← Back to store

Privacy & GDPR Policy

Last updated: October 2026

Who we are

Achilles Xim Configs (achillesstore.com) is the data controller for personal data collected through this store. Contact: achillesconfigs@outlook.com.

What data we collect

  • Account data: email address, display name and profile picture if you create an account.
  • Order data: name, email, country, purchased products, amounts, VAT and order number.
  • Payment data: handled entirely by Stripe. We never see or store your card details.
  • Reviews: the rating, text and name you choose to publish.
  • Analytics (only with consent): anonymous page views and product clicks, collected with Google Analytics.
  • Country detection: your approximate country from your IP address, used only to apply the correct VAT.

Why we use it (legal basis)

  • Contract: to process your order, deliver your config and send your receipt.
  • Legal obligation: to keep order and tax records as required by law.
  • Consent: for analytics cookies. You can withdraw consent at any time.
  • Legitimate interest: to prevent fraud and keep the store secure.

Cookies

We use strictly necessary cookies/storage for login, cart and checkout. Analytics are only enabled if you accept them.

Who we share data with

Stripe (payments and tax), Google Analytics (anonymous visit statistics, only for visitors who accept analytics cookies), our hosting and database provider, and our email provider for receipts. We never sell your data.

Some providers may process data outside the EU/UK; they are covered by standard contractual clauses or equivalent safeguards.

How long we keep it

Order and tax records are kept for up to 7 years as required by law. Account data is kept until you delete your account. Analytics data is anonymous.

Your GDPR rights

  • Access — get a copy of the data we hold about you.
  • Rectification — correct inaccurate data.
  • Erasure — ask us to delete your data ("right to be forgotten").
  • Restriction & objection — limit or object to how we use your data.
  • Portability — receive your data in a machine-readable format.
  • Withdraw consent — at any time via cookie settings.
  • Complain — to your local data protection authority (e.g. ICO in the UK, IMY in Sweden).

To use any of these rights, email achillesconfigs@outlook.com from the address linked to your order or account. We reply within 30 days.