal.world with the subject "Privacy request". We will verify your identity by asking you to confirm details of your order or your email address, and we respond within 45 days. You can use an authorized agent; we will ask for proof of authorization. If we deny your request, you can appeal by replying to our decision; if the appeal is denied, you can contact your state attorney general.
9. International transfers
We are based in Germany. Your information is processed in Germany, the EU and the United States.
10. Changes
We will update this policy when our practices change and post the new version here.
Last updated: October 9, 2026