Free delivery in Romania on orders over 500 RON · Showroom at Str. Johannes Kepler 69, Bucharest
RO

Privacy policy

Last updated: 2026-10-19

Here we explain, in plain words, what personal data we use when you buy from melindadecor.art, write to us or subscribe to our newsletter, why we use it, how long we keep it and what rights you have. This policy follows Regulation (EU) 2016/679 on data protection (GDPR).

1. Who is responsible for your data

The data controller is Business Growth Solutions SRL, which runs the Melinda Decor shop:

  • Registered office: Bulevardul Decebal, Bl. P, sc. A, ap. 6, Deva, Hunedoara County, postcode 330020, Romania

  • Branch office: Str. Johannes Kepler nr. 69, Sector 2, Bucharest, postcode 020346, Romania

  • Trade Register no.: J20/283/2022 · Tax ID: RO45690989

  • Email for any question about your data: [email protected] · Phone: +40 723 202 639

2. What data we use and why

When you order. Your name, delivery and billing address, phone number and email, the products ordered and the payment. We use them to deliver your order, issue the invoice and keep you updated about delivery. The legal basis is performance of the contract (Art. 6(1)(b) GDPR) and our legal tax and accounting obligations (Art. 6(1)(c)).

When you pay by card. The payment is processed by Stripe. We don't see or store your card details.

When you withdraw from the contract or ask for a refund. The data in the withdrawal form and, if you paid cash on delivery, the IBAN we refund you to. The legal basis is our legal obligation to process the withdrawal and refund you (Art. 6(1)(c)).

When you write to us. Your name, email, phone number and message, so we can reply. The legal basis is your request before a possible order and our legitimate interest in replying to the people who write to us (Art. 6(1)(b) and (f)).

When you subscribe to the newsletter. Your email address, only if you have ticked the consent box. The legal basis is your consent (Art. 6(1)(a)), which you can withdraw at any time through the unsubscribe link in any email or by writing to us.

When you browse the site. Technical information and, only with your consent, data about how you use the site. The details are in the Cookie policy.

We don't make automated decisions with legal effects on you, and we don't sell your data to anyone.

3. Who we share it with

Your data only goes to the providers we need for the shop to work, and only as far as necessary:

  • HighLevel, Inc. (the GoHighLevel / LeadConnector platform), which runs our site, cart, forms and emails;

  • Stripe, for card payments;

  • the courier company that delivers your parcel;

  • our invoicing, email and accounting providers;

  • public authorities, when the law requires us to.

Some providers, such as HighLevel and Stripe, also process data outside the European Economic Area, including in the United States. In these cases the transfer is based on the safeguards provided by the GDPR, such as the standard contractual clauses approved by the European Commission or the EU-US Data Privacy Framework.

4. How long we keep it

  • Order data and invoices: for the period required by tax and accounting law.

  • Messages sent through forms: at most 3 years from our last conversation, if they didn't lead to an order.

  • Your newsletter email: until you unsubscribe.

  • Withdrawal requests and proof of refunds: as long as needed to show that we respected your rights, usually 3 years.

5. Your rights

You have the right to ask for access to your data, to correct it, to have it erased, to restrict its processing, to receive it in a portable format, to object to processing based on our legitimate interest and to withdraw your consent at any time, without affecting what was done before. Write to us at [email protected] and we'll reply within one month.

If you're not satisfied, you can complain to the Romanian data protection authority, ANSPDCP, B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, Bucharest, www.dataprotection.ro, or to the data protection authority in the country where you live.

6. Keeping your data safe

The site uses an encrypted connection (HTTPS), and only the people on our team who really need your data can access it.

7. Changes

When we change something important in this policy, we update the date above and, where appropriate, let you know.