1.Data controller
The data controller is the company operating this e-commerce site. For any request you can reach us at the contact address listed at the bottom of this page.
2.Data we collect
We collect the data you provide directly (name, email, shipping address, phone), payment data handled by our PCI DSS-certified partners and technical browsing data (IP address, cookies, pages visited).
3.Purposes of processing
We process your data to handle orders and shipments, provide customer support, comply with tax and legal obligations, send you marketing communications (with prior consent only) and improve the site experience.
4.Cookies and similar technologies
We use technical, analytics and marketing cookies. You can manage your preferences at any time via the cookie banner or by reading our dedicated Cookie Policy.
5.Third-party services
We share data with couriers (GLS, BRT, SDA, Posta Shqiptare) for shipping, with payment processors (Stripe, PayPal) for transactions, and with analytics providers in aggregated and anonymised form.
6.Your rights (GDPR)
Under EU Regulation 2016/679 you have the right to access, rectify, erase, restrict, object to the processing of, and request portability of your data. To exercise these rights, write to us via the Contact page.
7.Data retention
We retain data only for as long as strictly necessary for the purposes for which it was collected, and in any event according to legal terms (10 years for tax records, 24 months for marketing data).
8.Security
We adopt appropriate technical and organisational measures to protect your data: SSL/TLS encryption, restricted access, regular backups and security audits.
9.Changes to this policy
We may update this policy at any time. Changes will be published on this page with the latest update date.
10.Contact
For any questions about the processing of your personal data, contact us via the form on the Contact page or by writing to the company email listed in the footer.