Privacy policy

Last updated: 3 August 2026

Who controls your data

The controller is RUSTIMOD S.R.L., RUSTIMOD S.R.L., Str. 1 Decembrie 1918 nr. 16, bl. 16, et. 1, ap. 6, Focsani, Vrancea, 620171, Romania, VAT RO52400263. Privacy enquiries can be sent to rustimodsrl@gmail.com.

Data we collect

identity and contact details, including name, email, phone and delivery/billing address;
order details, product choices, correspondence and customer service history;
payment status and transaction references supplied by Stripe, but not full card numbers;
technical and security data necessary to operate the site, such as IP address and authentication logs.

Why we use it

to answer enquiries and take steps requested before a contract;
to process, make, deliver and support orders under our contract with you;
to meet tax, accounting, consumer protection and fraud-prevention obligations;
to secure and improve the essential operation of the website based on our legitimate interests.

Who receives it

We share only what is necessary with providers that help us operate: Stripe for payment, Supabase for database and authentication, Netlify for website hosting, Resend for transactional email, professional advisers and the courier selected for delivery. We do not sell personal data.

International processing

Some providers may process data outside the European Economic Area. Where required, transfers are protected by an adequacy decision, standard contractual clauses or another lawful safeguard offered by the provider.

Retention

We keep order, invoice and transaction records for the period required by Romanian tax and accounting law. Enquiries and customer service correspondence are retained only as long as reasonably needed to answer the request, manage a dispute or protect legal rights. Security logs are retained for a limited operational period.

Your rights

Subject to applicable law, you may request access, correction, deletion, restriction, portability or object to certain processing. You may also complain to the Romanian National Supervisory Authority for Personal Data Processing or your local supervisory authority. We may need to verify your identity before acting on a request.

Security and updates

We use access controls, encrypted connections and service providers designed for secure commerce. No internet system is completely risk-free. We may update this notice when our services or legal duties change; the date at the top identifies the current version.