Home / Privacy Policy

Privacy Policy

Last updated: January 2026

Violet Tear ("I", "me", "my") is a sole-trader vintage clothing store operated from Romania. This policy explains what personal data I collect when you use violettear.com, how I use it, and your rights under the General Data Protection Regulation (GDPR).

What I Collect

  • Order data — email address, name, shipping address, phone number. Collected only when you place an order.
  • Browsing data — page views and cart activity stored as anonymous counters. IP addresses are hashed (SHA-256, one-way) immediately and the original address is never stored.
  • Session cookie — a random token stored in your browser to maintain your shopping cart across page loads. Expires after 7 days.

How I Use Your Data

  • Process, fulfil, and ship your order
  • Send order confirmation and shipping notifications
  • Understand which products are popular (via anonymised analytics)

Legal Basis

Processing your order data is necessary for the performance of our contract (GDPR Article 6(1)(b)). Anonymous analytics are based on my legitimate interest in improving the store (Article 6(1)(f)).

Data Sharing

I do not sell or share your personal data with third parties for marketing. Order data may be shared with shipping carriers solely to deliver your parcel. If Stripe is used for payment, Stripe processes card data under their own privacy policy — I never see your card number.

Cookies

I use a single first-party session cookie (session_id) to keep your cart active, and a CSRF cookie (csrf_token) for security. No third-party tracking or advertising cookies are used.

Retention

Order data is retained for 5 years for accounting and legal purposes. Session data is automatically deleted after 7 days of inactivity. Anonymous analytics events are retained indefinitely in aggregated form.

Your Rights (GDPR)

You have the right to access, correct, delete, or export your personal data, and to object to or restrict its processing. To exercise any of these rights, email me at [email protected]. I will respond within 30 days.

Contact

Data controller: Violet Tear, Romania.
Email: [email protected]