Privacy Policy
1. Who We Are
This Privacy Policy explains how HONEY & Co. (“we”, “us”, “our”) collects, uses, stores and protects your personal data when you visit our website and when you contact us or place an order request.
Contact details
Address: Baldini 2, Varvari, 52440, Poreč
Email: honeyandco90@gmail.com
Phone: +385 916155211
If you have any questions about this Privacy Policy or about how we handle your personal data, you can contact us using the details above.
2. What Personal Data We Collect
We may collect and process the following categories of personal data:
2.1. Data you provide via the order request form
When you submit an order request through our website, we may collect:
- Full name
- Email address
- Phone number
- Delivery address (street, house number, city, postal code, country)
- Product selection (e.g. product names, variants)
- Quantities
- Additional notes or instructions you choose to provide
2.2. Data you provide when you contact us
If you contact us by email, phone or through any contact form, we may collect:
- Your name
- Your contact details (email, phone number)
- Any other information you choose to share in your message
2.3. Automatically collected data (cookies and similar technologies)
When you visit our website, certain information may be collected automatically through cookies and similar technologies. This may include:
- Device and browser information
- IP address and approximate location (country or region)
- Date, time and duration of your visit
- Pages viewed and interactions with the site
For more details, please see our Cookie Policy.
3. Purposes and Legal Bases for Processing
We process your personal data only when we have a valid legal basis under the GDPR.
3.1. To process and manage your order requests
To receive and review your order request
To contact you about your order (confirmation, questions, changes)
To arrange delivery and communicate about delivery details
Legal basis:
Article 6(1)(b) GDPR – performance of a contract or steps taken at your request before entering into a contract.
3.2. To respond to your inquiries
To answer your questions and provide customer support
To handle any requests related to our products or your orders
Legal basis:
Article 6(1)(b) GDPR – performance of a contract or steps at your request
and/or Article 6(1)(f) GDPR – our legitimate interest in responding to inquiries and providing customer service.
3.3. To improve our website and services
To understand how visitors use our website
To maintain the security and performance of the site
To improve the user experience and our product offering
Legal basis:
Article 6(1)(f) GDPR – our legitimate interest in improving our services and website.
Where required by law, certain analytics or marketing cookies will only be used with your consent (Article 6(1)(a) GDPR). See our Cookie Policy for details.
3.4. To comply with legal obligations
To keep records required by applicable laws (e.g. tax or accounting rules)
To respond to lawful requests from public authorities
Legal basis:
Article 6(1)(c) GDPR – compliance with a legal obligation.
4. How Long We Keep Your Data
We keep your personal data only for as long as necessary for the purposes described above, or as required by law.
In general:
- Order request data: kept for the duration needed to process your order and for a reasonable period afterwards, for customer service, accounting and legal purposes, in line with applicable Croatian and EU laws.
- Communication data (emails, messages): kept for as long as needed to handle your request and for a reasonable period afterwards, depending on the nature of the communication.
- Cookie data: kept according to the storage periods described in our Cookie Policy.
When data is no longer needed, it will be securely deleted or anonymised.
5. Who We Share Your Data With
We may share your personal data with:
- Service providers who help us operate our website, process orders, deliver products, or provide other services (for example, website hosting, email services, delivery services, payment or invoicing tools).
- Professional advisers (such as accountants or legal advisers) where necessary.
- Public authorities if required by law or to protect our rights.
These recipients only receive the data they need to perform their services and are required to protect your data in accordance with applicable data protection laws and our instructions.
We do not sell your personal data.
6. International Transfers
Some of our service providers may be located outside the European Economic Area (EEA). In such cases, we will ensure that appropriate safeguards are in place, such as:
- An adequacy decision by the European Commission, or
- Standard Contractual Clauses approved by the European Commission, or
- Other appropriate safeguards in line with GDPR requirements.
You can contact us for more information about these safeguards.
7. Your Rights Under the GDPR
You have the following rights regarding your personal data, subject to certain conditions and exceptions:
- Right of access – to obtain confirmation whether we process your personal data and to receive a copy.
- Right to rectification – to have inaccurate or incomplete data corrected.
- Right to erasure – to request deletion of your personal data in certain circumstances.
- Right to restriction of processing – to request that we limit the processing of your data in certain cases.
- Right to data portability – to receive your personal data in a structured, commonly used and machine-readable format and to transmit it to another controller, where technically feasible.
- Right to object – to object to processing based on our legitimate interests, including profiling, and to object at any time to processing for direct marketing.
- Right to withdraw consent – where processing is based on your consent, you may withdraw it at any time. This will not affect the lawfulness of processing before withdrawal.
To exercise any of these rights, please contact us at:
Email: honeyandco90@gmail.com
Phone: +385 916155211
Address: Baldini 2, Varvari, 52440, Poreč
You also have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, place of work or place of the alleged infringement.
8. Security of Your Data
We take appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. However, no method of transmission or storage is completely secure, so we cannot guarantee absolute security.
9. Links to Other Websites
Our website may contain links to third‑party websites or services (for example, social media platforms such as Instagram). These websites have their own privacy policies, and we are not responsible for their content or practices. We recommend that you read their privacy policies before providing any personal data.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “Last updated” date. We encourage you to review this page regularly.
If we make significant changes, we may also notify you by additional means (for example, by email or a notice on our website, where appropriate).