This Privacy Policy explains how Emkido™ / Lorsam processes personal information when you visit our store, purchase digital products, request personalisation or contact us.

Samer Radwan, sole proprietor trading as Lorsam under the Emkido™ brand, Sebastianstr. 34, 66773 Schwalbach OT Elm, Germany, is responsible for the processing described in this policy. You can contact us at support@emkido.com or +49 163 9095213.

Orders and digital delivery. When you place an order, we process the information needed to complete it, including your name, email address, billing details, products ordered, order number, price, payment status and related communications. We use this information to fulfil our contract with you, deliver your digital products and provide support (Article 6(1)(b) GDPR). We also retain information where necessary to meet tax and accounting obligations (Article 6(1)(c) GDPR).

Personalised products. When an adult requests a personalised learning book, we process the details supplied for that request, which may include a child's first name, interests or learning preferences. We use the information to prepare and deliver the requested product and communicate about it. Please provide only what is needed for personalisation; do not send medical records, diagnostic documents or other sensitive information. If you provide information about a child, please do so only if you are their parent or legal guardian, or otherwise have the authority to provide that information for the purpose of creating the requested product. Processing the adult customer's request is necessary for the contract (Article 6(1)(b) GDPR). Where the supplied information identifies a child who is not party to the contract, our basis is our legitimate interest in fulfilling the personalisation requested by the adult, taking the child's interests and rights into account (Article 6(1)(f) GDPR).

Digital-file watermark. Our delivered PDF files contain a visible Emkido™ watermark. This helps deter unauthorised distribution and identify the source of a shared copy. Our basis is our legitimate interest in protecting our digital products (Article 6(1)(f) GDPR). Anyone with whom you share the PDF may see the watermark.

Contact and support. If you contact us, we process your message and contact details to respond and deal with your request. The basis is Article 6(1)(b) GDPR for contract-related enquiries and otherwise Article 6(1)(f) GDPR, our interest in responding to enquiries and providing support.

Reviews. We use Judge.me Reviews to manage requests for product reviews and to collect and display submitted reviews. Depending on what you provide, this may involve your order and contact details, chosen display name, rating, review text, and any submitted photo or video. Our legitimate interest in obtaining genuine feedback and helping visitors assess products is the basis under Article 6(1)(f) GDPR where applicable; we use consent under Article 6(1)(a) GDPR where consent is required. A review request is not consent to unrelated marketing.

Store operation and security. Technical information, such as IP address, browser or device details, access times and security-related activity, may be processed to operate the store, maintain sessions and protect it against misuse and fraud. Our basis for processing personal data is our legitimate interest in a secure and functioning store (Article 6(1)(f) GDPR). Rules about accessing or storing information on your device are explained in section 5.

Marketing and analytics. When you choose to receive marketing, we use your contact details to send the communications you signed up for and respect your applicable choices. We use store analytics to understand how the store is used. Non-essential tracking and any personalisation or advertising that requires consent are subject to your choices and the applicable legal requirements. Where consent is the basis (Article 6(1)(a) GDPR), you can withdraw it for the future.

We receive information from you when you order, submit a form, request a personalised product, leave a review or contact us. We also receive technical information from your device when you visit the store, and transaction or service information from providers involved in your chosen payment method, digital delivery, security or customer support.

Our online store runs on Shopify. Shopify provides the storefront, checkout and related services and may process certain information for its own purposes as described in its privacy information. We use Filemonk to deliver digital files and Judge.me Reviews to manage reviews and review requests. We also use Forms, Messaging, FAQ Manager and TnC Terms Checkbox in the store, Shopify Flow for automations, and Translate & Adapt and Nova: Multi Currency Converter for language or currency presentation. A service receives information relevant to the feature you use; using an app does not mean it receives every customer's information. Some providers process information for us, while others may be responsible for their own processing.

Payments depend on the method you select. Shopify Payments lists card methods including Visa, Mastercard, American Express, Maestro and UnionPay, as well as Shop Pay, Apple Pay and Google Pay in its payment-method settings. PayPal and Klarna have appeared as checkout choices. The providers involved in your selected payment receive information needed to process it; we receive information needed to administer the order, such as payment status. Available methods can vary by customer and are displayed at checkout. Payment needed for your order is based on Article 6(1)(b) GDPR, while a payment provider may have its own legal obligations.

We may also disclose information where required by law or where necessary to establish, exercise or defend legal claims. We do not disclose information to an app merely because the app is installed.

The store uses technologies needed for features such as the cart, checkout, sessions and security. Access to or storage of information on your device is governed, where applicable, by section 25 of the German TDDDG. Technologies strictly necessary to provide a service you expressly request may fall under section 25(2) TDDDG. Where required, we ask for consent before using non-essential technologies under section 25(1) TDDDG. Any subsequent processing of personal data also needs its own basis under the GDPR, depending on the purpose.

The Shopify customer-privacy banner is enabled for visitors in all countries, and its configuration requires consent from visitors in all countries.

Service providers may process information outside the European Economic Area. Where an applicable adequacy decision covers a transfer, it may be relied on. Otherwise, transfers must be supported by an appropriate legal safeguard, such as standard contractual clauses where applicable. The destination and safeguard depend on the service and processing involved. You can contact us for information about the safeguards applicable to a particular transfer.

We keep information for as long as needed for the purpose for which it was collected. We may keep particular records longer to fulfil applicable tax or accounting duties, handle claims or comply with other legal obligations. Different records can have different statutory periods, so one retention period does not apply to every order, message or file. Personalisation details are reviewed when the request is completed or abandoned, subject to continuing contractual or legal needs. Backups may retain information for a limited technical cycle. 

Subject to the conditions of the GDPR, you can ask for access to your personal data, correction, deletion, restriction of processing or portability. You may object to processing based on legitimate interests. If processing is based on consent, you can withdraw it at any time for the future. To exercise your rights, contact support@emkido.com. We may need to verify your identity. You may also complain to a data-protection supervisory authority, including the authority competent for our establishment in Saarland.

Our products are intended for families, but adults place orders and submit personalisation requests. We do not ask children to place orders or provide their details directly. Please provide only the limited information needed to personalise a product and do not submit sensitive information about a child.

Automated tools may be used for store operations, security or analytics. If we use solely automated decision-making that has legal or similarly significant effects on a person, we will provide any additional information required by Article 22 GDPR and applicable law.

We may update this notice when our practices or applicable requirements change. The current version is available on our store. For questions about this policy or your information, contact support@emkido.com.