Privacy Policy

This Privacy Policy explains how Upffront GmbH (‘Upffront’, ‘we’, ‘our’, or ‘us’) collects, uses, and protects your personal data when you visit or make a purchase from www.upffront.com. It also explains your data protection rights under the EU and UK General Data Protection Regulations (‘GDPR’).

• Service: The www.upffront.com website operated by Upffront GmbH.
• Personal Data: Information that identifies you as an individual (such as name, email, address, phone number, IP address, etc.).
• Usage Data: Data collected automatically when you visit or interact with the website (e.g. pages viewed, browser type, device information).
• Cookies: Small text files stored on your device to help us remember preferences and analyse traffic.
• Data Controller: Upffront GmbH, Freesenberg 16, 24161 Altenholz, Germany.

 Email: [email protected] | Phone:+49 431 2202140

Information Collection and Use

We collect information in two main ways:

1. Information you provide to us directly, and
   
   
2. Information collected automatically when you use our website.
   
   

We use this information to process your orders, communicate with you, improve our products and services, and ensure that the website functions properly and securely.

1. Information You Provide

When you use our website, create an account, make a purchase, or contact us, you may provide some or all of the following information:

• Identity and contact details – such as your name, billing and shipping address, telephone number, and email address.
  
  
• Order details – including products purchased, order value, payment method, and delivery preferences.
  
  
• Account information – if you register on our website, we store your login credentials (email and encrypted password).
  
  
• Payment information – processed securely by our authorised payment service providers (we do not store full card numbers).
  
  
• Communications – any correspondence you send to us by email, contact form, or other channels (for example, product enquiries or support requests).
  
  
• Marketing preferences – your choice to receive or decline newsletters or promotional emails.
  
  

We collect this information to:

• process and deliver your orders,
  
  
• provide customer support,
  
  
• manage your account,
  
  
• send transactional messages (order confirmations, shipping updates, etc.), and
  
  
• send marketing messages only if you have opted in.
  
  

2. Information Collected Automatically

When you visit or interact with our website, certain information is automatically collected using cookies, server logs, and similar technologies. This may include:

• Technical information – such as your Internet Protocol (IP) address, browser type and version, operating system, device type, and time zone setting.
  
  
• Usage information – including the pages you view, the links you click, time spent on the site, and referring or exit pages.
  
  
• Cookie data and analytics – gathered via tools such as Google Analytics to help us understand how visitors use our site and to improve navigation and content.
  
  
• Advertising data – collected through services like Google Ads and Meta Ads to measure and personalise advertising based on consented cookies.
  
  

This data is primarily used to:

• ensure the website loads and functions correctly on your device,
  
  
• analyse performance and improve user experience,
  
  
• protect our systems against fraud or abuse, and
  
  
• deliver relevant advertising and marketing (where you have given consent).
  
  

You can control or withdraw consent for non-essential cookies at any time through our cookie banner or browser settings. For full details, see our Cookie Policy.

Cookies and Tracking

We use cookies and similar tracking technologies to analyse traffic, remember preferences, and measure the effectiveness of marketing campaigns.

Our use of cookies is explained in our Cookie Policy.

You can manage or withdraw consent for non-essential cookies at any time via the cookie banner or your browser settings.

We use third-party services such as Google Analytics, Google Ads, and Meta (Facebook/Instagram) Ads for analytics and advertising. These services may use cookies or similar technologies to collect information about your browsing activity and interests. For details, see the “Third-Party Services” section below.

​

Use of Data

Upffront GmbH uses the collected data to:

✅ Provide and deliver products and services.

✅ Process payments and manage orders.

✅ Communicate with you about orders, shipping, or support requests.

✅ Improve the website, products, and marketing.

✅ Send marketing or product updates (only with consent).

✅ Comply with legal obligations.

You can unsubscribe from our marketing emails at any time by clicking the link in any message or contacting [email protected].

​

Legal Basis for Processing Personal Data

We only process your personal data when we have a valid legal reason to do so.

Depending on the situation, this may be because:

• Contract: we need to process your information to fulfil a contract with you — for example, to deliver your order or provide customer support.
  
  
• Consent: you have given us permission to use your data — for example, when you subscribe to marketing emails or accept analytics cookies.
  
  
• Legitimate interests: we have a business reason to use your data that does not override your rights — for example, improving our website or preventing fraud.
  
  

Legal obligation: we must retain certain data to comply with accounting or tax laws.

​

Data Retention

Upffront GmbH retains personal data only as long as necessary to fulfil the purposes outlined or as required by law.

Usage data is typically retained for a shorter period (e.g. 14 months in Google Analytics).

International Data Transfers

Your data is primarily processed in Germany and within the European Economic Area (EEA).

If data is transferred outside the EEA/UK (for example, when using Google or Meta services based in the United States), we rely on:

• The EU–U.S. and UK–U.S. Data Privacy Frameworks, or
  
  
• Standard Contractual Clauses approved by the European Commission, to ensure your data remains protected.

​

Disclosure of Data

We share personal data only when it is necessary and in accordance with data protection law.

Your information may be disclosed in the following limited circumstances:

• Service providers:
  We work with trusted partners who perform services on our behalf — for example, order fulfilment, shipping, payment processing, IT hosting, analytics, and marketing support.
  These partners are bound by contract to process personal data only under our instructions and to keep it secure.
  
  
• Legal and regulatory requirements:
  We may share information if required to do so by law, regulation, or legal process — for example, to comply with tax obligations, respond to lawful requests from authorities, or defend our legal rights.
  
  
• Business transactions:
  If Upffront GmbH is involved in a merger, acquisition, restructuring, or sale of assets, personal data may be transferred as part of that process.
  In such cases, we will ensure that your rights remain protected and that you are notified before your data is transferred to a new entity.
  
  

We do not sell or rent personal data to any third party.

All transfers of information are made securely, and only to the extent necessary for the stated purpose.

Security of Data

We take appropriate technical and organisational measures to protect your data from loss, misuse, or unauthorised access. However, no method of transmission over the Internet is completely secure.

Your GDPR Rights

Under the EU and UK General Data Protection Regulations (GDPR), you have the following rights regarding your personal data:

• Access: You can request a copy of the personal data we hold about you.
  
  
• Correction: You can ask us to correct or complete any inaccurate or incomplete information.
  
  
• Deletion: You can request the deletion of your personal data where there is no longer a legal reason for us to keep it.
  
  
• Restriction: You can ask us to limit how we use your data in certain circumstances.
  
  
• Objection: You can object to our processing of your data when it is based on our legitimate interests or for direct marketing.
  
  
• Data portability: You can request to receive your data in a structured, commonly used, and machine-readable format, or ask us to transfer it directly to another organisation.
  
  
• Withdraw consent: If we process your data based on consent (for example, for marketing or cookies), you can withdraw that consent at any time.
  
  

To exercise any of these rights, please contact us at:

[email protected]

If you have concerns about how we handle your data, you have the right to lodge a complaint with your local supervisory authority.

In Germany, this is:

Der Bundesbeauftragte für den Datenschutz und die Informationsfreiheit (BfDI) — www.bfdi.bund.de

Analytics, Advertising and Remarketing

We use third-party services such as Google Analytics, Google Ads, and Meta Ads (Facebook and Instagram) to help us understand how visitors use our website and to deliver relevant advertising. These tools use cookies and similar technologies to collect limited information about your device and browsing behaviour.

Processing of this data is based on your consent, which you can manage or withdraw at any time through the cookie banner or your browser settings.

These providers may process data outside the EU or UK, in which case they do so under approved safeguards such as the EU–U.S. and UK–U.S. Data Privacy Frameworks or Standard Contractual Clauses.

For details about the specific cookies used and how to control them, please see our Cookie Policy.

Updates to this Policy

This Privacy Policy was last updated on 14/10/2025. 

We may update it from time to time, and any significant changes will be posted on this page