Privacy policy

The controller is SERANTIO, an individual business (Person Fizik), NIPT M66829208A, registered in Vlorë, Albania. For personal data enquiries: helpdesk@serantio.com. The full business address and contact channels are on the Legal Information page.

We collect first and last name; phone number; address and delivery information; email; order and purchase history; account login details when Google Login is used; and technical data, online identifiers and analytics/cookie data according to site configuration and expressed preferences.

We process data to handle and deliver orders; meet fiscal, invoicing and legal obligations; provide customer service and handle complaints; maintain security and prevent abuse; manage accounts; and analyse site use or run digital marketing only where consent is required and obtained. Legal bases include contract performance, legal obligations, legitimate interests in security and handling requests, and consent for marketing and non-essential technologies. Phone number, address and delivery instructions are required for delivery; without them an order may not be completed. Marketing consent is not a condition of purchase.

When Google Login is used, SERANTIO receives only data permitted by the authorised integration, such as name and email, to create and manage the account. SERANTIO does not ask for the customer’s Google password.

The site may use analytics tools to measure usage. Advertising tools are enabled only if actually installed and used. Non-essential technologies requiring consent operate according to the visitor’s choices in the cookie preferences panel; those preferences can be changed through the site link.

Email addresses for newsletters or marketing are processed for promotional messages only where an appropriate lawful basis exists, usually user consent. Every marketing message must allow unsubscribe. Buying a product is not automatically treated as consent to all forms of marketing.

Necessary data is shared with hosting (Hostinger), the ecommerce platform (WordPress/WooCommerce), carriers, email services and, where activated by the customer, login and analytics providers. Payment data is received only by providers of methods actually active at checkout; payment is currently on delivery. Some technical providers may process data outside Albania; transfers take place only with an appropriate legal basis and safeguards. For details of recipients or safeguards, email helpdesk@serantio.com.

Order data is kept as long as needed for contract performance and mandatory accounting, fiscal and legal periods. Account data is kept while the account is used and as legally required; marketing data until consent is withdrawn or the purpose ends. Relevant data may be retained for the defence of rights in a dispute.

Under Law No. 124/2024, individuals may request access, correction, erasure, restriction of or objection to processing and, where applicable, data portability. Consent can be withdrawn at any time without affecting earlier lawful processing. Send requests to helpdesk@serantio.com; responses are provided within statutory time limits. A complaint may be lodged with the Commissioner for the Right to Information and Personal Data Protection.

SERANTIO takes reasonable technical and organisational measures to protect data. No online system can guarantee absolute security.

This policy takes account of Law No. 124/2024 on personal data protection, according to official sources of the competent Commissioner.