Privacy policy

Controller

Develop Chain Platform S.R.L., Strada Cumpene Cociobi nr. 25, Slătioara, județul Vâlcea, Romania. Contact for data protection: hello@snoopers.ro.

What we collect and why

Orders: name, delivery and billing address, email, phone, order contents and payment status — to perform the contract (Art. 6(1)(b) GDPR) and to keep accounting records required by law (Art. 6(1)(c) GDPR).

Customer account (optional): email, name, password hash and order history — to provide the account (Art. 6(1)(b)).

Newsletter (optional): email address and language — only with your consent (Art. 6(1)(a)). We use double opt-in and keep the date and wording of your consent as proof. You can withdraw consent at any time with the link in every email.

Withdrawals: when you withdraw from a purchase we keep your statement (name, email, order, items, your note) and the time we received it, as proof for both of us (Art. 6(1)(c) GDPR).

Custom and trade requests: name, email, company, country, the date you need the items, personalisation details and your message — to answer your request and prepare an offer (Art. 6(1)(b) GDPR).

Fraud prevention and security: technical data such as IP address, processed by our payment provider — legitimate interest in secure payments (Art. 6(1)(f)).

Thank-you codes: after each order we create a single-use discount code linked to that order and email it to you with the confirmation. Unless you tick the box at checkout or use the link in the email, we send one reminder before the code expires. This is marketing for similar products to existing customers, allowed by Art. 12(2) of Romanian Law 506/2004, and based on our legitimate interest (Art. 6(1)(f) GDPR). We keep the code record for 3 years for accounting and fraud checks.

Where orders come from: when you arrive through a link with campaign tags (utm_source and similar) or from another website, we save those tags, the referring site and the first page you saw with your cart and order. It tells us which posts and ads bring orders. It contains no identifier that follows you across websites — legitimate interest in measuring our marketing (Art. 6(1)(f)).

Visit statistics (optional): with your consent, we count page views and shop events with Umami, an analytics tool we host ourselves in the EU. Umami sets no cookies, doesn’t store your IP address and doesn’t share data with anyone (Art. 6(1)(a)).

Advertising (optional): with your consent, the Meta (Facebook, Instagram) and TikTok pixels record visits, add-to-cart and purchases so we can measure and target our ads. For this collection we are joint controllers with Meta Platforms Ireland Ltd. and TikTok Technology Ltd.; they process the data further under their own privacy policies, including transfers to the US. You can withdraw consent at any time from “Cookie settings” in the page footer (Art. 6(1)(a)).

Who receives your data

Stripe Payments Europe Ltd. (payments); SmartBill (Intelligent IT S.R.L., Romania), which issues our invoices; the Romanian tax authority ANAF, which receives every invoice through the national e-invoicing system RO e-Factura, as Romanian law requires (your name, address and what you bought; Art. 6(1)(c) GDPR); Meta and TikTok only if you accept advertising cookies; our hosting provider Contabo GmbH, Germany; our email provider [EMAIL PROVIDER]; the courier delivering your parcel [COURIERS]. Where a provider processes data outside the EU (for example Stripe in the US), transfers rely on the EU–US Data Privacy Framework or standard contractual clauses.

How long we keep it

Orders, invoices and withdrawal statements: 10 years, as Romanian accounting law (Law 82/1991) requires for invoices and their supporting documents; they also cover the 2-year legal guarantee.

Customer account: until you delete it. Newsletter: until you unsubscribe; addresses that never confirm the sign-up are deleted after 30 days, and unsubscribed addresses 30 days after unsubscribing.

Carts that never became an order: 90 days. Custom and trade requests: 2 years after we close them. The log of emails we sent you: 2 years. Thank-you code records: 3 years.

Your rights

You can ask for access, correction, deletion, restriction, portability, and object to processing based on legitimate interest. If you have an account, you can do the main ones yourself on your account page: “Download my data” gives you a copy of everything we hold about you (a JSON file), and “Delete my account” deletes your account, saved addresses, newsletter subscription and requests at once. Orders and invoices stay for the period above, because the law requires them.

Otherwise write to us at the address above; we answer within one month. You can also complain to the Romanian supervisory authority ANSPDCP (dataprotection.ro) or the authority in your own country.