This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit aliceartworld.ro or place an order through our website.
The website is operated by Allistration SRL (“we”, “us”, or “the operator”). We process personal data in accordance with Regulation (EU) 2016/679 (GDPR).
1. What personal data do we collect?
We only collect data necessary for order processing, communication, and user experience:
- Full name
- Delivery / billing address
- Phone number
- Email address
- Order details and purchase history
- Preferences (e.g., wishlist, cart)
- Technical information (IP address, browser type, device) for security and statistics
2. Why do we collect your data?
Your personal data is processed for the following purposes:
- Creating, confirming, and delivering your order
- Invoicing and legal compliance
- Customer support and product-related communication
- Handling returns or complaints
- Newsletter / marketing communications (only with your explicit consent)
- Improving the browsing and shopping experience
3. Legal basis for processing
We process personal data based on:
- Performance of the contract (orders placed via the website)
- Legal obligations (invoicing and accounting)
- Consent (newsletter / marketing communications)
- Legitimate interest (security, fraud prevention, and service optimization)
4. Data retention
- Accounting and invoicing data: 10 years (as required by law)
- Customer account data: for the duration of the customer relationship
- Newsletter data: until consent is withdrawn
- Security logs: up to 1 year
You may request deletion of your data at any time, unless retention is required by law.
5. Disclosure of data
We may share your data only with trusted third parties necessary for the operation of the service:
- Courier companies (for delivery)
- Payment processors (for online payments, if applicable)
- Hosting and IT service providers
- Accounting services (for fiscal compliance)
We do not sell or share your personal data with third parties for independent marketing purposes.
6. Your GDPR rights
You have the right to:
- Access your data
- Request correction or update
- Request deletion (“right to be forgotten”)
- Restrict processing
- Withdraw consent (newsletter)
- Request data portability
You can exercise these rights by contacting us at: [insert your contact email]
7. Data security
We apply appropriate technical and organizational measures to protect your data, including:
- Encrypted HTTPS/SSL communication
- Secure and limited access to databases
- Regular system maintenance and backups
8. Cookies
This website uses cookies for functionality, security, and performance analytics. You may modify your cookie settings from your browser at any time.
A detailed Cookie Policy is available separately.