01Who processes the data
The controller of your personal data is[to be filled in: name of the legal entity],[to be filled in: registered address], contact[email protected]. The shop runs on the Shopy platform, which processes the data on our behalf and according to our instructions.
02What data we collect
- Account: email and password (kept only in a protected, irreversible form), first name, last name, phone and delivery address.
- Orders: the products ordered, the delivery address and phone, how you receive the order and your note.
- Communication: the messages you send us by email.
- Technical data: your IP address in server logs, and the sign-in, cart and language cookies described in Cookies.
03Why and on what basis
- Performance of the contract: processing, delivering and supporting your order, running your account.
- Legal obligation: accounting and tax records of the sale.
- Legitimate interest: the security of the shop and the prevention of abuse.
We do not profile you and we make no automated decisions about you.
04Who we share it with
- The courier service that delivers the parcel: your name, address and phone.
- The Shopy platform and its hosting, on servers in[to be filled in: country of the servers].
- The email provider, for the messages about your order and account.
- Cloudflare, the network that protects the website and makes it faster.
We have no advertising or analytics partners and we do not sell your data to anyone.
05How long we keep it
- Your account, until you ask us to delete it.
- Orders, for as long as accounting and tax regulations require.
- Server logs, for at most [to be filled in: number of days] days.
06Security
The website is available only over an encrypted connection (HTTPS). We do not keep passwords in a readable form, and the sign-in cookie is not accessible to the page's scripts. Only the people handling your order have access to your data.
07Your rights
Under the Law on Personal Data Protection, you have the right of access, rectification, erasure, restriction of processing, portability and objection. Write to us at [email protected]; we will reply within 30 days at the latest. You also have the right to lodge a request with the Personal Data Protection Agency (azlp.mk).
08Changes
If we change this policy, we publish the new version on this page with a new date. We let you know of larger changes by email.