Privacy policy

Contents

  1. Data Controller
  2. Scope of this Policy
  3. What Data We Collect
  4. Purposes & Legal Bases (GDPR)
  5. Cookies & Similar Technologies
  6. Sharing & Processors
  7. International Transfers
  8. Data Retention
  9. Security
  10. Your Rights
  11. Minors
  12. Changes to this Policy
  13. Contact

1. DATA CONTROLLER

Handcrafted Goods Studio S.R.L. (“Handcrafted Goods Studio”, “we”, “us”, “our”)
Registered address: Str. Banul Manta, Nr. 22, Bl. 29, Sc. C, Ap. 109, Sectorul 1, București, Romania
CUI / CIF: 52562001
EU VAT / Intracomunitary VAT: 53786708
Email: hello@handcraftedgoods.studio | Phone: +40 784 562 149

2. SCOPE OF THIS POLICY

This policy explains how we collect, use, disclose, and protect your personal data when you visit handcraftedgoods.studio, create an account, place an order, contact us, subscribe to our newsletter, or otherwise interact with our website, products, or services.

It applies to personal data processed in connection with our online store and related communications and is intended to reflect applicable privacy and data protection requirements, including the GDPR where relevant.

3. WHAT DATA WE COLLECT

  • Identity & contact data: name, email address, phone number, billing address, shipping address.
  • Order data: products purchased, order value, currency, order notes, order history.
  • Payment data: payment status and limited payment-related details processed by payment providers; we do not store full card details.
  • Technical data: IP address, device and browser information, cookie identifiers, analytics identifiers, and advertising-related identifiers where enabled.
  • Communications: emails, messages, support conversations, contact form submissions.
  • Marketing preferences: newsletter opt-in status, cookie consents, privacy preference settings.
  • User-generated content: reviews, questions, customization details, and other content you voluntarily provide.
Purpose Examples Legal basis
Order processing & account management Taking and fulfilling orders, returns, warranty handling, account access Performance of a contract
Customer support Answering questions, resolving issues, handling service requests Performance of a contract and/or legitimate interests
Payments Processing payments via Shopify Payments and/or other enabled providers Performance of a contract; legal obligations
Shipping Sharing delivery details with couriers, shipping notifications Performance of a contract
Marketing communications Newsletters, offers, launch updates, promotional communications Consent where required
Analytics & site performance Measuring traffic, understanding store usage, improving website performance Consent where required for non-essential analytics and similar technologies
Advertising measurement & optimization Measuring campaign performance, attributing visits and purchases, improving ad relevance Consent where required
Fraud prevention & security Detecting abuse, protecting transactions, securing accounts and website infrastructure Legitimate interests and/or legal obligations
Legal compliance Accounting, tax, consumer law, responding to legal requests Legal obligations

Where permitted and enabled, we may use analytics and marketing technologies to understand whether visitors interact with our ads, which visits and purchases are attributable to those ads, and to improve the relevance of marketing shown on platforms such as Facebook, Instagram, Google, and YouTube.

5. COOKIES & SIMILAR TECHNOLOGIES

We use cookies, pixels, tags, and similar technologies to operate our website, remember your preferences, understand how visitors use our store, and—where permitted—measure and improve our marketing.

You can manage your preferences through our cookie banner and privacy settings tools, and you can also control certain cookies through your browser settings.

We use the following categories of technologies:

Strictly necessary

These enable core website features such as cart, checkout, security, fraud prevention, and saving your privacy choices.

Preferences

These remember choices such as language, region, and other browsing preferences to improve your experience on future visits.

Analytics

These cookies help us understand how visitors use the site, such as which pages are viewed, how visitors move through the store, and where improvements may be needed. If enabled, this may include Shopify analytics and Google Analytics.

Marketing

These cookies and similar technologies help us and our partners measure ad performance, understand which visits and purchases came from our campaigns, and show more relevant ads on platforms such as Facebook, Instagram, Google, and YouTube. If enabled, this may include tools such as the Meta Pixel, Conversions API, Google Ads tags, and related advertising technologies.

Non-essential technologies, including analytics and marketing technologies, are used only where required after you provide your consent. You can withdraw or update your preferences at any time through our cookie/privacy preferences tools.

6. SHARING & PROCESSORS

We share personal data only where necessary and with trusted service providers acting on our behalf or as independent service providers, depending on the context. These may include:

  • Shopify (store platform, hosting, checkout, and related ecommerce infrastructure)
  • Payment processors (such as Shopify Payments, Stripe, PayPal, or other enabled providers)
  • Delivery and logistics providers (to deliver your order and provide shipment updates)
  • Email and customer communication providers (for transactional messages and, where permitted, marketing emails)
  • Advertising and analytics partners (such as Meta and Google, if enabled) to measure campaign performance, understand visits and purchases attributed to our campaigns, and improve the relevance of marketing shown to you
  • Fraud prevention and security providers
  • Professional advisors such as accountants, auditors, and legal advisors
  • Public authorities or regulators where disclosure is required by law

7. INTERNATIONAL TRANSFERS

Some partners may be located outside the EEA. Where this occurs, we rely on appropriate safeguards to protect your data, such as adequacy decisions, contractual protections, or other lawful transfer mechanisms where applicable.

8. DATA RETENTION

We retain personal data only for as long as necessary for the purposes described in this policy or as required by law.

  • Orders, invoices, and tax/accounting records: retained for the period required under applicable legal and accounting obligations.
  • Account data: retained while your account is active and for a limited period afterward unless deletion is requested or required earlier.
  • Marketing data: retained until you withdraw consent, unsubscribe, or after a reasonable inactivity period.
  • Customer service communications: retained for as long as necessary to resolve the matter and for a limited period afterward for recordkeeping, dispute handling, and service improvement.
  • Cookie and consent records: retained as needed to document and manage your privacy choices.

9. SECURITY

We implement technical and organizational measures designed to protect personal data, including HTTPS, access controls, least-privilege access, and secure payment processing handled by specialized providers. No system is completely secure, and we continuously review and improve our safeguards.

10. YOUR RIGHTS

Under applicable data protection laws, including the GDPR where relevant, you may have the right to access, rectify, erase, restrict processing of, and receive a copy of your personal data, as well as the right to object to certain processing, including direct marketing.

Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise your rights, contact us at hello@handcraftedgoods.studio. You may also have the right to lodge a complaint with the Romanian data protection authority (ANSPDCP) if you believe your personal data has been processed unlawfully. More information is available at www.dataprotection.ro.

11. MINORS

Our store is not intended for children under 16. We do not knowingly collect personal data from children. If you believe a child has provided personal data to us, please contact us so we can take appropriate steps.

12. CHANGES TO THIS POLICY

We may update this policy from time to time to reflect operational, legal, or regulatory changes. Any updates take effect when posted on this page, unless otherwise stated.

13. CONTACT

For privacy matters, contact:
hello@handcraftedgoods.studio | +40 784 562 149