PRIVACY POLICY

Last updated: September 1, 2026

This Privacy Policy explains how p0NDENUSH - SETTINGS & SERVICES, operated by p0NDENUSH ("p0NDENUSH", "we", "us", or "our"), collects, uses, stores, and discloses personal information when you visit p0ndenush.com, purchase a product, request support, or otherwise communicate with us.

For the purposes of applicable data protection law, including the General Data Protection Regulation ("GDPR"), the data controller is:

p0NDENUSH
Trading as: p0NDENUSH - SETTINGS & SERVICES
Email: p0ndenushromania@yahoo.com

Please read this Privacy Policy carefully.

1. PERSONAL INFORMATION WE COLLECT

The information we collect depends on how you interact with our store and Services.

Information you provide directly

We may collect information such as:

- name;

- email address;

- billing information;

- shipping/contact address where required by the checkout system;

- telephone number where provided;

- order number and order details;

 -selected products and variants;

- information you provide when requesting customer support;

- messages or information you voluntarily provide through email, Instagram, Discord, forms, or other support channels.

Please do not send passwords, payment card security codes, account credentials, or other unnecessary sensitive information through customer-support channels.

Payment information

Payments are processed through Shopify and/or payment providers made available at checkout.

We do not need to receive or store your full payment-card credentials in order to provide customer support.

Payment processors may process information necessary to authorize and complete your transaction in accordance with their own privacy terms.

Information collected automatically

When you use our website, certain technical information may be collected automatically, including:

IP address;

- browser type;

- device information;

- operating system information;

- pages viewed;

- referring pages;

- website interactions;

- timestamps;

- cookie identifiers;

- technical diagnostic and security data.

This information may be collected through cookies, pixels, logs, analytics technologies, or similar tools.

2. INFORMATION WE RECEIVE FROM THIRD PARTIES

We may receive information from service providers involved in operating the store, including:

- Shopify;

- payment processors;

- fraud-prevention providers;

- website hosting and technical providers;

- analytics services;

- customer-support tools;

- marketing or advertising platforms, where such tools are enabled.

Information received from third parties is processed in accordance with this Privacy Policy and applicable law.

3. HOW WE USE PERSONAL INFORMATION

We may process personal information for the following purposes:

To perform our contract with you

This includes:

- processing purchases;

- confirming orders;

- delivering digital products;

- identifying the product and variant purchased;

- providing support included with your selected variant;

- communicating about your order;

- handling cancellation, conformity, support, or refund requests;

- preventing duplicate or incorrect fulfillment.

To comply with legal obligations

We may process information where necessary for:

- accounting;

- tax obligations;

- consumer-protection requirements;

- regulatory requests;

- legal record keeping;

- responding to lawful requests from authorities.

For legitimate business interests

Where permitted by law, we may process information for legitimate interests including:

- website security;

- preventing fraud and abuse;

- troubleshooting;

- service improvement;

- protecting our rights;

- maintaining business records;

- responding to customer enquiries.

We consider the impact on your privacy before relying on legitimate interests.

With your consent

Where consent is legally required, we may rely on your consent for purposes such as:

- certain marketing communications;

- non-essential cookies;

- certain advertising or tracking technologies.

You may withdraw consent where applicable.

4. MARKETING COMMUNICATIONS

Where legally permitted, we may send promotional communications to users who have requested them or where another lawful basis applies.

You can unsubscribe from marketing communications using the unsubscribe mechanism provided in the communication or by contacting us.

Opting out of promotional messages does not prevent us from sending transactional messages relating to your orders, support requests, security, or legal notices.

5. COOKIES AND SIMILAR TECHNOLOGIES

Our website may use cookies and similar technologies to:

- operate essential website functions;

- maintain cart and checkout functionality;

- remember preferences;

- protect the website from fraud or abuse;

- understand website performance;

- perform analytics;

- support advertising or marketing functionality where enabled and legally permitted.

Where required by law, non-essential cookies or tracking technologies will be used only after the necessary consent has been obtained.

You can manage cookies using available consent controls and your browser settings.

Blocking essential cookies may prevent certain store functions from operating correctly.

6. HOW WE DISCLOSE PERSONAL INFORMATION

We do not sell personal data as a general business model.

We may disclose personal information where reasonably necessary to categories of recipients including:

- Shopify;

- payment processors;

- hosting and infrastructure providers;

- analytics providers;

- customer-support providers;

- fraud-prevention and security providers;

- professional advisers;

- marketing or advertising providers where enabled and legally permitted;

- public authorities where disclosure is legally required.

Service providers receive only the information reasonably necessary for their function and process information subject to their own legal obligations and applicable contractual arrangements.

We may also disclose information in connection with a merger, acquisition, sale, restructuring, or other legitimate business transaction where legally permitted.

7. SHOPIFY

Our store is hosted and operated using Shopify's e-commerce platform.

Shopify processes personal information in connection with store operation, checkout, account functions, fraud prevention, payments, and other Shopify services.

Shopify's processing is also governed by Shopify's applicable privacy documentation.

8. INTERNATIONAL DATA TRANSFERS

Some service providers may process information outside Romania or outside the European Economic Area.

Where GDPR transfer requirements apply, transfers will be made using an available lawful transfer mechanism, such as an adequacy decision, Standard Contractual Clauses, or another mechanism permitted by applicable law.

9. DATA RETENTION

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected and for any additional period required or permitted by law.

Retention periods may depend on:

- whether you have an active order or support request;

 accounting and tax obligations;

- fraud-prevention requirements;

- contractual obligations;

- dispute resolution;

- establishment, exercise, or defence of legal claims.

When information is no longer reasonably required, it may be deleted, anonymized, or securely retained where a legal obligation requires continued storage.

10. DATA SECURITY

We use reasonable technical and organizational measures designed to protect personal information.

However, no internet transmission, electronic storage system, website, or communication platform can be guaranteed to be completely secure.

Do not send sensitive credentials, passwords, payment-card security codes, or other unnecessary confidential information through Instagram, Discord, email, or other support messages.

11. THIRD-PARTY WEBSITES AND SERVICES

Our website may contain links to third-party websites, platforms, social networks, or services.

We do not control the privacy practices of third parties.

If you interact with a third-party service, its own terms and privacy policy may apply.

The presence of a third-party link does not by itself mean that the third party is affiliated with or endorsed by p0NDENUSH.

12. SOCIAL MEDIA AND SUPPORT PLATFORMS

If you contact us through Instagram, Discord, or another third-party platform, that platform may independently process information associated with your account and communication.

Do not send unnecessary sensitive personal information through social-media channels.

For formal privacy requests, please use:

p0ndenushromania@yahoo.com

13. CHILDREN'S PRIVACY

Our Services are not specifically directed to children.

We do not knowingly seek to collect personal information from children in circumstances prohibited by applicable law.

If you are a parent or guardian and believe a child has provided personal information improperly, please contact us so that the situation can be reviewed.

14. YOUR DATA-PROTECTION RIGHTS

Depending on your location and applicable law, you may have rights including:

- the right to be informed about processing;

- the right to access your personal information;

- the right to correct inaccurate information;

- the right to request deletion in applicable circumstances;

- the right to restrict certain processing;

- the right to data portability in applicable circumstances;

- the right to object to certain processing;

- the right to withdraw consent where processing is based on consent;

- rights relating to certain automated decisions, where applicable;

- the right to lodge a complaint with a competent supervisory authority.

These rights are not absolute and may be subject to legal conditions and exceptions.

15. HOW TO EXERCISE YOUR RIGHTS

To submit a privacy request, email:

p0ndenushromania@yahoo.com

Please clearly describe the request and provide enough information for us to reasonably identify the relevant account, order, or data.

We may request reasonable verification before responding to a data-protection request.

We will respond within the period required by applicable law.

16. DATA-PROTECTION COMPLAINTS

If you believe your personal data has been processed unlawfully, please contact us first so we can review the matter.

You may also have the right to lodge a complaint with the competent data-protection supervisory authority.

For Romania, the supervisory authority is:

Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP).

17. GLOBAL PRIVACY CONTROL AND OTHER PRIVACY PREFERENCES

Where our website technology recognizes and is legally required to honor supported privacy preference signals, such signals may be processed in accordance with applicable law and the capabilities of our store platform.

Other browser signals may not be supported where there is no applicable technical or legal requirement.

18. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy where necessary to reflect:

- changes to our Services;

- technology changes;

- changes to service providers;

- operational practices;

- legal or regulatory requirements.

When we make changes, the revised version will be published on this website with an updated "Last updated" date.

19. CONTACT

For privacy questions or to exercise a data-protection right:

p0NDENUSH - SETTINGS & SERVICES
Operated by: p0NDENUSH
Email: p0ndenushromania@yahoo.com

Instagram may be used for general customer support:

https://www.instagram.com/p0ndenush4ro/

For formal privacy matters, please use email.