Legal
Privacy Policy
We use personal data to process your order, reply to you and, if you separately subscribe, send the Saluxe Newsletter. If you accept optional cookies, we also measure how the site is used and how our ads perform. We do not sell your personal data. Buying a box does not subscribe you to marketing.
Who Is Responsible
The data controller is Saluxe, Andrejka Söke s.p., a sole proprietorship owned by Andrejka Söke, at Kidričeva ulica 35, 9220 Lendava, Slovenia. Registration no. 7429355000; VAT ID SI52303110.
For privacy questions or requests, email info@saluxe.eu or write to that address. You can also call +386 41 899 746, Mon–Fri, 9:00–18:00 CET.
What We Use and Why
The table explains our purposes, the data involved, the legal basis under Article 6 of the GDPR, and how long we keep it. You can check out as a guest. We need the order and payment information to complete your purchase; newsletter signup is optional.
| Purpose | Data | Legal basis | Kept for |
|---|---|---|---|
| Orders, delivery and accounting | Name, email, billing and delivery addresses, order details, payment status and delivery information; phone number where needed for delivery. | Contract, Art. 6(1)(b), for the order; legal obligation, Art. 6(1)(c), for accounting and tax records. | Until your order, any return and any guarantee claim are settled. Accounting records, including invoices, are kept for 10 years after the end of the year of the order. |
| Replying to contact forms and email | Your name, email address, message and relevant correspondence. | Legitimate interest, Art. 6(1)(f), in answering inquiries; steps at your request before a contract, Art. 6(1)(b), where applicable. | As long as needed to deal with your inquiry, and ordinarily deleted within 24 months, unless we need to keep it longer for legal reasons. |
| Sending the Saluxe Newsletter | Email address, signup source, confirmation and consent records, and unsubscribe status. | Consent, Art. 6(1)(a). | While you are subscribed. After you unsubscribe, we keep only your email address and the record of your unsubscribing, so we don’t accidentally sign you up again. |
| Processing payments and refunds | The payment provider handles the payment details you enter. We receive transaction references, amounts and payment status. | Contract, Art. 6(1)(b); legal obligation, Art. 6(1)(c), for required financial records. | 10 years after the end of the year of the payment, like our other accounting records. |
| Understanding how the site is used | Pages viewed, how you arrived, approximate location, device and browser details, and cookie identifiers, through Google Analytics. | Consent, Art. 6(1)(a), given through the cookie banner. | 14 months in Google Analytics. |
| Advertising and ad measurement | IP address, pages visited, browser details, cookie and click identifiers, and purchase events with order value, through the tags of Meta, Google Ads, Pinterest and TikTok. | Consent, Art. 6(1)(a), given through the cookie banner. | As set by each platform; see their privacy policies. |
| Keeping the shop secure | IP address, request times, browser details and security events in server logs. | Legitimate interest, Art. 6(1)(f), in protecting the shop and preventing abuse. | Up to 30 days. |
| Establishing, exercising or defending legal claims | Relevant order records, correspondence and evidence concerning the claim. | Legitimate interest, Art. 6(1)(f), in protecting legal rights; legal obligation, Art. 6(1)(c), where retention is required. | Until the claim is settled, and at most 5 years after the order, unless proceedings are still pending. |
We use what you send through the contact form only to reply to your inquiry. Messages are emailed through Zoho Mail’s EU SMTP service to our mailbox and are not saved in the website database. We do not add contact-form senders to the newsletter.
The Newsletter
The Saluxe Newsletter shares crystal care notes, new guides, and news about Saluxe products. It uses one SendFox list. You can sign up through the form on our site or by ticking the optional box at checkout, which is never ticked for you. Either way you confirm through an email before you receive the newsletter.
You can unsubscribe at any time through the link in each newsletter or by emailing us. Withdrawing consent does not affect processing that was lawful before withdrawal. Order and delivery emails are separate from the newsletter.
Who Receives Your Data
Our shop runs on our own WordPress site using WooCommerce. We share only the data needed for each service with:
- Our hosting provider, WPX Hosting.
- Zoho Mail, which delivers contact messages to our mailbox.
- Our payment providers, for the payment method you choose.
- The delivery carrier that takes your parcel to you.
- SendFox, which manages newsletter signup, confirmation and delivery.
- Google, for Google Analytics and Google Ads, if you accept optional cookies.
- Meta (Facebook and Instagram), Pinterest and TikTok, for advertising and ad measurement, if you accept optional cookies.
- Our accountant, for accounting and tax obligations, and professional advisers or authorities where needed for legal obligations or claims.
Some providers act on our instructions as processors; others may have their own legal responsibilities. For the collection of data through their advertising tags, we and Meta, Pinterest, TikTok or Google may be joint controllers. Where that applies, the platform’s joint-controller terms cover that collection, and what the platform then does with the data is governed by its own privacy policy.
Transfers Outside the EEA
SendFox is based in the United States. We rely on the European Commission’s Standard Contractual Clauses in its data processing agreement.
Google, Meta, Pinterest and TikTok may process data in the United States or other countries outside the EEA. For those transfers we rely on the EU–US Data Privacy Framework where the provider is certified under it, and otherwise on the European Commission’s Standard Contractual Clauses.
Cookies
The shop’s required cookies work without your consent. Analytics and advertising cookies load only if you accept them, and you can change your choice at any time through Cookie Settings in the site footer. See our Cookie Policy for the full list.
Your Rights
Depending on the legal conditions, you can ask to access, correct or erase your data, restrict its use, or receive data you supplied in a portable format. You can object to processing based on legitimate interests and withdraw consent at any time.
Email info@saluxe.eu to exercise these rights. We may need to verify your identity. We normally respond within one month; if the GDPR allows more time for a complex request, we’ll explain why within that first month. Some records must be kept to meet legal obligations or deal with legal claims.
You can complain to the Slovenian Information Commissioner (Informacijski pooblaščenec), Dunajska cesta 22, 1000 Ljubljana, Slovenia, www.ip-rs.si, or to the supervisory authority where you live or work, or where you believe an infringement occurred.
Automated Decisions
We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.