Privacy Policy

Last updated: May 15, 2026

This Privacy Policy explains how Pandora Prod SRL ("Company", "we", "our", or "us") collects, uses, and protects your personal data when you visit or make a purchase from www.pandora-factory.com (the "Website").

We are committed to protecting your privacy in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable Romanian data protection laws.

1. Data Controller

Company: Pandora Prod SRL
Address: 73, Cuza Voda Street, Focsani, Vrancea, 620034
Country: Romania
Email: support@pandora-factory.com

2. Personal Data We Collect

a) Information you provide directly:
- Full name
- Billing address
- Shipping address
- Email address
- Phone number
- Account login details (if you create an account)
- Messages sent to customer support

b) Order & payment information:
- Purchased products
- Order value
- Payment method
- Transaction identifiers

We do not store your full card number. Payments are securely processed by our payment providers.

c) Automatically collected data:
- IP address
- Browser type
- Device type
- Time zone
- Pages visited
- Referring website
- Cookies and similar technologies

3. Legal Basis for Processing

We process personal data only when legally permitted:

- Processing and delivering orders: Contract
- Customer support: Contract / Legitimate interest
- Fraud prevention: Legitimate interest
- Accounting & tax obligations: Legal obligation
- Marketing emails: Consent
- Website analytics: Consent (cookies)

4. How We Use Personal Data

We use your data to process orders, ship products, provide customer support, handle returns and refunds, prevent fraud, comply with legal obligations, and send newsletters if you opt-in.

We never sell your personal data.

5. Sharing Your Data

We share data only with trusted partners such as payment processors, courier companies, hosting providers, email service providers, and accounting services. All partners operate under GDPR-compliant agreements.

6. International Transfers

Personal data may be transferred outside the European Union or the United Kingdom, including to the United States (for example, in connection with Shopify, Google, or Meta services).

Where such transfers occur, appropriate safeguards are implemented, including:

• EU Standard Contractual Clauses (SCCs)
• UK International Data Transfer Addendum
• EU–US Data Privacy Framework, where applicable

We ensure that transferred data benefits from an adequate level of protection in accordance with applicable law.

7. Data Retention

- Orders & invoices: 10 years
- Customer account: until deleted
- Customer support communications: up to 3 years
- Marketing subscriptions: until you unsubscribe
- Cookies: as defined in the Cookie Policy
- Technical logs (including IP addresses): up to 12 months
- Fraud prevention records: retained for as long as necessary to protect legitimate interests and comply with legal obligations
- Analytics data: retained in anonymized or aggregated form where possible

8. Your GDPR Rights

You have the right to access, rectify, erase, restrict processing, object to processing, request data portability, and withdraw consent at any time. Contact support@pandora-factory.com to exercise your rights. We respond within 30 days.

You also have the right to object at any time to the processing of your personal data for direct marketing purposes, including profiling related to such marketing.

9. Complaints

You may lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP): https://www.dataprotection.ro

10. Cookies

Our website uses cookies to operate properly, remember your cart, analyze traffic, and provide advertising with your consent. You can manage cookies via your browser or cookie banner.

11. Data Security

We implement security measures such as SSL encryption, secure payment processing, restricted staff access, and secure hosting. However, no online system is completely secure.

12. Children's Privacy

Our website is not intended for individuals under 16 years old. We do not knowingly collect personal data from children.

13. Changes to This Policy

We may update this Privacy Policy periodically. The latest version will always be published with a new revision date.

14. Contact Information

Company: Pandora Prod SRL
Address: 73, Cuza Voda Street, Focsani, Vrancea, 620034
Email: support@pandora-factory.com