Privacy Policy

Last Updated: 21 October 2026

At Veneiva, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, process, store, and protect your information when you visit https://veneiva.com/, purchase products, contact us, or subscribe to our marketing communications.

We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable Slovenian legislation.

1. Data Controller

The data controller responsible for processing your personal data is:

Anže Kuzma s.p.
Kovorska cesta 51
4290 Tržič
Slovenia

Website: https://veneiva.com/
Email: [email protected]

2. Personal Data We Collect

Depending on how you interact with our website, we may collect:

Contact information: name, email address, telephone number, billing and shipping addresses.
Order information: purchased products, order history, transaction amounts, delivery preferences, returns, and refunds.
Payment information: payment method, payment status, and transaction references. Payment card details are processed by the relevant payment provider.
Account information: login credentials, account preferences, and associated orders, where customer accounts are available.
Technical information: IP address, browser type, device information, cookie identifiers, and website activity.
Marketing information: newsletter subscriptions, consent preferences, email engagement, and interactions with advertising campaigns.
Customer communications: enquiries, feedback, complaints, and correspondence.

3. Purposes and Legal Bases for Processing

We process personal data for the following purposes:

Purpose	Legal basis
Processing orders, payments, deliveries, and returns	Performance of a contract — Article 6(1)(b) GDPR
Providing customer support and responding to enquiries	Contractual necessity or legitimate interests, depending on the circumstances
Issuing invoices and maintaining legally required records	Legal obligation — Article 6(1)(c) GDPR
Protecting the website and preventing fraud	Legitimate interests — Article 6(1)(f) GDPR, where applicable
Sending promotional emails and newsletters	Consent where required by law
Using optional analytics and advertising cookies	Consent where required by applicable law
Handling complaints and legal claims	Contract, legal obligation, or legitimate interests, as appropriate

Where processing relies on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

4. Orders and Payment Processing

We use WooCommerce to operate our online store and manage customer orders.

Depending on your selected payment method, payments may be processed through:

Stripe — credit and debit card payments
PayPal — PayPal payments
Cash on delivery — payment collected through the delivery process

Payment providers may process your personal data according to their own privacy policies and legal responsibilities.

We do not intentionally store complete payment card numbers or card security codes in our WooCommerce order records.

5. Shipping and Delivery

To deliver orders, we share necessary delivery information with our shipping partners:

Pošta Slovenije: deliveries within Slovenia.
Packeta: deliveries to Croatia, Czech Republic, Hungary, Slovakia, and Greece.

Shared information may include your name, delivery address, telephone number, email address, and order reference.

6. Website Hosting and Infrastructure

Our website is built using WordPress and WooCommerce, with supporting technologies including Elementor, FunnelKit, and TranslatePress.

We use Hostinger for hosting and Cloudflare for website infrastructure, security, and performance.

These services may process technical data such as IP addresses, device information, and server logs as necessary to operate and protect the website.

We may also engage technical providers for maintenance, backups, transactional email delivery, and other operational services.

7. Google Analytics

We use Google Analytics to understand how visitors interact with our website and to improve website performance, usability, and customer experience.

Depending on the configuration and consent provided, Google Analytics may process information such as:

Pages visited and interactions with the website
Approximate location derived from technical information
Device and browser information
Cookie identifiers and analytics events
Traffic sources and website usage statistics

Where consent is required, Google Analytics cookies and related tracking should be activated only after the visitor has provided the relevant consent.

Google’s processing practices are described in its privacy documentation at https://policies.google.com/privacy.

8. Google Ads

We use Google Ads to advertise our products and measure the effectiveness of advertising campaigns.

Depending on the enabled features and your consent choices, Google Ads may process advertising identifiers, conversion events, website interactions, and information about visits originating from advertisements.

Google Ads may also support remarketing and conversion measurement where these functions are configured.

We use consent management mechanisms intended to communicate relevant consent choices to Google services.

9. Meta Pixel (Facebook and Instagram)

We use Meta Pixel through Google Tag Manager to measure advertising performance and understand interactions with our website associated with Facebook and Instagram advertising.

Depending on its configuration, Meta Pixel may collect or receive information such as:

Website visits and page views
Product interactions
Add-to-cart and purchase events
Browser and device information
Cookie identifiers, including _fbp
Other event information transmitted through the pixel

Meta Platforms may process this information for advertising measurement and related purposes according to its own privacy terms.

For further information, visit https://www.facebook.com/privacy/policy/.

Important: Advertising tracking and cookies are subject to applicable consent requirements. Our implementation of consent controls is reviewed and may be adjusted to meet those requirements.

10. Email Marketing and FunnelKit Automations

We use FunnelKit Automations to manage customer communications and marketing workflows associated with our WooCommerce store.

Depending on the features enabled, this may include:

Newsletter subscriptions
Promotional offers and product announcements
Customer segmentation based on purchases or interactions
Automated email campaigns
Abandoned-cart reminders, where legally permitted
Transactional and order-related communications
Email delivery and engagement information, where permitted

We distinguish between communications necessary to fulfil an order and optional marketing communications.

We send marketing messages only where permitted under applicable law, including obtaining consent where required.

You may withdraw marketing consent or unsubscribe from promotional emails at any time using the unsubscribe link, where provided, or by contacting [email protected].

FunnelKit Automations operates within our WordPress environment, but sending emails or delivering messages may also involve additional email service providers.

We use WPConsent to provide visitors with cookie information and controls for managing their preferences.

Our website may use the following cookie categories:

Essential cookies: Necessary for core website functionality, security, shopping carts, checkout, and order processing.

Statistics cookies: Used to understand website traffic and usage, including analytics services where enabled.

Marketing cookies: Used for advertising measurement, campaign attribution, and advertising-related features, including Google Ads and Meta Pixel where enabled.

Visitors can accept, reject, or manage optional cookie categories through the cookie banner and preference controls.

Non-essential cookies and tracking technologies should not be activated before the required consent has been obtained.

For a detailed list of documented cookies, their purposes, and retention periods, please refer to our Cookie Policy.

We may share personal data with service providers where necessary for legitimate business operations, including:

Payment providers such as Stripe and PayPal
Delivery partners such as Pošta Slovenije and Packeta
Hosting and infrastructure providers such as Hostinger and Cloudflare
Google and Meta in connection with configured analytics and advertising services
Email delivery and marketing service providers
Accounting, legal, and IT service providers
Public authorities where required by law

We do not sell customer personal data.

Where a service provider processes personal data on our behalf, we seek to ensure that appropriate contractual and data protection safeguards are in place.

13. International Data Transfers

Some service providers, including Google, Meta, Stripe, PayPal, and infrastructure or email providers, may process or access personal data outside the European Economic Area.

Where international transfers occur, we rely on applicable legal transfer mechanisms, such as adequacy decisions or Standard Contractual Clauses, together with supplementary measures where required.

Information about applicable safeguards may be requested by contacting us.

14. Data Retention

We retain personal data only for as long as necessary for the relevant purpose or as required by law.

Orders, invoices, and accounting records: for applicable statutory retention periods.
Customer support correspondence: for as long as reasonably necessary to resolve the matter and address related legal obligations.
Customer accounts: while active and subsequently where retention is legally justified.
Marketing subscriptions: until consent is withdrawn or the information is no longer required for the stated purpose, subject to legal obligations.
Technical and security logs: for periods appropriate to security and operational requirements.
Cookies: according to their documented purposes and retention periods in the Cookie Policy.

Personal data is deleted or anonymised when it is no longer required, unless continued retention is legally justified.

Subject to applicable legal requirements, you have the right to:

Access your personal data
Request correction of inaccurate information
Request erasure of personal data
Request restriction of processing
Object to processing based on legitimate interests
Request data portability where applicable
Withdraw consent at any time
Object to direct marketing

To exercise these rights, contact [email protected].

We will respond within the deadlines required by applicable law and may request reasonable identity verification where necessary.

16. Data Security

We use appropriate technical and organisational safeguards designed to protect personal data, including access controls, encrypted connections, software maintenance, and website security measures.

Although we take reasonable steps to protect information, no internet-based system can guarantee absolute security.

17. Children’s Privacy

Our website is not specifically directed at children.

We do not knowingly collect personal data from children where legally required parental or guardian consent has not been obtained.

If you believe a child has provided personal information improperly, please contact us.

18. Automated Decision-Making and Profiling

We may use customer segmentation and automated marketing workflows to tailor communications and understand customer interests.

These activities do not necessarily constitute automated decision-making with legal or similarly significant effects under Article 22 GDPR.

If we introduce processing that falls within Article 22, we will provide the legally required information and safeguards.

19. Complaints

You have the right to lodge a complaint with a competent data protection supervisory authority.

In Slovenia, the relevant authority is:

Information Commissioner of the Republic of Slovenia (Informacijski pooblaščenec)

Website: https://www.ip-rs.si/

You may also contact us directly at [email protected].

20. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our services, technology, or applicable legal requirements.

Updates will be published on this page with the relevant revision date. Where required by law, we will provide additional notice or obtain consent.

21. Contact Information