Privacy Policy

Who we are

SeaMiLeS design, obrt za dizajn i izradu rukotvorina, vl. Karolina Mileta, is the data controller for everything on this page. You can reach us at milesthecreator4@gmail.com, and our full registered details are on the Terms of Business page.

What we collect

• When you place an order: your name, email address, phone number and shipping address, so we can confirm and deliver your order.
• Payment details: card payments are handled entirely by Stripe on their secure checkout. We never see or store your full card number.
• When you subscribe to our newsletter: your email address, and your name if you share it.
• When you use the contact form: your name, email address and message, plus a summary of your cart if you have items in it at the time.

How we use your data

We use your information to process and ship your orders, reply to your questions and custom requests, and, only if you have subscribed, to send you occasional updates. Our legal bases are performing our contract with you (orders), your consent (newsletter), and our legitimate interest in answering enquiries. We do not sell your data or use it for advertising profiling.

Who we share it with

We only share data with the services that help us run the shop, and only what they need:

• Stripe processes your payment and checkout details.
• Our email provider delivers order confirmations and newsletter emails.
• Railway hosts the website and its database.
• BoxNow receives your name, address and phone number so they can deliver your parcel.

Some fonts and styles load from external services (Google Fonts and our content delivery network), which means your browser shares its IP address with them to fetch those files. This is standard for most websites.

Some of these providers are based outside the European Economic Area. When your data goes to them, it's covered by the European Commission's standard contractual clauses or an equivalent safeguard. We never sell your data or pass it to anyone for their own marketing.

Cookies

We use only essential cookies: one to remember what's in your cart, one for security (to protect forms), and one to remember your language choice. We do not use advertising or tracking cookies.

How long we keep it

• Orders and invoices: kept for 11 years, which is what Croatian accounting and tax law requires of us.
• Newsletter subscriptions: kept until you ask to come off the list. Email us any time and we'll remove you straight away.
• Contact form messages: kept while we deal with your enquiry and for a reasonable period afterwards in case you write again. Ask us and we'll delete yours.

Your rights

Under the GDPR you can ask us for a copy of the personal data we hold about you, have it corrected or deleted, ask us to restrict or stop a particular use, receive it in a portable format to take elsewhere, or withdraw your consent to the newsletter at any time. Withdrawing consent doesn't undo anything we did with it beforehand.

To exercise any of these, just email us at milesthecreator4@gmail.com. We'll reply within one month, and it costs you nothing.

If you think we've mishandled your data, you can complain to the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb, azop@azop.hr.

Children

Our shop is not directed at children, and we do not knowingly collect data from anyone under 16.

Changes to this policy

We may update this policy from time to time. When we do, we'll change the date at the top of this page.