Privacy & GDPR Policy
Last updated: October 2026
Who we are
Achilles Xim Configs (achillesstore.com) is the data controller for personal data collected through this store. Contact: achillesconfigs@outlook.com.
What data we collect
- Account data: email address, display name and profile picture if you create an account.
- Order data: name, email, country, purchased products, amounts, VAT and order number.
- Payment data: handled entirely by Stripe. We never see or store your card details.
- Reviews: the rating, text and name you choose to publish.
- Analytics (only with consent): anonymous page views and product clicks, collected with Google Analytics.
- Country detection: your approximate country from your IP address, used only to apply the correct VAT.
Why we use it (legal basis)
- Contract: to process your order, deliver your config and send your receipt.
- Legal obligation: to keep order and tax records as required by law.
- Consent: for analytics cookies. You can withdraw consent at any time.
- Legitimate interest: to prevent fraud and keep the store secure.
Cookies
We use strictly necessary cookies/storage for login, cart and checkout. Analytics are only enabled if you accept them.
Who we share data with
Stripe (payments and tax), Google Analytics (anonymous visit statistics, only for visitors who accept analytics cookies), our hosting and database provider, and our email provider for receipts. We never sell your data.
Some providers may process data outside the EU/UK; they are covered by standard contractual clauses or equivalent safeguards.
How long we keep it
Order and tax records are kept for up to 7 years as required by law. Account data is kept until you delete your account. Analytics data is anonymous.
Your GDPR rights
- Access — get a copy of the data we hold about you.
- Rectification — correct inaccurate data.
- Erasure — ask us to delete your data ("right to be forgotten").
- Restriction & objection — limit or object to how we use your data.
- Portability — receive your data in a machine-readable format.
- Withdraw consent — at any time via cookie settings.
- Complain — to your local data protection authority (e.g. ICO in the UK, IMY in Sweden).
To use any of these rights, email achillesconfigs@outlook.com from the address linked to your order or account. We reply within 30 days.