Privacy Policy

Draft for review. Items in [brackets] must be completed before publishing.

Who we are

[Legal entity name], [street address], 21000 Split, Croatia, OIB [number], is the data controller for this website. Contact: info@oljaeinfalt.com.

What we collect and why

Orders: name, address, e-mail, phone and order details, to deliver your order and meet accounting obligations. Kept for the legally required period [11 years under Croatian accounting law].
Payments: processed by Stripe Payments Europe Ltd. We never receive your full card number.
Account: if you create one, your login and order history, until you delete the account.
Newsletter: your e-mail, only with your consent, via Mailchimp. Unsubscribe at any time from any e-mail.
Abandoned cart reminders: if you enter your e-mail at checkout and do not complete the order, we may send up to [3] reminders. Opt out via the link in the e-mail.
Analytics: Google Analytics 4 with IP anonymisation, to understand how the shop is used. [Consent banner: state tool used.]
Security: server logs and firewall data (Wordfence) to protect the site, kept for [30] days.

Who receives data

Stripe (payments), postal and courier services (delivery), Mailchimp (newsletter), Google (analytics and Search Console), our hosting provider [name]. Data is transferred outside the EU only under standard contractual clauses.

Cookies

Essential cookies run the cart and checkout. Analytics and marketing cookies are set only after consent. [List cookie banner tool.]

Your rights

You may request access, correction, deletion, restriction or portability of your data, withdraw consent, and object to processing, by writing to info@oljaeinfalt.com. You may complain to the Croatian Personal Data Protection Agency (AZOP).