Privacy Policy

Who we are and who's responsible

The data controller is imenko (imenko.rs). For any privacy-related questions: zdravo@imenko.rs.

What we collect

When you place an order through the site, we collect:

• Your full name
• Your email address
• Your phone number (and your preference for Viber, WhatsApp, or email)
• Your shipping address
• The details of your order (the child's name for personalisation, your chosen theme, palette, decorations, optional notes)

When you use the custom commission form, we also collect:

• Any reference images, photos, or sketches you upload
• Your free-text description of the project

When you use the contact form or email us directly, we keep the content of that message and your contact details.

The site collects basic technical information (device type, browser language, aggregated visit statistics) via Cloudflare Web Analytics.

Why we collect this data

• To make and deliver your order (contact details, address, personalisation details).
• To keep you informed about your order (email, phone, Viber/WhatsApp).
• To answer your questions (contact form).
• To understand how the site is used and improve it (anonymous statistics).

Who we share your data with

We share your data only with services and partners essential to our work:

• Our email delivery provider: processes the email we send to you and the email you send to us via the form.
• Our hosting and site security provider: delivers the site and processes form submissions in transit.
• Our courier service: receives your name, address, and phone number when we ship a package. We reserve the right to use other courier services where needed to provide the best and quickest delivery.

We may also share your order details and personal information with other third parties, but only if and when needed for the purpose of producing and completing your order — for example, other printing/production partners (if part of the work is entrusted to someone else), courier services, and similar providers involved in fulfilment. This kind of sharing only ever happens to fulfil your order, never for marketing purposes.

We may also use your contact details to occasionally send you news and information related to our products and services.

Transfers outside Serbia

Our hosting providers and other services we use may have servers outside Serbia, so your data may be processed in the US or EU. These services are covered by Standard Contractual Clauses (SCCs), a recognised mechanism for international data transfers.

Your rights

Under applicable law, you have the right to:

• Request a copy of the data we hold about you
• Request correction of any inaccurate data
• Request deletion of your data (except where we're legally required to keep it)
• Restrict the processing of your data
• Withdraw consent at any time where processing is based on consent
• File a complaint with the Commissioner for Information of Public Importance and Personal Data Protection, or with your national supervisory authority if you're outside Serbia

To exercise any of these rights, just write to us at zdravo@imenko.rs. We respond within 30 days.

Security

We keep your data on secured servers with encryption in transit (HTTPS) and access limited to the people processing your orders. While we do everything we can, no system is 100% secure. If a breach ever occurs in a way that affects your rights, we'll notify you and the relevant authority within the legally required time.

We're not responsible for issues arising from circumstances beyond our control, including but not limited to security incidents at our service providers, third parties involved in logistics, and partners whose services we use.

Cookies

We use technical cookies essential for the site to work (for example, to remember your selected language and cart contents).

Changes to this policy

If we update this policy, we'll post the new version here with a new date. For anything material, we'll notify you directly.