Privacy Policy

The company Meraki, Mojca Dolamič s.p. is committed to the permanent protection of all personal data in accordance with applicable legislation, in particular with Regulation (EU) 2016/679 (GDPR) and the Personal Data Protection Act (ZVOP-2).

This privacy policy explains what personal data we collect, for what purposes we use it, how we protect it, and what rights you have as a user of our online store.

1. What data do we collect?

When using the online store https://merakiengraving.com and when placing an order, we may collect the following personal data:

• name and surname,
• delivery and billing address,
• email address,
• phone number,
• data on ordered products,
• payment method,
• order history,
• IP address,
• data about the device, browser, and website visit (via cookies and analytical tools).

2. Purpose of using personal data

We use your personal data exclusively for:

• processing and fulfilling orders,
• issuing invoices,
• communication regarding your order,
• delivery of ordered products,
• handling complaints and claims,
• fulfilling legal obligations,
• improving the operation of the online store and user experience,
• website visit analysis,
• sending e-newsletters, information about new products, special offers, and abandoned cart reminders, but only with your consent.

3. Legal basis for data processing

We process your personal data on the following legal bases:

• contract performance, when processing is necessary for the completion of a purchase and delivery of products;
• legal obligation, when the law requires us to retain invoices or other data;
• consent, when you subscribe to e-newsletters or agree to the use of analytical or marketing cookies;
• legitimate interest, when processing is necessary to ensure website security, prevent abuse, or improve store operations.

4. Storage of personal data

We store personal data only for as long as necessary for the purpose for which it was collected.

• Order and invoice data are stored in accordance with applicable legislation for at least 10 years.
• Data for sending e-newsletters is stored until you withdraw your consent.
• Data collected via cookies is stored in accordance with the settings of individual cookies.

5. Disclosure of personal data

We only disclose your personal data to contractual partners who participate in the provision of our services and who process it exclusively on our behalf.

This primarily includes:

• Shopify (online store platform),
• Stripe and PayPal (payment processing),
• GLS, Pošta Slovenije or another selected delivery provider,
• accounting service,
• providers of analytical and marketing services (e.g., Google Analytics and Meta Platforms).

All contractual processors process personal data in accordance with applicable legislation and concluded personal data processing agreements.

6. Transfer of data outside the European Economic Area

Some service providers (e.g., Shopify, Stripe, PayPal, or Meta) may also process personal data outside the European Economic Area.

In such cases, transfers are carried out exclusively using appropriate safeguards, in accordance with the requirements of the GDPR Regulation.

7. Cookies

Our website uses cookies to ensure the proper functioning of the online store, improve user experience, and analyze website traffic.

With your consent, we may also use analytical and marketing cookies (e.g., Google Analytics and Meta Pixel).

More detailed information on the use of cookies is available in our Cookie Policy.

8. Protection of personal data

The company Meraki, Mojca Dolamič s.p. uses appropriate technical and organizational measures to protect personal data from loss, misuse, unauthorized access, or disclosure.

Data transfer between the user and the online store takes place via a secure SSL connection.

9. User Rights

In accordance with applicable legislation, you have the right to:

• access your personal data,
• rectify inaccurate or incomplete data,
• erase personal data (if there is no legal basis for its retention),
• restrict processing,
• object to processing,
• data portability,
• withdraw consent for data processing for marketing purposes.

To exercise your rights, you can contact us at meraki.cnc@gmail.com.

If you believe that your personal data is being processed in violation of the law, you have the right to file a complaint with the Information Commissioner of the Republic of Slovenia.

Contact

Personal data controller:

Meraki, Mojca Dolamič s.p.
Moravci v Slovenskih goricah 72c
9243 Mala Nedelja

E-mail: meraki.cnc@gmail.com
Phone: 041 500 158