Privacy policy

This policy explains what personal data FitPal Store collects when you visit fitpal.store or buy from it, why we use it, and what rights you have. We process personal data in accordance with the General Data Protection Regulation (GDPR) and Slovenian data protection law.

1. Who is responsible

The controller of your personal data is EV Projects, Projektiranje, Egon Vrbančič s.p., the company behind FitPal Store. Our full registered details are set out in section 1 of our terms of service. For anything to do with your data, write to hello@fitpal.store and a person will answer within 1–2 business days.

2. What we collect

When you buy something: your name, email address, billing address and country, the items you ordered, the amount paid and the time of the order. Payment card details are handled by our payment providers and never reach us.

When you subscribe to our emails: your email address, and the date and source of your consent.

When you write to us: your email address and whatever you choose to tell us in the message.

When you browse the site: your IP address, device and browser type, the pages you visit and how you arrived, collected through cookies and similar technologies.

3. Why we use it, and on what legal basis

To complete your order and deliver your files — performance of the contract between us. To answer your questions and handle complaints — performance of the contract and our legitimate interest in running the shop properly. To keep accounting records — our legal obligations under Slovenian tax law. To send you marketing emails — only with your consent, which you can withdraw at any time. To keep the shop secure and prevent fraud — our legitimate interest. To understand how the site is used — your consent, given through the cookie banner.

4. Who else sees it

We do not sell your personal data. We share it only with the service providers we need to run the shop: Shopify, which hosts the store and processes orders on our behalf; our payment providers, which process your payment; and the email service that sends your order confirmation and, if you subscribed, our newsletter. Each of them acts on our instructions and is bound to protect your data. We may also disclose data where the law requires it.

5. Transfers outside the EU

Some of our providers process data outside the European Economic Area. Where that happens, the transfer is covered by the European Commission's Standard Contractual Clauses or an adequacy decision.

6. How long we keep it

Order and invoice records are kept for as long as Slovenian tax law requires, which is currently ten years. Email addresses on our marketing list are kept until you unsubscribe. Messages you send us are kept for as long as needed to deal with the matter, and then deleted.

7. Your rights

You have the right to ask what data we hold about you and to receive a copy of it, to have inaccurate data corrected, to have your data deleted, to restrict or object to how we use it, and to receive it in a portable form. Where we rely on your consent, you may withdraw it at any time, which does not affect anything done before the withdrawal. Every marketing email also carries an unsubscribe link.

To exercise any of these rights, write to hello@fitpal.store. We answer within one month. We may need to confirm your identity first, so that nobody else can ask for your data.

8. Cookies

The shop uses cookies that are necessary to make it work — keeping your cart, remembering your choices and keeping the checkout secure. With your consent we also use cookies that tell us how the site is used, so we can improve it. You can change your choice at any time through the cookie settings on the site, and you can block or delete cookies in your browser; the shop will still work, though some things may be less convenient.

9. Children

This shop is not intended for children, and we do not knowingly collect data about anyone under 16. If you believe a child has given us their data, write to us and we will delete it.

10. Complaints

If you are not satisfied with how we have handled your data, please tell us first and we will try to put it right. You also have the right to complain to the Slovenian Information Commissioner (Informacijski pooblaščenec) or to the supervisory authority in the country where you live.