GDPR Compliance | Privacy Policy | Terms & Condition

Last updated: August 28, 2026 (“GDPR Compliance” remarketing notice)

1. Who This Supplement Applies To

This Supplement applies if you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland and visit www.backdropsource.com (the “Site”). It supplements, and should be read together with, our main Privacy Policy. Where this Supplement conflicts with the main Privacy Policy on a point specific to EEA/UK/Swiss residents, this Supplement controls.

Backdropsource Inc. is established in the United States. We process the personal data of EEA/UK/Swiss visitors because we offer goods for sale to, and monitor the on-site behavior of, individuals in those regions, which brings us within the territorial scope of the General Data Protection Regulation (GDPR) and the UK GDPR.

2. Legal Basis for Processing

Under GDPR Article 6, we rely on the following legal bases for each category of processing:

Processing Activity	Legal Basis (GDPR Art. 6)	Retention
Processing your order, payment, and shipping	Performance of a contract (Art. 6(1)(b))	Duration required by tax/accounting law
Fraud prevention and security screening	Legitimate interests (Art. 6(1)(f))	Per vendor retention practice
Marketing emails and SMS	Consent (Art. 6(1)(a))	Until you withdraw consent
Analytics and remarketing cookies (Google Analytics, Meta Pixel)	Consent (Art. 6(1)(a)); ePrivacy Art. 5(3)	Until you withdraw consent, or per cookie table below
Customer support (chat, phone, email)	Performance of a contract / legitimate interests	Duration of relationship plus a reasonable period

We do not process special category data (e.g., health, biometric, or religious data) through the Site.

3. Cookies and Similar Technologies

Non-essential cookies (analytics, advertising, and certain functional cookies) are only set after you provide affirmative, opt-in consent through our cookie consent banner. You can accept or reject each category individually, and rejecting is as easy as accepting. You may withdraw consent at any time via the cookie preferences link in the Site footer.

Category	Examples	Purpose	Consent Required?
Strictly necessary	Session, cart, security cookies	Required for the Site to function	No (disclosure only)
Analytics	Google Analytics	Understand Site usage and performance	Yes
Advertising	Meta (Facebook) Pixel, Google Ads remarketing	Cross-context behavioral advertising and remarketing	Yes
Functional	Tawk.to chat widget	Enable live chat support	Yes (non-essential)

Advertising cookies (Meta Pixel, Google Ads remarketing) are used to build and target remarketing audiences on Facebook, Instagram, and the Google Display Network. If you consent, your on-site activity may be shared with Meta and Google for this purpose; you can withdraw this consent at any time without affecting the lawfulness of processing before withdrawal.

4. Your Rights Under GDPR

If you are located in the EEA, UK, or Switzerland, you have the following rights with respect to your personal data:

Right	What it means
Right of access (Art. 15)	Request confirmation of whether we process your data, and a copy of it.
Right to rectification (Art. 16)	Request correction of inaccurate or incomplete personal data.
Right to erasure (Art. 17)	Request deletion of your personal data, subject to legal exceptions (e.g., tax records).
Right to restrict processing (Art. 18)	Request that we limit how we use your data in certain circumstances.
Right to data portability (Art. 20)	Receive your data in a structured, commonly used format, or have it transferred.
Right to object (Art. 21)	Object to processing based on legitimate interests, or to direct marketing at any time.
Right to withdraw consent	Withdraw consent (e.g., for cookies or marketing) at any time, without affecting prior lawful processing.
Right to lodge a complaint	Complain to your local data protection supervisory authority.

To exercise any of these rights, contact us at privacy@backdropsource.com. We will respond within one month of a valid request, extendable by two further months for complex requests, as permitted under Article 12(3).

5. International Data Transfers

Because Backdropsource is based in the United States, personal data of EEA/UK/Swiss visitors is transferred to and processed in the United States by us and by service providers such as Shopify, our payment processor, our fraud-screening provider, and our analytics/advertising partners. Where required, we rely on the European Commission's Standard Contractual Clauses (SCCs), the UK International Data Transfer Addendum, or another recognized transfer mechanism to safeguard these transfers. A copy of the relevant safeguard is available on request to privacy@backdropsource.com.

6. Supervisory Authority

If you believe our processing of your personal data infringes GDPR, you have the right to lodge a complaint with the data protection supervisory authority in your EU member state of residence, place of work, or the place of the alleged infringement, or with the UK Information Commissioner's Office (ICO) if you are in the United Kingdom.

7. EU/UK Representative

Backdropsource Inc. does not currently have a designated representative in the EU or UK under Article 27 GDPR / Article 27 UK GDPR. [Add representative name and contact details here once appointed, if your processing falls within scope of the Article 27 requirement and does not qualify for the occasional-processing exemption — confirm applicability with counsel].