PERSONAL DATA

Privacy policy

Last updated: 1 November 2026

This policy explains how personal data is processed when you visit Miswak.ro. Online orders are not currently enabled.

Data controller

The operator and its legal details will be filled in automatically from the admin settings. For privacy requests: Contact details will be filled in automatically from the admin settings.

What data we process and why

• Browsing and site operation: the server and hosting provider may process technical data needed to deliver and secure the site, such as IP address, request date and time, pages accessed and browser information. This is used to operate the site, prevent abuse and diagnose errors, based on legitimate interests.
• Visit measurement preference: if you select “Accept”, your browser stores that choice and the site records only a daily total of sessions. The analytics application is not sent your IP address and does not estimate your region. If you decline, this total is not recorded. The legal basis is consent, which you can change by clearing this site's browser data.
• Cart: items added to the cart are stored locally in your browser so the cart can be displayed. Cart data is not sent to the server while orders are disabled.
• Customer account: if enabled, we process your email address, password in cryptographically hashed form, and technical session data to create and authenticate your account. The legal basis is providing the requested service and, where applicable, consent for the strictly necessary session cookie. Do not submit sensitive information through your account.
• Contact message: if the form is enabled and you submit it, we process your name, email address and message to respond, based on the consent given at submission and our legitimate interest in handling communications. The form is not currently configured.
• Orders and payments: checkout is not active. If launched, this policy will be updated before data is collected for orders, invoicing, delivery or payment.

Cookies and local storage

The site uses your browser's local storage for the cart and your visit measurement choice. If customer login is enabled, a strictly necessary session cookie may be used. We do not currently use advertising cookies or third-party tracking tools in the site code. You can clear this data in your browser settings; clearing the session cookie may sign you out.

Who receives data

Data may be accessed by providers hosting and maintaining the site or supplying technical services, to the extent needed to provide those services and subject to confidentiality and data protection obligations. Data may be disclosed to authorities where required by law. We do not sell personal data or use it for personalised advertising. The actual providers and any transfers outside the European Economic Area must be specified before orders and communication features launch.

How long we keep data

Technical data is kept as long as needed for security and diagnostics, according to the hosting provider's settings. Privacy preferences and cart data remain in your browser until you clear them or they expire under its settings. Account data is kept while the account is active, then deleted or anonymised, except for information that must be retained to meet legal obligations or establish, exercise or defend legal claims. Messages are kept as long as necessary to handle the request and applicable legal limitation periods. Exact periods and hosting retention settings will be published before the features launch.

Your rights

Under the GDPR, you may request access, rectification, erasure, restriction of processing and data portability, and object to processing based on legitimate interests. Where processing is based on consent, you may withdraw it for the future. Withdrawal does not affect processing carried out before it. You may lodge a complaint with the Romanian data protection authority (ANSPDCP) or the competent supervisory authority.

To exercise your rights, contact us through the contact page once contact details are enabled. We will respond within the GDPR time limits and may request reasonable information to verify your identity.

Security and changes

We use appropriate technical and organisational measures to protect data. No system transmitting information over the internet can guarantee absolute security. We will update this page if the data processed, providers or site features change and display the revision date.

This page describes the features identified in the current site version. The controller's identity, contact details, providers and specific retention periods must be completed and reviewed before commercial launch.