Privacy Policy
Heda Gelogaeva ("we", "us") respects your privacy. This policy explains what personal data we collect, why, and the rights you have under the EU General Data Protection Regulation (GDPR) and applicable US state privacy laws (such as the CCPA/CPRA). This document was last updated on the date of your most recent site publication.
Who we are
The data controller is [Your registered business name], [Your registered business address], [Country of registration]. For any privacy request, contact us at daraevadk@gmail.com.
What we collect
Account data: your name, email address and password (stored only as a secure hash).
Order data: items purchased, amounts, and the shipping address/details needed to process your payment and deliver your order.
Wishlist/selection data: pieces you save to your favourites or cart.
Technical data: essential cookies needed to keep you signed in and remember your cart. We do not run advertising trackers.
Why we use it (lawful basis)
To provide your account, wishlist and faster checkout (performance of a contract).
To process payments and send order confirmations (contract and legal obligation).
To respond to your inquiries (legitimate interest).
Where required, with your consent (which you may withdraw at any time).
Payments
Card payments are processed securely by Stripe and PayPal. We never see or store your full card number. They act as independent processors under their own privacy terms.
Sharing
We share data only with service providers who help us run the store — payment processors (Stripe, PayPal), our email provider and hosting/database provider — under agreements that protect your data. We do not sell your personal data.
International transfers
As we serve customers in the US and EU, data may be processed in either region. Where data leaves the EU, we rely on appropriate safeguards such as Standard Contractual Clauses.
Retention
We keep account data while your account is active. Order and transaction records are kept for the period required by tax and accounting law, after which they are deleted or anonymised.
Your rights
You have the right to access, correct, delete, restrict or object to the processing of your data, and to data portability. EU users may lodge a complaint with their local supervisory authority. California users have the right to know, delete and opt out of any 'sale' of data (we do not sell data).
You can download a copy of your data or delete your account at any time from your Account page, or by emailing daraevadk@gmail.com.
Contact
Questions about this policy? Email daraevadk@gmail.com.