Privacy policy

Last updated: July 14, 2026

This Privacy Policy describes how ORIGINAL DECOUVERTE SRL ("Original Découverte", "we", "us", or "our") collects, uses, discloses, and protects personal data when you visit our website, create an account, place an order, contact us, or otherwise use the products and services available through our online store.

The store is hosted and operated using the Shopify platform.

1. Personal Data Controller

The personal data controller is:

ORIGINAL DECOUVERTE SRL
Str. Schelei No. 119
Mislea Village, Scorteni Commune, Prahova County
Postal Code 107528
Romania

Email: hello@originaldecouverte.com
Phone: +40 737 270 775

For questions regarding this policy or to exercise your rights concerning personal data, you may contact us using the details above.

2. Scope

This policy applies to personal data processed through:

• our online store;
  
• customer accounts;
  
• the ordering and payment process;
  
• contact forms;
  
• customer support services;
  
• commercial communications;
  
• cookies and similar technologies;
  
• our advertising campaigns;
  
• Shopify and TikTok for Business integrations;
  
• other services associated with the store's operations.

This policy does not apply to websites or services independently managed by third parties, even if they are accessible via links displayed on our website.

3. What personal data we collect

Depending on how you interact with the store, we may process the following categories of data:

Identification and contact data

• first and last name;
  
• email address;
  
• phone number;
  
• billing address;
  
• delivery address;
  
• country and locality;
  
• company details, when the order is placed on behalf of a legal entity.

 Account data

• login credentials and account identifiers;
• orders associated with the account;
• saved products;
• ccount preferences and settings.

 We do not have access to your password in readable form.

 Order and transaction data

• products viewed, ordered, returned, or cancelled;
  
• order number and date;
  
• order value;
  
• currency;
  
• selected payment method;
  
• payment status;
  
• delivery, return, and refund information;
• order-related communications. 

Payment data

Payments are processed via Shopify and/or authorized payment service providers.

Typically, we do not receive or store the full card number, card security code, or other complete financial authentication data. We may receive limited information, such as:

• payment method type;
  
• last digits of the card;
  
• payment confirmation or rejection;
  
• transaction identifier;
  
• information necessary for fraud prevention and refund processing.
  

  Site usage and device data

• IP address;
  
• device type;
  
• operating system;
  
• browser type and version;
  
• online identifiers;
  
• pages and products viewed;
  
• access date and time;
  
• visit source;
  
• site interactions;
• products added to the cart;
  
• initiating and completing an order;
  
• information collected via cookies, pixels, and similar technologies.

Communications

We may process the information you provide to us when:

• you send us an email;
  
• you fill out a form;
  
• you request support;
  
• you submit a complaint;
  
• you request a return or a refund;
  
• you participate in a survey, contest, or promotion;
  
• you communicate with us via social media.

Customer-provided content

We may process reviews, photos, videos,  comments, and other materials that you submit to us or publish in connection with our products.

4. Sources of personal data

We may obtain personal data:

• directly from you;
  
• automatically, when you use the website;
  
• from Shopify;
  
• from payment processors;
  
• from courier companies;
  
• from technical and security service providers;
  
• from advertising platforms, including TikTok;
  
• from business partners;
  
• from public sources, where permitted by law.

5. Purposes and legal grounds for processing

Order processing and contract performance

We process the data necessary for:

• registering and confirming the order;
  
• processing payment;
  
• preparing and delivering products;
  
• account administration;
  
• managing returns, cancellations, and refunds;
  
• providing support services;
  
• communicating essential order-related information.

Legal basis: performance of the contract or taking steps at your request prior to entering into the contract.

Compliance with legal obligations

We process certain data for:

• issuing and retaining accounting and tax documents;
• compliance with consumer protection legislation;
• responding to requests from authorities;
• compliance with obligations regarding the prevention of fraud and money laundering, where applicable;
• the defense and exercise of legal rights.

Legal basis: compliance with a legal obligation.

Security and fraud prevention

We may use the data to:

• protect accounts and transactions;
  
• identify suspicious orders;
  
• prevent site misuse;
  
• prevent fraud;
  
• protect infrastructure and IT systems;
  
• establish, exercise, or defend legal claims.

Legal basis: our legitimate interest in protecting the store, customers, and transactions.

Improving the store

We may analyze site usage to:

• improve functionality;
  
• fix errors;
  
• optimize navigation;
  
• evaluate product and service performance;
  
• generate internal statistics.

Legal basis: legitimate interest or consent, depending on the nature of the technology used.

Direct marketing

We may use contact details to send:

• news;
  
• offers;
  
• promotions;
  
• product recommendations;
  
• commercial messages via email or SMS.

These communications are sent when we have your consent or when the law permits communication with existing customers regarding similar products.

You can unsubscribe at any time via the link included in the message or by contacting us.

Legal basis: consent or legitimate interest, where permitted by law.

6. TikTok, advertising, and conversion measurement

We use or may use TikTok for Business services to:

• measure traffic and conversions;
  
• evaluate ad effectiveness;
  
• attribute sales to advertising campaigns;
  
• display more relevant ads;
  create advertising audiences;
  
• retarget visitors; campaign
• optimization;
  
• identification of potential customers.

Depending on the consent settings and the sharing level enabled in Shopify, the integration may use:

• TikTok Pixel;
  
• TikTok Events API;
  
• Advanced Matching;
  
• Shopify APIs;
  
• similar measurement and advertising technologies.

Through these technologies, information such as the following may be transmitted to TikTok:

• IP address;
  
• device and browser information;
  
• cookie and advertising identifiers;
  
• pages and products viewed;
  
• searches performed;
  
• products added to the cart;
  
• initiation of the checkout process;
  
• order completion;
  
• transaction value and currency;
  
• product identifier;
  
• email address or phone number, where their use is permitted.

When used via Advanced Matching, certain contact data may be hashed before transmission to facilitate linking site events with TikTok users and advertisements.

We do not intend to transmit passwords, full card details, medical information, or other special categories of personal data to TikTok.

TikTok technologies used for advertising purposes are activated for visitors from the European Economic Area only in accordance with the choices made via the consent banner, to the extent that consent is required by law.

You may refuse or withdraw consent for advertising cookies using the preference management tool available on the site.

7. Cookies and similar technologies

We use cookies and similar technologies for:

• store operation;
  
• maintaining items in the cart;
  
• account authentication;
  
• security;
  
• remembering preferences;
  
• analyzing site usage;
  
• measuring performance;
  
• content personalization;
  
• advertising and conversion measurement.

  Strictly necessary cookies

These are required for site operation, security, the shopping cart, order processing, and authentication. Generally, they cannot be disabled via the consent tool.

Analytics cookies

These help us understand how the store is used and improve its functionality.

Marketing cookies

These may be used for campaign measurement, ad personalization, retargeting, and audience creation.

Except where permitted by law, non-essential cookies are not activated prior to obtaining consent.

You can accept, reject, or modify your preferences via the cookie banner or the privacy management tool available on the site.

Rejecting non-essential cookies should not prevent access to the store's essential functions, although certain optional features may be limited.

8. Shopify

Our store uses the Shopify platform to provide e-commerce services.

Shopify may process personal data for:

• hosting the store;
  
• account operations;
  
• order processing;
  
• security;
  
• fraud prevention;
  
• providing store functionalities;
  
• improving its services;
  
• fulfilling its own legal obligations.

Data may be shared with Shopify group companies and its service providers, including those located outside the European Economic Area, in accordance with applicable law.

Processing carried out by Shopify is also governed by Shopify’s own policies and terms.

9. To whom we may disclose data

We may disclose personal data only to the extent necessary to:

• Shopify;
  
• payment processors;
  
• financial institutions;
  
• courier and logistics companies;
  
• IT service providers;
  
• hosting and storage providers;
  
• security and fraud prevention service providers;
  
• customer service providers;
  
• email and SMS service providers;
  
• accountants, auditors, lawyers, and consultants;
  
• advertising platforms, including TikTok;
  
• analytics and measurement providers;
  
• public authorities, courts, or competent bodies;
  
• buyers, investors, or consultants involved in a potential reorganization, merger, acquisition, or sale of assets.

Service providers processing data on our behalf must use it only in accordance with our instructions and applicable contractual obligations.

Some platforms may also act as independent controllers for certain activities of their own, in accordance with their policies.

10. Personalized advertising

Depending on the consent provided, we may use information about your activity to:

• select advertisements;
  
• measure advertising performance;
  
• limit ad frequency;
  
• retarget;
  
• create lookalike audiences;
  
• personalize commercial communications.

You can opt out of cookie-based advertising via the site's privacy settings.

You can also modify your advertising preferences directly within your accounts on the respective platforms.

11. International transfers

Shopify, TikTok, and other providers may process or store data in countries outside the European Economic Area.

When data is transferred outside the European Economic Area, we rely, as applicable, on:

• an adequacy decision adopted by the European Commission;
  
• Standard Contractual Clauses approved by the European Commission;
  
• other safeguards or derogations recognized by applicable law.

You may request further information regarding the applicable safeguards by contacting us.

12. Data retention period

We retain data only for as long as necessary to fulfill the purposes for which it was collected and to comply with legal obligations.

The criteria used to determine the retention period include:

• the duration of the business relationship;
  
• the existence of an active account;
  
• the time required to process orders;
  
• accounting and tax deadlines;
  
• warranty periods;
  
• statutes of limitation;
  
• the need to resolve complaints and disputes;
  
• fraud prevention;
  
• consent and its withdrawal.

In general terms:

• order data and financial-accounting documents are retained in accordance with applicable statutory timeframes;
  
• correspondence regarding orders and complaints may be retained for the duration necessary to resolve the matter and defend rights;
  
• account data is retained for as long as the account remains active and for a reasonable period following its closure;
  
• data used for marketing purposes is retained until consent is withdrawn, the user unsubscribes, or the established period expires;
  
• cookies are retained for the duration specified in the cookie management tool.

Upon the expiration of the applicable periods, the data is deleted, anonymized, or stored separately where a legal obligation exists.

13. Your rights

Under the conditions set out in the GDPR, you have the right:

• to be informed about the data processing;
  
• to request access to your personal data;
  
• to request the rectification of inaccurate or incomplete data;
  
• to request the deletion of data;
  
• to request the restriction of processing;
  
• to object to processing based on legitimate interest;
  
• to object to direct marketing at any time;
  
• to request data portability;
  
• to withdraw your consent at any time;
  
• not to be subject to a decision based solely on automated processing which produces legal effects or similarly significantly affects you;
  
• to lodge a complaint with the competent authority.

The withdrawal of consent does not affect the lawfulness of processing carried out prior to such withdrawal.

Certain rights may be limited where the retention or processing of data is required by law or is necessary for the establishment, exercise, or defense of a legal claim.

14. Exercising your rights

To exercise your rights, please send a request to:

Email: hello@originaldecouverte.com

The request must contain sufficient information to identify the person and the data concerned.

To protect data and prevent unauthorized access, we may request additional information to verify your identity.

We will respond within the timeframe stipulated by applicable law. In complex situations or in the event of a high volume of requests, this timeframe may be extended in accordance with the law, and the requester will be informed.

Exercising your rights is, in principle, free of charge. In the event of manifestly unfounded or excessive requests, we may charge a reasonable fee or refuse to act on the request, in accordance with the law.

15. Complaints

We recommend that you contact us first to attempt to resolve any issues regarding your personal data.

You have the right to lodge a complaint with:

The National Supervisory Authority for Personal Data Processing (ANSPDCP)

28–30 General Gheorghe Magheru Blvd.
Sector 1, Postal Code 010336
Bucharest, Romania

You may also lodge a complaint with the supervisory authority in the European Union Member State where you reside, work, or where you believe the infringement took place.

16. Data security

We implement reasonable technical and organizational measures to protect data against:

• unauthorized access;
  
• loss;
  
• destruction;
  
• alteration;
  
• disclosure;
  
• unlawful use.

These measures may include access control, authentication, encryption of certain transmissions, system monitoring, backups, and internal security procedures.

No method of electronic transmission or storage can guarantee absolute security. Do not transmit passwords, full card details, or other sensitive information via email or unsecured channels.

17. Data concerning minors

The store is not specifically intended for children, and we do not knowingly collect personal data from children who lack the legal capacity to complete a purchase. If you become aware that a child has submitted data to us without the necessary authorization, please contact us so we can review and, if appropriate, delete the information.

18. Links to external services

The website may contain links to websites, applications, or services managed by third parties.

We do not control and are not responsible for their privacy practices, content, or security. We recommend that you consult the privacy policy of each external service before providing personal data to it.

19. Policy updates

We may update this Privacy Policy to reflect:

• legislative changes;
  
• changes to our services;
  
• the use of new service providers;
  
• changes in analytics and advertising technologies;
  
• changes to our data processing practices.

The updated version will be published on this page, along with the new date of the last update.

In the event of significant changes, we may provide additional notification via the website, email, or other appropriate means.

20. Contact

For questions regarding this Privacy Policy, the use of personal data, or the exercise of your rights, you can contact us at:

ORIGINAL DECOUVERTE SRL
Str. Schelei Nr. 119
Mislea Village, Scorțeni Commune, Prahova County
Postal Code 107528
Romania

Email: hello@originaldecouverte.com
Phone: +40 737 270 775