Privacy policy

1. GENERAL

Protecting your privacy is important to us. We are committed to processing the personal data of users of our online store carefully, responsibly, and in accordance with applicable personal data protection legislation, including Regulation (EU) 2016/679 (GDPR).

This Privacy Policy explains which personal data we may collect, the purposes for which we use it, the legal bases on which we process it, and how we handle it.

By using the online store, you consent to the processing of your personal data in cases where your consent is required for such processing. Where processing is based on another legal basis, personal data is processed in accordance with the purpose and conditions established by applicable law.

If you have any additional questions or would like more information about our Privacy Policy, you can contact us by email at amalinfo@amalstudio.com or by post at the following address:

AMAL STUDIO d.o.o.
Štihova ulica 13
1000 Ljubljana
Slovenia

2. WHAT PERSONAL DATA WE COLLECT

Depending on how you use our online store, we may collect and process various types of personal data that the user voluntarily provides to us or that are necessary to process an order or use our services.

We may collect in particular:

  • first and last name,

  • delivery address,

  • billing address,

  • email address,

  • telephone number,

  • order information,

  • information about selected products,

  • payment-related information, to the extent that we receive such information from the payment service provider,

  • information necessary for handling returns and complaints,

  • communications between us and the customer,

  • information about consents provided, including consent to receive newsletters,

  • information about website usage, and

  • other information voluntarily provided by the user.

3. WHEN WE COLLECT YOUR DATA

We primarily collect personal data when you create a user account, make a purchase, communicate with us, or subscribe to our newsletter.

When creating an account or making a purchase, you provide us with information necessary to manage your account, process and fulfil your order, and provide related services. This information may include your first and last name, email address, addresses, and information related to your order and payment.

When visiting the website, we may also process information about its use in accordance with applicable law where this is necessary to ensure its operation and security and to improve the user experience.

If you subscribe to our newsletter and provide the appropriate consent, we will use your email address to send information about news, offers, and other content. You may withdraw your consent at any time.

4. PURPOSES OF PROCESSING PERSONAL DATA

We use your personal data to provide and perform our services and to ensure the smooth operation of the online store.

We may process personal data in particular for the following purposes:

  • processing and fulfilling orders,

  • preparing and delivering ordered goods,

  • communicating with customers regarding orders, purchases, or other services,

  • processing and verifying payments,

  • issuing invoices and maintaining appropriate records,

  • handling returns and complaints,

  • complying with legal and other obligations,

  • ensuring the secure and uninterrupted operation of the online store,

  • improving the functionality, content, and user experience of the website, and

  • sending newsletters, information about news, offers, and other content where appropriate consent has been provided.

After an order has been placed, order-related data is retained for as long as necessary to fulfil the order, comply with legal obligations, and establish, exercise, or defend potential legal claims.

We may use your email address for communications related to your order, including order confirmations, information about order status, delivery, changes to or cancellation of an order, and other information directly related to your purchase.

5. LEGAL BASES FOR PROCESSING

We process your personal data on the basis of one or more of the following legal grounds:

Performance of a contract or taking steps at the request of the individual prior to entering into a contract, where processing is necessary to fulfil an order and provide our services;

Compliance with legal obligations, where applicable law requires us to process or retain certain personal data;

Consent of the individual, where your consent is required for a particular processing purpose, for example for sending newsletters;

Legitimate interests, where processing is necessary for our legitimate interests or the legitimate interests of a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the individual.

For each processing purpose, we use an appropriate legal basis in accordance with applicable personal data protection legislation.

6. RETENTION OF PERSONAL DATA

We retain personal data for as long as necessary for the purpose for which it was collected or for as long as required by applicable regulations.

We may retain information related to orders and invoices even after an order has been completed where this is necessary to comply with legal obligations, maintain accounting records, or establish, exercise, or defend potential legal claims.

Data processed on the basis of your consent, for example for sending newsletters, is retained until you withdraw your consent or until the period for which consent was given expires, unless another appropriate legal basis exists for continued processing.

7. PURCHASE AND ORDER

When a customer places an order, we use their personal data to fulfil the order, communicate with the customer, process payment, issue an invoice, arrange delivery, and comply with other legal obligations.

To the extent necessary to fulfil an order, data may be provided to service providers involved in payment processing, delivery, accounting, or other activities related to order fulfilment.

8. PAYMENT SERVICE PROVIDERS

For card payments, payment data is processed through the Stripe platform.

The seller generally does not receive or store complete payment card details when payment is processed directly through an external payment service provider.

For payments made by bank transfer based on an invoice, we may process information about the completed payment and information shown in the relevant bank transaction.

9. DELIVERY SERVICES

For the purpose of delivering orders, we may provide personal data to the following delivery services:

  • Pošta Slovenije,

  • GLS,

  • DPD.

We provide the information necessary to complete the delivery, in particular the customer's name, address, telephone number, and email address where required by the selected delivery service.

10. NEWSLETTERS AND PROMOTIONAL COMMUNICATIONS

If you subscribe to our newsletter and provide your explicit consent, we may use your email address to periodically send information about news, special offers, products, and other promotional content.

You may unsubscribe from our newsletter at any time using the method provided in each email.

Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

11. COOKIES

Like most websites, the AMAL STUDIO online store may collect certain information about visitors to the website. In some cases, we may automatically collect technical information such as browser type, language settings, the date and time of the website visit, and similar information.

The purpose of such collection is primarily to ensure the operation and security of the website, improve the website, and understand how visitors use our website.

What are cookies?

Cookies are small files that are stored in your web browser or on your device when you visit a website. They enable the website to remember certain information about your settings and use of the website.

Cookies may enable the operation of the shopping cart, storage of user preferences, security functions, and analysis of website usage.

Depending on their duration, we distinguish between session cookies, which are deleted at the end of a session or when the browser is closed, and persistent cookies, which remain stored on the device until they expire or are deleted.

Cookies themselves do not directly identify an individual, but in certain circumstances they may be linked to other information that we process in accordance with this Privacy Policy and applicable law.

Necessary cookies

Necessary cookies are required for the proper and secure operation of the online store. They enable basic functions such as website navigation, operation of the shopping cart, logging into a user account, and placing orders.

Your consent is generally not required for the use of necessary cookies because they are required to provide a service you have requested or where their use is permitted without consent under applicable law.

Functional cookies

Functional cookies allow the website to remember your choices and settings and provide you with a more personalised user experience.

For example, they may be used to store selected preferences, language settings, or other website settings.

Analytical cookies

Analytical cookies help us understand how visitors use our website, which content they visit, and how we can improve its operation and user experience.

We use Google Analytics, a service provided by Google, to analyse website usage.

Analytical cookies are used only where you provide the appropriate consent, when such consent is required under applicable law.

Social media cookies

Our website may use social media cookies and cookies from other third parties that enable connections with social networks and the customisation and measurement of advertising.

These cookies are installed only where you provide the appropriate consent, when such consent is required under applicable law.

For more information about their use, please refer to the privacy and cookie policies of the relevant providers, such as Facebook and Instagram.

Managing cookies and consent

On your first visit to the website, you can choose which categories of cookies you allow:

Accept all

Reject non-essential cookies

or

Cookie settings, where you can customise your choice.

Necessary cookies required for the proper operation of the online store may also be used without consent where this is permitted under applicable law. For other categories of cookies, we will obtain your consent where required.

Users may change or withdraw their choice at any time through the cookie settings on the website.

You can also manage cookies through your web browser settings. Disabling certain cookies may affect the operation of certain features of the online store.

Continuing to browse the website does not, by itself, constitute consent to the use of cookies for which prior consent is required under applicable law.

12. FACEBOOK AND INSTAGRAM

The website may contain links to our social media profiles:

  • Facebook,

  • Instagram.

Clicking on an external link may redirect the user to a third-party website that is subject to its own privacy policy.

The processing of personal data carried out by the operators of these social media platforms is governed by their own privacy policies and other terms of use.

13. INDIVIDUAL RIGHTS REGARDING THE PROCESSING OF PERSONAL DATA

In accordance with applicable law, you have the following rights regarding the processing of your personal data:

the right of access to your personal data and information about its processing;

the right to rectification of inaccurate or incomplete personal data;

the right to erasure of personal data where the legal requirements for such erasure are met;

the right to restriction of processing of personal data where the legal requirements for such restriction are met;

the right to data portability where the legal requirements for exercising this right are met;

the right to object to the processing of personal data where the legal requirements for exercising this right are met;

the right to withdraw consent, where processing is based on your consent; and

the right to lodge a complaint with the competent supervisory authority.

Upon your request, we may provide information about:

  • which personal data concerning you we process,

  • the purposes for which we process it,

  • the legal basis on which we process it,

  • how long we retain it,

  • the source from which we obtained it, and

  • the recipients or categories of recipients to whom we disclose it.

To exercise your rights, you may contact us using the contact details published on the website. We will respond to your request without undue delay and, in principle, no later than one month after receiving the request.

In the case of more complex requests or a large number of requests, the deadline may be extended in accordance with applicable law, and we will inform you of this in a timely manner.

If there is reasonable doubt regarding the identity of the person submitting a request, we may request additional information to confirm their identity in order to protect personal data.

The exercise of your rights is generally free of charge. If requests are manifestly unfounded or excessive, particularly because of their repetitive nature, we may, where permitted by applicable law, charge a reasonable fee for administrative costs or refuse to act on the request.

14. DISCLOSURE OF PERSONAL DATA

We do not disclose your personal data to third parties except where this is necessary to fulfil an order, provide our services, comply with legal obligations, or where another appropriate legal basis exists.

To the extent necessary to provide a particular service, we may disclose data to providers of payment, delivery, accounting, IT, and other support services that assist us in operating the online store.

Third parties that process personal data on our behalf may process such data only in accordance with applicable regulations, our instructions, and for the agreed purposes.

15. LIMITATION OF SALES

We reserve the right, but are not obligated, to limit the sale of our products or services to any person, geographic area, or region, where this is consistent with applicable law and our terms and conditions.

16. SECURITY

The security of your personal data is important to us. We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, disclosure, or other unauthorised forms of processing.

Nevertheless, no method of transmitting data over the internet or method of electronic storage is completely secure, and therefore absolute security of personal data cannot be guaranteed.

You can also help protect your personal data by appropriately securing your device, using up-to-date software, and maintaining appropriate security settings.

17. CHANGES TO THE PRIVACY POLICY

We reserve the right to amend and supplement this Privacy Policy. The updated version will be published on the website and will include the date of the latest amendment.

We recommend that you periodically review the current version of the Privacy Policy and familiarise yourself with any changes.

18. EFFECTIVE DATE OF THE PRIVACY POLICY

This Privacy Policy, published on the AMAL STUDIO website, enters into force on September 1, 2026.

COMMUNICATION

The provider communicates with the user by means of distance communication unless the user expressly objects to this.

You can communicate with us in Slovenian or English.