Privacy Rights – Europe, United Kingdom & Switzerland

Last updated: September 17, 2026

This page supplements our Privacy Policy and Privacy Rights & Requests page. It summarizes privacy rights that may apply to individuals in the European Economic Area, the United Kingdom, and Switzerland. The rights available to you depend on which law applies, the circumstances of the processing, and any applicable exemptions or limitations.

Applicable Privacy Frameworks

Depending on the circumstances, relevant privacy frameworks may include the EU General Data Protection Regulation (GDPR), the UK GDPR and related UK data protection law, and Switzerland's Federal Act on Data Protection (FADP).

Lawful Bases for Processing in the EEA and United Kingdom

Where the EU GDPR or UK GDPR applies, we rely on one or more lawful bases depending on the purpose and context of the processing:

  • Contract and steps requested before a contract: to process orders and payments, create and manage customer accounts, arrange shipping and delivery, handle returns or cancellations, provide requested customer support, and otherwise perform our obligations to you.
  • Legal obligations: to comply with applicable tax, accounting, recordkeeping, customs, sanctions, consumer-protection, regulatory, court, law-enforcement, and other legal requirements.
  • Legitimate interests: where permitted, to operate and secure the store, prevent fraud and abuse, maintain service reliability, improve our services, understand store performance, protect our rights, and manage ordinary business operations, where those interests are not overridden by your rights and interests.
  • Consent: where required, for optional analytics, personalization, marketing, advertising, or similar technologies and communications. You may withdraw consent at any time for future processing where consent is the basis relied on.

The lawful basis that applies can vary by activity and circumstances. If you would like information about the basis relied on for a particular use of your personal data, contact us using the details on this page.

Switzerland

Where Switzerland's Federal Act on Data Protection applies, we process personal data in accordance with the principles and requirements of that law. The GDPR and UK GDPR lawful-basis framework described above does not necessarily apply in the same form under Swiss law.

Rights That May Apply

Depending on the applicable law and the basis for processing, you may have rights concerning:

  • information about how your personal data is processed;
  • access to personal data held about you;
  • correction of inaccurate or incomplete personal data;
  • erasure or deletion in circumstances provided by law;
  • restriction of certain processing;
  • data portability where the legal requirements are met;
  • objection to certain processing, including some direct-marketing processing;
  • withdrawal of consent where processing is based on consent; and
  • protections relating to certain automated decisions or profiling where applicable.

You may also have the right to complain to the relevant data protection authority or pursue other remedies available under applicable law.

Cookie & Tracking Preferences

In the European, UK, and Swiss regions configured for our Shopify cookie banner, optional personalization, analytics, and marketing technologies are controlled through Shopify's privacy controls. You can accept, decline, or manage these categories and change your choices later using Manage preferences in the cookie banner or the Cookie preferences control made available by Shopify on the storefront.

Where processing is based on consent, withdrawing consent applies going forward and does not affect processing that was lawful before withdrawal. For details, see our Cookie & Tracking Policy.

How to Exercise Your Rights

Visit our Privacy Rights & Requests page for request instructions, or email office@cbrnmasks.com with the subject Privacy Rights Request.

We may need to verify your identity before completing a request and may request information reasonably necessary for that purpose. We will handle requests within the time required by applicable law.

Related Privacy Information