IRAFEUS

Privacy Policy

Effective: 10. July 2025.
Last Updated: 16 July 2025.

Website: www.irafeus.com

1. Who We Are

Irafeus is a design studio offering minimalist embroidered wall art through our online store. We are based in Serbia and operate in compliance with the General Data Protection Regulation (EU GDPR).

2. What Data We Collect

We collect and process the following personal data:

  • Identification data: name, shipping address, billing address
  • Contact details: email, phone number (if provided)
  • Payment information: only processed via secure third-party platforms (e.g. 2Checkout, PayPal); we do not store payment card details
  • Technical data: IP address, browser type, device data (via cookies)
  • Marketing preferences: newsletter sign-ups or inquiries

3. Why We Collect Your Data

We process your data to:

  • Fulfill and deliver your orders
  • Contact you regarding your purchase
  • Respond to inquiries or support requests
  • Send marketing updates if you opt in
  • Improve site functionality and user experience

4. Legal Basis for Processing

We process personal data under the following legal bases:

  • Contractual necessity: to fulfill your orders and provide services
  • Legal obligation: to comply with tax or accounting requirements
  • Legitimate interest: to operate and improve our website
  • Consent: for marketing emails (only if you opt in)

5. Data Sharing

We only share your data with:

  • Payment processors (e.g. 2Checkout, PayPal)
  • Shipping providers (for delivery purposes)
  • IT service providers (e.g. hosting, email systems)

We never sell or rent your data.

6. Cookies and Tracking

We use cookies and similar technologies to:

  • Enable basic site functionality
  • Analyze website traffic (e.g. via Google Analytics)
  • Improve your browsing experience

You may manage or disable cookies via your browser settings.

7. How Long We Keep Your Data

We retain personal data only as long as necessary:

  • For fulfilling your order and legal obligations
  • Up to 6 years for accounting records (EU requirement)
  • Until you unsubscribe from marketing communications

8. Your Rights Under GDPR

As an EU data subject, you have the right to:

  • Access your personal data
  • Request correction or deletion
  • Object to or restrict processing
  • Withdraw consent (where applicable)
  • File a complaint with your local data authority

To exercise any of these rights, contact us at: support@irafeus.com

9. Data Security

We use SSL encryption, secure servers, and limited access to protect your personal information.

10. Contact

For privacy-related questions or requests:

Email: support@irafeus.com