Privacy policy

The controller of your personal data is the company named at the foot of this page. For any question about how your data is handled, write to the email address given there.

When you place an order we collect your name, email address, delivery address, and phone number if you provide one. We need this to fulfil the contract — without it the order cannot be delivered.

We never see or store your card details. Payment is handled entirely by Stripe, which is PCI DSS certified for that purpose.

The legal basis is performance of a contract (Art. 6(1)(b) GDPR) and compliance with tax obligations (Art. 6(1)(c) GDPR).

If you accept in the banner, we load the Meta pixel (Facebook, Instagram) and Google Analytics. These record page views, add-to-cart events and purchases.

When an order completes we also send the purchase to Meta directly from our server. Your email address, name and address are hashed with SHA-256 first — Meta receives an irreversible fingerprint, not the data itself.

This happens only if you accepted. Without consent the pixel is never loaded and no server-side send takes place either.

The legal basis is your consent (Art. 6(1)(a) GDPR), which you may withdraw at any time.

Stripe, to process payments. The delivery carrier, to deliver your parcel. Meta Platforms Ireland and Google Ireland, to measure advertising, if you consented. Our accountants, to issue and retain invoices.

We do not sell personal data, and we do not share it with anyone not listed above.

Stripe, Meta and Google may process data in the United States. Those transfers rely on the European Commission's Standard Contractual Clauses or on the EU–US Data Privacy Framework.

Order and invoice records are kept for ten years, as tax law requires.

Data collected under consent for measurement is kept for at most 24 months. Newsletter sign-ups are kept until you unsubscribe.

You may at any time request access to your data, its correction or erasure, restriction of processing, transfer to another provider, or object to processing. You may withdraw consent without affecting the lawfulness of processing carried out before you withdrew it.

Send your request to the email address at the foot of this page. We reply within one month at the latest.

If you believe we are processing your data unlawfully, you may complain to the Information Commissioner of the Republic of Slovenia, Dunajska cesta 22, 1000 Ljubljana, gp.ip@ip-rs.si.

Strictly necessary: the locale cookie stores your chosen language, and the spoof.consent entry in your browser stores your measurement decision. The site does not work correctly without them and they do not require consent.

Measurement, only with consent: _fbp and _fbc from Meta, and _ga and related cookies from Google Analytics.

You can change your decision at any time via the Cookie settings link in the footer.

We may update this policy if the way we process data changes. The date of the last revision is shown at the top of the page. If a change is material, we will ask for your consent again.