Skip to main content

Protect Every Surface, Enjoy Every Moment

1. Data Controller & Contact Information

The entity responsible for the processing of personal data under this Privacy Policy (the “Data Controller”) is apexheatmat, operating from Germany.

For all privacy inquiries, data protection regulatory requests, or the exercise of statutory data subject rights, please contact our privacy administration:

  • Brand Name: apexheatmat

  • Official Website: www.apexheatmat.com

  • Primary Privacy Contact Email: gloves@apexheatmat.com

  • Business Location: Germany (Note: If applicable, inserting a full registered corporate address here satisfies GDPR Art. 13 requirements)

2. Scope & Legal Framework

This Privacy Policy applies to personal information collected through our storefront (www.apexheatmat.com) from users residing in the European Union (EU), the United Kingdom (UK), and the United States (US).

We operate in strict compliance with applicable international privacy legal frameworks, including:

  • EU GDPR: Regulation (EU) 2016/679 (General Data Protection Regulation)

  • UK GDPR: Data Protection Act 2018

  • US Privacy Laws: California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and applicable state privacy statutes.

3. Categories of Personal Data Processed

To fulfill orders, manage our storefront, and prevent fraudulent transactions, we process the following categories of personal data:

  • Identity & Contact Data: Full name, shipping address, billing address, and email address.

  • Transactional Data: Details of thermal gloves, heat insulation mats, order history, timestamps, order amounts, and fulfillment/tracking numbers.

  • Technical & Device Data: IP address, browser type, device identifiers, time-zone settings, and essential operational logs collected during site interactions.

4. Payment Processing Services (Stripe)

Financial transactions executed on apexheatmat are processed using secure external infrastructure provided by Stripe Inc. / Stripe Payments Europe, Ltd.

  • Data Handling: When purchasing thermal gloves or table mats, your financial data (such as payment card details, billing addresses, and payment tokenization) is collected directly by Stripe over TLS-encrypted connections.

  • No Local Storage: apexheatmat does not store, process, or have access to raw payment card credentials (PANs/CVVs) on its servers.

  • Fraud Prevention: Stripe may collect device telemetry and transaction data to evaluate transaction risk and prevent payment fraud under its own independent Privacy Policy.

5. Legal Bases for Data Processing (GDPR / UK GDPR)

We rely on the following statutory legal grounds to process personal data:

  • Contractual Necessity (Art. 6(1)(b) GDPR): Processing required to process, fulfill, ship, and support sales orders placed by the customer.

  • Legal Compliance (Art. 6(1)(c) GDPR): Retention required to satisfy statutory commercial, accounting, and tax mandates under German law (e.g., Handelsgesetzbuch / Abgabenordnung).

  • Legitimate Interests (Art. 6(1)(f) GDPR): Essential operational continuity, preventing payment fraud/chargebacks, and ensuring site cybersecurity.

6. Cookies & Tracking Technologies

We use essential cookies and similar tracking identifiers strictly necessary for website operation, cart management, session persistence, and Stripe payment verification/fraud screening. Users may control or block cookies through browser settings, though disabling essential cookies may impact checkout functionality.

7. US Residents & California Privacy Rights (CCPA / CPRA)

If you reside in California or other US jurisdictions with statutory privacy legislation:

  • No Sale or Sharing: apexheatmat does NOT sell your personal information, nor do we share your personal data with third parties for cross-context behavioral advertising.

  • Consumer Rights: US residents have the right to request access, correction, or deletion of their personal information, as well as the right to non-discrimination for exercising these rights.

  • To exercise these rights, submit a written request to gloves@apexheatmat.com.

8. Data Retention Schedule

Personal data is retained only for duration periods mandated by commercial or statutory requirements:

  • Commercial & Tax Records: Transaction and order data are retained for up to ten (10) years post-completion to comply with German statutory commercial record-keeping obligations (HGB § 257 / AO § 147).

  • Customer Support Records: Correspondence sent to gloves@apexheatmat.com is retained for up to six (6) years from resolution for administrative oversight.

  • Technical Server Logs: System access logs are retained for up to ninety (90) days for security monitoring.

9. Statutory Rights of Data Subjects (EU / UK)

Under applicable GDPR provisions, you hold the following statutory rights regarding your personal data:

  • Right of Access & Data Portability: Request confirmation and a structured copy of your stored personal data.

  • Right to Rectification: Request correction of inaccurate or incomplete records.

  • Right to Erasure (“Right to be Forgotten”): Request deletion of data where retention is no longer legally required.

  • Right to Restrict or Object: Object to or limit processing under specific legal conditions.

To exercise any of these rights, please submit your request to gloves@apexheatmat.com. You also retain the right to lodge a complaint with a competent supervisory authority in Germany or your country of residence.

10. Security Governance & Updates

We implement appropriate technical and administrative safeguards (including TLS encryption and strict access controls) to protect your personal data. This policy may be updated periodically to reflect evolving legal requirements or site operations.

For privacy questions or regulatory communications, contact:

  • Entity: apexheatmat

  • Official Website: www.apexheatmat.com

  • Official Email: gloves@apexheatmat.com