Privacy policy
This policy explains what personal data we collect when you visit chayetinats.com or buy from us, why we collect it, who we share it with, and what your rights are. We follow the Serbian Law on Personal Data Protection. If you live in the EU, the GDPR also protects you, and you have the same rights.
The short version
- We collect only what we need to deliver your order and answer your messages. With your permission, we also send you news.
- We never sell your data.
- Card payments go straight to the payment provider. We never see your card number.
- We send marketing emails only if you agree. You can change your mind at any time.
- To see, correct or delete your data, write to info@chayetinats.com.
1. Who is responsible for your data
CHAYETINATS LLC, 30 N Gould St Ste R, Sheridan, WY 82801, United States
Email: info@chayetinats.com · Viber/WhatsApp: +381 63 173 9358
2. What we collect and why
| What we collect | Why | Legal basis | How long we keep it |
|---|---|---|---|
| Order details: name, address, phone, email, items, prices, payment method | To deliver your order, take payment, handle exchanges and returns, and keep the records the law requires | Our contract with you; legal duty (tax and accounting) | As Serbian tax and accounting law requires |
| Payment details: card type and last 4 digits, payment status. Never your full card number | To confirm payment and give refunds | Our contract with you | Same as order details |
| Messages: Viber, WhatsApp, Instagram, email, contact form | To answer you, confirm cash-on-delivery orders and arrange exchanges | Our contract with you; our interest in helping you | 2 years after our last message |
| Return form: your bank account number, if you paid on delivery | To send your refund | Our contract with you; legal duty | Until the refund is paid, then as accounting law requires |
| Complaints about faulty items | To fix the problem and keep the complaint record the law requires | Legal duty | 2 years |
| Newsletter: your email address | To send news, new drops and offers | Your consent | Until you unsubscribe |
| Browsing data: device, browser, pages viewed, IP address | To make the site work and keep it safe | Our interest in a working, secure site | As long as each cookie lasts |
| Statistics and ad data: which ad brought you and what you bought | To see which ads work, so we spend less on ads that don’t | Your consent | As long as each cookie lasts |
3. Cookies and ads
- Necessary cookies keep your cart, checkout and the site’s security working. They are always on.
- We also use statistics and marketing cookies, including the Meta Pixel.
- The Meta Pixel tells Meta (Facebook and Instagram) which ad brought you to us and whether you bought something.
- This helps us show ads to people who are likely to want them.
- You can delete or block cookies at any time in your browser settings.
4. Who we share your data with
We share only what each company needs to do its job:
- Shopify: runs our store and checkout.
- Payment providers: Shopify Payments, Apple Pay and Google Pay process card payments.
- Courier: gets your name, address, phone number and, for cash on delivery, the amount to collect.
- Meta (Facebook, Instagram, WhatsApp): when you message us there, and for ads.
- Viber: when you message us there.
- Shopify Email: if you subscribe.
- Authorities, such as the tax office or a court, when the law requires it.
We never sell your data.
5. Data stored outside Serbia
Some of these companies store data outside Serbia, for example in the EU, Canada or the USA. We only work with companies that protect your data in ways Serbian law accepts, such as standard contractual clauses. Write to us if you want details.
6. Your rights
You can ask us to:
- show you the data we hold about you and give you a copy;
- correct data that is wrong;
- delete your data, except data the law requires us to keep, such as tax records;
- limit how we use your data;
- send your data to you, or to another company, in a common file format.
You can also:
- object to how we use your data, and stop marketing at any time;
- withdraw your consent at any time, for example by unsubscribing from the newsletter. This doesn’t affect anything we did before you withdrew it;
- complain to the Serbian data protection authority, the Commissioner for Information of Public Importance and Personal Data Protection, at www.poverenik.rs.
How: write to info@chayetinats.com. We answer within 30 days, free of charge. We may ask you to confirm who you are first.
7. How we protect your data
- Our store runs on Shopify, which encrypts the checkout.
- We never see or store full card numbers.
- Only people who need your data to handle your order can see it.
8. Children
Our shop is not meant for children under 15. We don’t knowingly collect their data. If you think a child has given us data, write to us and we will delete it.