Privacy policy
Who is responsible
Moltéa is a one-person studio. The controller of your personal data is:
- Controller
- Jana Nováková – Moltéa
- Address
- Vzorová 12, 811 01 Bratislava, Slovakia
- IČO
- 12 345 678
Write to that address with any question about your data. I have not appointed a data protection officer, as the law does not require one for a business of this size.
What I collect and why
Your order
- Data
- Name, email address, phone number, delivery and billing address, the pieces ordered, and the payment status (never your card details)
- Why
- To make, send and, if needed, take back your order, and to send you messages about it
- Legal basis
- Performance of the contract, Art. 6(1)(b) GDPR
- Kept for
- As long as the order and any guarantee claim are open
Bookkeeping
- Data
- Invoices and accounting records of your order
- Why
- Accounting and tax law require it
- Legal basis
- Legal obligation, Art. 6(1)(c) GDPR (Act No. 431/2002 Coll. on accounting)
- Kept for
- 10 years after the year of the order
Withdrawals and complaints
- Data
- Your contact details, the order, and what you tell me about the return or defect
- Why
- To handle your request and keep the records consumer law asks for
- Legal basis
- Legal obligation, Art. 6(1)(c) GDPR
- Kept for
- As long as the law requires, at least until the guarantee period ends
Messages
- Data
- Your email address, name and whatever you write
- Why
- To answer you
- Legal basis
- Legitimate interest in replying to you, Art. 6(1)(f) GDPR
- Kept for
- Up to 2 years after our last exchange, unless the message belongs to an order
Giving your contact and delivery details is necessary to buy from me; without them I cannot deliver your order. I do not use your data for automated decisions or profiling, and I do not sell it to anyone.
Who else receives it
Only the services needed to run the shop, each bound to protect your data:
- Payments
- Stripe Payments Europe, Ltd. (Ireland). Stripe also processes some data as an independent controller, for fraud prevention and its own legal obligations.
- Delivery
- Packeta (Zásielkovňa s.r.o.): your name, address or chosen pickup point, phone and email, to deliver the parcel
- Pickup map
- Packeta, whose map is loaded in advance when you open the bag with pickup delivery selected, so it opens faster when you choose a point. Your browser connects to Packeta and so shares your IP address. Packeta can use your location only with your permission; if you have already granted that permission, it may use your location while the map loads in advance. The map sets its own cookies and asks for your consent to optional ones.
- Website and orders
- Cloudflare, Inc., which hosts this site, stores order and delivery records in its D1 database, and keeps short-lived technical logs (such as IP addresses) for security
- Order emails
- Resend, which receives the contact and order details needed to send your order confirmation and shipping updates
- Email inbox
- Google Ireland Ltd. (Gmail), with Cloudflare Email Routing for incoming mail
- Fonts
- Adobe Fonts, which serves the site’s typefaces; your browser connects to Adobe and so shares your IP address. Adobe Fonts sets no cookies.
- Accounting
- My accountant and, where the law requires it, public authorities
Some of these providers may process data outside the European Union, mainly in the United States. Such transfers rely on the EU–US Data Privacy Framework or on the European Commission’s standard contractual clauses.
Cookies
The public storefront sets no cookies and uses no analytics or advertising trackers. The private order dashboard uses Cloudflare Access authentication cookies and is only for the seller. Your bag and delivery choice are kept in your own browser’s storage so they stay put between pages; they reach me only when you check out. The Stripe checkout page sets its own cookies, which it needs to take payment securely and prevent fraud (see Stripe’s privacy policy), and so does Packeta’s pickup map, which loads when you open the bag with pickup delivery selected (see Packeta’s privacy policy).
Your rights
You can ask me for access to your personal data, for its correction or erasure, to restrict its processing, and for a copy in a portable format. You can object to processing based on legitimate interest. Write to hello@moltea.clothing; I reply within one month.
You can also complain to the supervisory authority: Úrad na ochranu osobných údajov Slovenskej republiky, Hraničná 12, 820 07 Bratislava 27, dataprotection.gov.sk.
Last updated 11 October 2026.