4. How We Use Your Data

We do not sell your personal data. We use your personal data to:

• Process and fulfill orders
• Deliver purchased products
• Issue invoices and comply with accounting obligations
• Manage WooCommerce checkout and customer accounts
• Communicate with you about orders, updates, or support

• Display and manage customer reviews
• Improve website performance and user experience
• Detect and prevent fraud
• Comply with legal obligations worldwide

5. Legal Basis for Processing (GDPR)

We process your personal data based on:

• Contract performance – to fulfill your order
• Legal obligation – to comply with tax and accounting laws
• Legitimate interests – to operate and improve our business
• Consent – when required (for example, cookies)

6. WooCommerce, Payments & Third Parties

Our store is powered by WooCommerce. WooCommerce collects data necessary to:

• Process orders
• Calculate taxes and shipping
• Maintain order history

We do not store full payment card details. We may share limited data with trusted third parties such as:

• Payment processors (e.g. Stripe, Paypal)
• Shipping and logistics providers (e.g. postal services, courier companies)
• Analytics services (e.g. Google Analytics)
• Email or review platforms

7. Print-on-Demand and Dropshipping

Some products sold on our site are produced and shipped by our trusted print-on-demand partner Printful.

To fulfill your order, we share only the necessary information with Printful, including:

• Your name
• Shipping address
• Order details (product type, size, quantity)

Printful processes this information solely for the purpose of manufacturing and delivering your order and is contractually obligated to protect your data and comply with applicable data protection laws.

8. Reviews & User-Generated Content

When you submit a review:

• Your chosen name may be publicly visible
• Review content may appear on product pages
• Reviews may be moderated for spam, offensive language, or misuse

By submitting content, you grant us permission to display it on our website and related marketing channels.

9. Cookies & Tracking Technologies

We use cookies to:

• Enable essential website functionality
• Remember user preferences
• Analyze traffic and performance
• Improve marketing and content relevance

Some cookies are set by third-party services integrated into WooCommerce. You can manage or disable cookies through your browser settings or via our cookie banner.

For more information, please see our Cookie Policy.

10. Your Rights Under GDPR

If you are located in the European Union or European Economic Area (EU/EEA), we process your personal data in accordance with the General Data Protection Regulation (GDPR). Under GDPR, you have the right to:

• Access your personal data
• Correct inaccurate information
• Request deletion of your data (“right to be forgotten”)
• Restrict or object to data processing
• Withdraw consent for marketing
• Lodge a complaint with the Croatian Personal Data Protection Agency (AZOP)

Croatian Personal Data Protection Agency (AZOP)
Address: Selska cesta 136
10000 Zagreb, Croatia
Website: azop.hr

11. International Data Transfers

Because we operate worldwide, your information may be transferred and processed outside the European Economic Area (EEA). In such cases, we ensure appropriate safeguards are in place to protect your data in accordance with GDPR.

12. Data Retention & Security

We retain personal data only as long as necessary to:

• Fulfill orders
• Maintain business and tax records
• Resolve disputes
• Comply with legal requirements

Order and invoice data: minimum 10 years.
User account data: until account is deleted.
Marketing data: until consent is withdrawn.
Contact inquiries: up to 12 monthds after resolution.

After the retention period expired, data is securely deleted or anonymized.

We take reasonable technical and organizational measures to protect your personal data, including secure connections (SSL) and trusted third-party providers. However, no online transmission or storage method can be guaranteed 100% secure.

Site is not intended for individuals under 18 years of age. We do not knowingly collect personal data from minors.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.

14. Contact Information

If you have any question about this Privacy Policy of your personal data, contact us.

Phone Number: +385 91 588 9649
Email: [email protected]
Website: brokenisntbad.com/contact