1. Who is responsible for your data?
Drielo is responsible for the personal data processed through this website. For privacy questions or requests, contact tostis005@gmail.com.
2. Data we may process
Depending on how you use the site, we may process identification and contact data, order and billing information, messages you send us, and technical information needed for security and site operation.
3. Why we use it
- To process purchases, deliver digital files and provide customer support.
- To respond to contact requests.
- To comply with accounting, tax or other legal obligations that apply to the store.
- To prevent abuse, fraud and security incidents.
4. Legal bases
Processing may be based on performance of a contract, compliance with a legal obligation, your consent where required, or Drielo's legitimate interests in operating and protecting the service, depending on the purpose.
5. Service providers and payments
Data may be handled by providers that are necessary to run the store, such as hosting, email, WordPress/WooCommerce infrastructure and the payment provider chosen at checkout. Payment credentials are handled according to the payment provider's own systems and policies.
6. International transfers
Some providers may process data outside your country. Where data protection law requires safeguards for those transfers, the applicable contractual or legal mechanisms should be used.
7. Retention
We keep data only for as long as needed for the purpose for which it was collected and for any mandatory legal retention periods. Contact messages are reviewed and may be deleted when they are no longer needed.
8. Your rights
Where applicable, you may request access, correction, deletion, restriction, portability or objection, and you may withdraw consent where processing is based on consent. You may also lodge a complaint with the competent data protection authority.
9. Cookies and security
The site may use technical cookies that are necessary for functions such as the cart, checkout, language and session management. If non-essential cookies are activated, they should be handled using the consent required by applicable law. We apply reasonable technical and organisational measures to protect personal data.
10. Updates
This policy may be updated when the services, providers or legal requirements change. Last updated: 24 September 2026.