Privacy Policy – GardenPetHome

Effective Date: September 7, 2026

Welcome to GardenPetHome. Your privacy and the security of your personal data are extremely important to us. This Privacy Policy explains how GardenPetHome d.o.o. (“we,” “us,” or “our”), as the data controller, collects, uses, shares, discloses, and protects your personal information when you visit our website www.gardenpethome.com (the “Site”) and purchase products from our online store.

By accessing our Site, purchasing our gardening tools, or utilizing our services, you acknowledge that you have read and understood the practices described in this Privacy Policy.

1. Company Information (Data Controller)

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, you can reach out to us directly using the following contact details:

Company Name: GardenPetHome d.o.o.
Website: www.gardenpethome.com
Contact Email: stkflw@gardenpethome.com
Postal Address: Ulica Vjenceslava Richtera 6, 10000 Zagreb, Croatia
Contact Phone: +385 (1) 663 6711

2. Information We Collect

We collect several categories of information from and about our users to provide a seamless, efficient, and secure shopping experience. This includes information you provide to us directly and information collected automatically through cookies and tracking technologies.

A. Information You Provide Directly to Us

Identity Data: First name, last name, title, and username or similar identifier.
Contact Data: Billing address, shipping address, email address, and telephone numbers.
Financial Data: Payment card details, bank account details, or alternative payment processor information. (Note: We do not store full payment card numbers on our servers; they are processed securely by third-party payment gateways).
Transaction Data: Details about payments to and from you, and other details of products you have purchased from our store.
Account Data: Your password, order history, preferences, product reviews, and any items added to your shopping cart.
Communications Data: Information you provide when you contact our customer support team via email, telephone, or our contact form, including feedback and correspondence history.

B. Information Automatically Collected

Technical Data: Internet Protocol (IP) address, login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this Site.
Usage Data: Information about how you use our website, such as pages viewed, links clicked, time spent on pages, scrolling behavior, products viewed, and search terms used.
Cookies and Tracking Technologies: We use cookies, web beacons, and pixels to track activities on our Site and store specific preference information. For detailed information, please see Section 7 (Cookies and Tracking Technologies).

3. How and Why We Use Your Personal Data

We will only use your personal data when the law allows us to. Most commonly, we use your data to fulfill your orders, manage your account, improve our services, and comply with legal obligations.

Below is a detailed breakdown of the purposes for processing your data and the legal bases we rely upon:

Purpose / Activity	Type of Data	Legal Basis for Processing
Account Registration: To register you as a new customer and manage your online account profile.	Identity, Contact	Performance of a contract with you
Order Processing: To process and deliver your orders, manage payments, fees, and charges, and collect money owed to us.	Identity, Contact, Financial, Transaction	Performance of a contract with you; Necessary for our legitimate interests (to recover debts)
Customer Support: To notify you about changes to our terms or privacy policy, request product reviews, or answer your customer service inquiries.	Identity, Contact, Account, Communications	Performance of a contract with you; Necessary to comply with a legal obligation; Necessary for our legitimate interests (to keep records up to date and see how customers use our products)
Site Administration & Security: To administer and protect our website and business (including troubleshooting, data analysis, testing, system maintenance, support, reporting, and hosting of data).	Technical, Usage, Identity, Contact	Necessary to comply with a legal obligation; Necessary for our legitimate interests (for running our business, provision of administration and IT services, network security, and prevention of fraud)
Marketing Communications: To deliver relevant website content and advertisements to you, and measure or understand the effectiveness of our advertising.	Identity, Contact, Technical, Usage	Consent (where required); Necessary for our legitimate interests (to study how customers use our products, develop them, grow our business, and inform our marketing strategy)
Business Analytics: To use data analytics to improve our website, products, services, marketing, customer relationships, and experiences.	Technical, Usage	Necessary for our legitimate interests (to define types of customers for our products and services, keep our site updated and relevant, and develop our business)

4. How We Share Your Information

We do not sell, rent, or trade your personal data to third parties for their marketing purposes. However, to operate our e-commerce platform and deliver our gardening products effectively, we share your data with trusted third-party service providers. These third parties are contractually obligated to protect your data and process it only under our specific instructions.

We share information with the following categories of recipients:

E-Commerce Platform Providers: Services that host our website, manage the database, and power our shopping cart infrastructure.
Payment Gateways and Processors: Secure third-party institutions that handle payment authorizations and transactions.
Shipping and Logistics Companies: Postal operators, couriers, and fulfillment centers that print labels, handle packaging, and deliver your orders to your physical address.
Marketing and Advertising Partners: Email service providers, social media networks, and advertising platforms that assist us with newsletters, retargeting campaigns, and behavioral advertising (subject to your communication preferences and consent).
Analytics and Technology Vendors: Firms that provide tools to analyze website traffic, user interaction patterns, and performance metrics.
Professional Advisors: Lawyers, bankers, auditors, and insurers providing consultancy, legal, banking, insurance, and accounting services.
Legal Authorities: Government bodies, regulatory frameworks, or law enforcement agencies when required by applicable laws, court orders, or to protect the safety, rights, and property of GardenPetHome d.o.o., our users, or the public.

5. International Data Transfers

GardenPetHome d.o.o. is based in Croatia (European Union). When we transfer your personal data outside the European Economic Area (EEA), we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission.
Where we use certain service providers, we may use specific contracts approved by the European Commission (Standard Contractual Clauses) which give personal data the same protection it has in Europe.

6. Data Security

The security of your personal data is a top priority for us. We implement a variety of technical and organizational security measures to prevent your personal data from being accidentally lost, used, altered, disclosed, or accessed in an unauthorized way.

Key security measures include:

Encryption: We use secure socket layer (SSL/TLS) encryption technology for all data transmitted between your browser and our website, especially during checkout and payment processes.
Access Control: Access to your personal data is strictly limited to employees, agents, contractors, and other third parties who have a legitimate business need to know. They process your data under strict confidentiality obligations.
Monitoring and Testing: We regularly review our data collection, storage, and processing practices, including physical and electronic security measures, to guard against unauthorized access to systems.

Despite these measures, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal data, we cannot guarantee its absolute security. If a data breach occurs involving your personal information, we will notify you and any applicable regulatory authority where we are legally required to do so.

7. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to distinguish you from other users, provide fundamental site functionality, track performance metrics, and deliver targeted advertising.

What are Cookies?

Cookies are small text files placed on your computer or mobile device when you browse websites. They are widely used to make websites work more efficiently and provide analytical data to website owners.

Types of Cookies We Use

Strictly Necessary Cookies: Essential for the operation of our Site. They include, for example, cookies that enable you to log into secure areas of our website, use a shopping cart, or make use of e-billing services. Without these cookies, the online store cannot function properly.
Analytical or Performance Cookies: Allow us to recognize and count the number of visitors and see how visitors move around our website when using it. This helps us improve the way our website works, for example, by ensuring that users find what they are looking for easily.
Functionality Cookies: Used to recognize you when you return to our website. This enables us to personalize our content for you, greet you by name, and remember your preferences (for example, your choice of language or region).
Targeting and Advertising Cookies: Record your visit to our website, the pages you have visited, and the links you have followed. We use this information to make our website and the advertising displayed on it more relevant to your interests. We may also share this information with third parties for this purpose.

Managing Cookies

You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of this website may become inaccessible or not function properly (such as keeping items saved in your shopping cart).

8. Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period for personal data, we consider:

The amount, nature, and sensitivity of the personal data.
The potential risk of harm from unauthorized use or disclosure of your personal data.
The purposes for which we process your personal data and whether we can achieve those purposes through other means.
Applicable statutory limitation periods and legal requirements (such as tax and accounting laws in Croatia, which typically require us to keep basic transaction data for a minimum of 10 years).

If you opt-out of marketing communications, we will retain your email address on a suppression list to ensure that we honor your request and do not send you further promotional materials.

9. Your Legal Rights

Depending on your geographical location and applicable local privacy legislation (such as the EU General Data Protection Regulation – GDPR), you possess specific legal rights regarding the personal data we hold about you.

You have the right to:

Request Access: Obtain a copy of the personal data we hold about you and check that we are lawfully processing it.
Request Correction: Request the correction of incomplete or inaccurate data we hold about you, though we may need to verify the accuracy of the new data you provide to us.
Request Erasure (“Right to be Forgotten”): Ask us to delete or remove personal data where there is no good reason for us continuing to process it. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.
Object to Processing: Object to the processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts your fundamental rights and freedoms. You also have the right to object where we are processing your personal data for direct marketing purposes.
Request Restriction of Processing: Ask us to suspend the processing of your personal data in scenarios such as establishing data accuracy, where our use of the data is unlawful but you do not want us to erase it, or where you need us to hold the data even if we no longer require it as you need it to establish, exercise, or defend legal claims.
Request Data Portability: Request the transfer of your personal data to you or to a third party. We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format.
Withdraw Consent: Withdraw consent at any time where we are relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent.

How to Exercise Your Rights

If you wish to exercise any of the rights set out above, please contact us by sending an email to stkflw@gardenpethome.com.

No Fee Usually Required

You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive. Alternatively, we could refuse to comply with your request in these specific circumstances.

What We May Need From You

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

Response Time

We try to respond to all legitimate requests within one month. Occasionally it could take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

Right to Lodge a Complaint

You have the right to make a complaint at any time to the competent data protection supervisory authority. In Croatia, this is the Croatian Personal Data Protection Agency (Agencija za zaštitu osobnih podataka – AZOP). We would, however, appreciate the chance to deal with your concerns before you approach the supervisory authority, so please contact us in the first instance.

10. Children’s Privacy

Our website and the gardening tools available in our online store are not intended for children under the age of 16. We do not knowingly collect, store, or process personal data from children under 16 years of age.

If we learn that we have collected personal information from a child under 16 without verifiable parental consent, we will take immediate steps to delete that information from our active databases and servers. If you believe that a child under 16 has provided personal data to us, please notify us immediately at stkflw@gardenpethome.com.

11. Third-Party Websites and Links

Our website may contain links to external third-party websites, plug-ins, features, and applications (such as social media integration buttons, payment processors, or external content platforms). Clicking on those links or enabling those connections may allow third parties to collect or share data about you.

We do not control these third-party websites and are not responsible for their privacy statements, rules, or actions. When you leave our online store, we highly encourage you to read the privacy policy of every website you visit to fully understand how they handle your information.

12. Updates and Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our operational procedures, technological advancements, business structure, or adjustments to applicable legal and regulatory frameworks.

When we make changes, we will update the “Effective Date” at the top of this page. If we make material changes to how we collect, handle, or disclose your personal data, we will provide more prominent notice, such as displaying a notice on our homepage or sending an email directly to registered account holders.

We encourage you to review this Privacy Policy periodically to stay informed about how GardenPetHome d.o.o. is protecting your personal information. Your continued use of the website and our online store after any changes signify your acceptance of the updated policy terms.

13. Contacting Us

For further explanations, data access requests, or general inquiries regarding your privacy protection, feel free to contact us through any of the channels provided below:

GardenPetHome d.o.o.
Email: stkflw@gardenpethome.com
Mailing Address: Ulica Vjenceslava Richtera 6, 10000 Zagreb, Croatia
Phone Number: +385 (1) 663 6711