Privacy Policy

2. Data we process

A customer account is not required. We process the information you provide when ordering, signing up for the newsletter or contacting us, and technical information needed to operate and protect the website.

• first and last name, email address, and phone number;
• delivery address and, where applicable, billing details;
• products ordered, their value, payment method and status, delivery details, and the operational history of the order;
• messages and requests sent to our team;
• IP address, timestamps, and limited technical information used for security and diagnostics;
• your language and cookie preferences, as well as the contents of the cart stored locally in your browser.
• for newsletter requests: email address, language, consent timestamp and wording version, plus subscription status.

3. Purposes and legal bases

• performance of the contract: processing, payment, delivery, returns, and communications about the order;
• legal obligations: invoicing, accounting, taxation, handling requests, and retaining documents;
• legitimate interests: website security, fraud prevention, protection of legal rights, and operational improvements, provided these do not override your rights;
• consent: only for optional categories of cookies or commercial communications, if they are enabled and you choose to accept them.

4. Who receives the data

We use providers only to the extent necessary to deliver the service: the courier provider enabled for delivery, Stripe for card payments, the invoicing provider, Postmark for transactional messages, and hosting, storage, and security providers. Public authorities may receive data where required by law.

Providers act under their contracts and their own confidentiality obligations. We do not sell personal data.

When the newsletter integration is enabled, MailerLite receives the email address and its assigned group to manage confirmation, delivery and unsubscribe preferences. You can withdraw newsletter consent using the unsubscribe link in messages or by contacting us.

5. International transfers

Some providers may process data outside the European Economic Area. In such cases, we use a recognized legal mechanism, such as an adequacy decision or standard contractual clauses, together with the applicable safeguards.

6. How long we retain data

We retain order data for as long as necessary to perform the contract, handle returns and warranties, and protect legal rights. Tax and accounting documents are retained for the period required by law. Security logs are retained for a limited period proportionate to their purpose, while requests we receive are kept for as long as necessary to resolve them.

When there is no longer a purpose or retention obligation, the data is deleted or anonymized.

7. Your rights

Under the General Data Protection Regulation, you may request access, rectification, erasure, restriction, or portability of your data and may object to certain processing. Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

We will respond within the statutory period and may request additional information only to confirm your identity. Some data cannot be erased immediately if it must be retained by law or to establish, exercise, or defend a legal claim.

8. Cookies and local storage

The website stores the contents of your cart and your cookie preference locally. A strictly necessary cookie remembers your chosen language for no more than one year. This information makes the requested functions available between pages and visits and can be deleted in your browser settings. Pending checkout details are temporarily kept in your browser session to resume the same attempt, then removed after payment submission, a definitive response or when the session ends.

When you choose online payment, Stripe may use cookies or similar technologies necessary for security, fraud prevention, and payment processing. We do not currently use analytics or advertising cookies. If we introduce an optional category, we will block it until you make a choice and ask for your consent again. You can reopen your preferences from the website footer at any time.

9. Security and complaints

We apply technical and organizational measures to protect data, including access controls, encrypted connections, and limits on the information retained. No system can guarantee absolute security, but we assess and handle incidents in accordance with our legal obligations.

If you believe your rights have not been respected, please contact us. You also have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing.