For purchases and orders: name, billing and shipping address, phone, email, personal identity number when needed, payment details, order history, IP address, and site usage data.
Legal bases include contract performance, legitimate interest (e.g. marketing), and consent or active signup where applicable.