Privacy policy

PRIVACY POLICY

Last updated: 25 September 2026

This policy explains what personal data we collect when you visit blenin.shop or buy from us, why we use it, who we share it with, how long we keep it and what your rights are.

1. Who we are

The controller of your personal data is:
Aluna Group s. r. o. (brand BLENIN)
Budovateľská 672/15, 919 43 Cífer, Slovak Republic
Company ID (IČO): 57 532 907
VAT ID (IČ DPH): SK2122834736
Registered in the Commercial Register of the District Court Trnava, Section Sro, Insert No. 62968/T
Email: info@blenin.shop
Phone: +421 919 181 379

For any privacy question or request, email info@blenin.shop. We reply within 24 hours.

2. What data we collect

Orders: name, email, phone, billing and delivery address, pickup point, items bought, order number, amount paid and payment method (we do not see or store your full card number), returns and refunds.
Customer account: name, email, addresses, order history and account settings.
Newsletter and SMS: email address, phone number (for SMS), your consent, and which emails you open or click.
Reviews: your name, rating, review text and any photos you add.
Support emails: what you write to us and what we reply, including order details and photos you send.
Cookies and pixels: IP address, device and browser type, pages you view, what you add to the cart, where you came from (for example an ad or a link), and cookie IDs.
Affiliate program: if you join as an affiliate, your name, email, payout details and referral sales.

The size finder on our product pages saves your answers only in your own browser (local storage). We do not receive them.

3. Why we use your data and the legal basis

To take, pay, ship and deliver your order, handle returns and complaints, and run your account. Legal basis: contract (Art. 6(1)(b) GDPR).
To keep invoices and accounting records and meet tax and consumer law duties. Legal basis: legal obligation (Art. 6(1)(c) GDPR).
To answer your emails and questions. Legal basis: contract, when it is about an order; otherwise our legitimate interest in answering you (Art. 6(1)(f) GDPR).
To send newsletters, offers and SMS. Legal basis: your consent (Art. 6(1)(a) GDPR). You can unsubscribe at any time with the link in every email or by replying STOP to an SMS.
To ask you for a review after a purchase and to show published reviews. Legal basis: our legitimate interest in collecting honest customer feedback. You can opt out of review requests at any time.
Analytics and advertising cookies and pixels (Google, Meta, Pinterest). Legal basis: your consent (Art. 6(1)(a) GDPR). Strictly necessary cookies (cart, checkout, security) do not need consent.
To prevent fraud and misuse of payments and discount codes, and to keep the shop secure. Legal basis: our legitimate interest (Art. 6(1)(f) GDPR).
To track affiliate referrals and pay affiliates. Legal basis: contract with the affiliate; for visitors, our legitimate interest in knowing which affiliate sent the order.

We do not sell your personal data. We do not make decisions about you based only on automated processing that have legal or similarly significant effects.

4. Who receives your data

We use these service providers. They process data for us under a data processing agreement, or as independent controllers where their own privacy policies say so:

Shopify – online store platform, checkout and hosting.
Stripe and PayPal – payments.
Omnisend – email and SMS marketing and sign-up forms.
Judge.me – product reviews and review request emails.
Packeta (Zásilkovna) and Slovenská pošta – delivery, together with their delivery partners in your country.
Google – Google Analytics and the Google & YouTube channel (ads and shopping listings).
Meta – Facebook and Instagram pixel.
Pinterest – Pinterest tag and shopping channel.
UpPromote – affiliate program.
Currency converter apps (BUCKS, Nova) – show prices in your local currency based on your location.
Other Shopify apps we use to run the shop: Kaching (cart offers), CWILL / SendWILL (email pop-up) and Order Printer Pro (invoices).
Our accountant, and public authorities such as the tax office, when the law requires it.

5. Transfers outside the EU

Some of these providers, or their subcontractors, process data outside the EU/EEA, for example in the USA or Canada. In these cases the transfer is protected by the EU Standard Contractual Clauses or by an adequacy decision of the European Commission (such as the EU–US Data Privacy Framework). You can ask us for more information about these safeguards.

6. How long we keep your data

Orders, invoices and accounting records: 10 years, as required by Slovak accounting and tax law.
Newsletter and SMS data: until you unsubscribe or withdraw consent. After that we keep only a record of the opt-out, so we do not contact you again.
Support emails: 3 years after our last contact, unless we need them longer for a complaint or legal claim.
Customer account: until you ask us to delete it (order records are still kept for 10 years, as above).
Reviews: while they are published, or until you ask us to remove them.
Cookies: for the time set for each cookie. You can delete them at any time in your browser.

7. Cookies and how to manage them

Cookies are small files stored in your browser. We use:

Necessary cookies – keep your cart, run the checkout and protect the shop. These are always on.
Analytics cookies – show us how visitors use the shop (Google Analytics, Shopify analytics). Only with your consent.
Marketing cookies and pixels – measure our ads and show you relevant ads (Meta, Google, Pinterest, Omnisend). Only with your consent.

You can accept or refuse non-necessary cookies in the cookie banner and change your choice at any time. You can also block or delete cookies in your browser settings. If you block necessary cookies, the cart and checkout may not work.

8. Your rights

You have the right to:

access your data and get a copy;
have wrong or incomplete data corrected (rectification);
have your data deleted (erasure);
restrict how we use your data;
get your data in a common machine-readable format and have it sent to another company (portability);
object to processing based on our legitimate interest, and object to direct marketing at any time;
withdraw your consent at any time. This does not affect processing done before you withdrew it.

To use any of these rights, email info@blenin.shop. We answer without undue delay and within one month at the latest. We may ask you to confirm your identity.

9. Right to complain

If you think we handle your data unlawfully, you can complain to the Slovak data protection authority:
Úrad na ochranu osobných údajov Slovenskej republiky
Hraničná 12, 820 07 Bratislava, Slovak Republic
dataprotection.gov.sk

You can also complain to the data protection authority in the EU country where you live or work.