Privacy Policy

Last updated: [date]

We collect only what we need to deliver your order and run the store, never sell your data, and you can ask us to see or delete it at any time.

Who is responsible for your data

[Company legal name], [address], Romania (“Squishmas”, “we”) is the data controller. Contact for privacy questions: [support@squishmas.com].

What we collect and why

  • Name, email, phone, shipping and billing address: to process, ship and support your order (performing our contract with you).
  • Order history and payment status: for accounting, tax records and refunds (legal obligation).
  • Messages you send us, including through our Track your order page: to answer you and fix problems (contract and our legitimate interest).
  • Device, browser and browsing data (cookies): to run the store, keep your cart and measure the site (legitimate interest, or your consent for non-essential cookies).
  • Email address for newsletters, only if you sign up: to send offers (your consent, which you can withdraw anytime).

Card details are handled by our payment providers; we never see or store your full card number.

Who we share it with

  • Our e-commerce platform provider, which hosts the store and processes order data on our behalf.
  • Payment providers such as [payment provider names] to take payment.
  • Our fulfilment partner and carriers, including partners in China and in the destination country, who need your name, address and phone to deliver your parcel.
  • Parcel tracking: when you use our tracking box, your tracking number is sent to 17TRACK to look up your parcel.
  • Authorities, only when the law requires it.

International transfers

Some partners, including our fulfilment partner in China and our platform provider, process data outside the European Economic Area. Where that happens we rely on safeguards the GDPR allows, such as the European Commission's Standard Contractual Clauses.

How long we keep it

Order and invoice records: as long as Romanian tax law requires (currently up to 10 years). Support messages: up to 3 years after your last contact. Newsletter data: until you unsubscribe.

Your rights

You can ask us to access, correct, delete, restrict or transfer your data, and object to how we use it. Where we rely on consent, you can withdraw it at any time. Email [support@squishmas.com]; we reply within one month. You can also complain to the Romanian data protection authority, ANSPDCP (dataprotection.ro), or the authority in your own country.

Cookies

We use essential cookies to keep your cart and checkout working. Analytics and marketing cookies are used only if you accept them in our cookie banner, and you can change your choice at any time.

Children

Our products are for children, but our store is for adults. We do not knowingly collect data from anyone under 16.

Changes

We may update this policy. The date at the top shows the latest version.