When you place an order, we collect your name, email, shipping address, and payment details (handled by our payment processor — we don't store card numbers ourselves). When you browse the site, a small amount of technical data (like your cart contents and language or currency preference) is stored in your browser so the site works correctly.

We use your information to process and ship your order, provide customer support, and send order-related emails (confirmation, shipping, tracking). We won't send marketing email unless you've opted in.

We process your data to perform our contract with you when you place an order (processing, shipping, support, order emails), to comply with our legal obligations (tax and accounting records), and based on our legitimate interest in understanding how the site is used, preventing fraud, and measuring and improving our advertising (Meta Pixel, PostHog). You can object to processing based on legitimate interest at any time — see "Your rights" below.

We share order data with the services that make the store work: our commerce and payment platform (Shopify, including card payments, Apple Pay, and Google Pay), PayPal, and Klarna where you choose them at checkout — Klarna may run its own credit or identity check as part of approving a payment. We also use our shipment tracking provider (17TRACK) for delivery updates. We share limited, aggregated or hashed order information with Meta (for advertising measurement) and PostHog (for product analytics and error monitoring). Where any of these providers process data outside the EEA — for example Meta — this is safeguarded by the European Commission's Standard Contractual Clauses or an equivalent legal safeguard. We don't sell your data to anyone.

We use a small number of essential cookies to keep your cart, language, and currency preferences working between page visits. We also use Meta Pixel to measure and improve our advertising, and PostHog to understand how visitors use the site and to catch errors — both may set cookies or use similar technologies in your browser. You can block or delete these through your browser settings at any time; the store will still work, though we won't be able to remember your cart or preferences without the essential cookies.

We keep order and accounting records for 10 years, as required by Slovenian tax and accounting law. You can ask us to delete other personal data at any time, subject to that legal requirement.

If you're in the EU, you have the right to access, correct, or delete your personal data, and to object to how it's used — including to opt out of the advertising and analytics tools described above. If you're in the UK, you have equivalent rights under the UK GDPR. To exercise any of these, email us — we reply within one business day. You can also lodge a complaint with your local data protection authority (the Information Commissioner's Office if you're in the UK).

Questions about this policy: hello@eclarix.eu.