Privacy Policy

Privacy Policy

Last updated: [14th November 2025]

[Mini Elf] ("[Mini Elf]", "we", "us", "our") operates this website. This Privacy Policy explains what personal information we collect, how we use it, and your rights over it.

Data controller: [Mini Elf],
Contact: info@minielfco.com

1. Information we collect

Information you give us

  • Name, email, phone number, and shipping/billing address when you place an order
  • Messages you send us through email or our contact form
  • Your email address if you subscribe to our newsletter

Payment information
Payments are handled by our payment processors (e.g. Shopify Payments, PayPal). We do not see or store your full card details.

Information collected automatically

  • Device and browser information, IP address, and approximate location
  • Pages viewed, products clicked, items added to cart, and purchases
  • How you arrived at our site (e.g. from an ad or a search engine)

This is collected using cookies, pixels, and similar technologies (see Section 4).

2. How we use your information

  • To fulfill your order: processing payment, shipping, sending confirmations and tracking updates
  • To provide customer support: answering questions, handling refunds and returns
  • To prevent fraud: checking orders for suspicious activity
  • To improve our store: understanding how visitors use our website
  • To market to you: showing you relevant ads and, if you subscribed, sending emails (you can unsubscribe anytime)

Legal basis (GDPR): We process your data to perform our contract with you (fulfilling orders), on the basis of our legitimate interests (fraud prevention, improving our store), to comply with legal obligations (tax and accounting records), and with your consent (marketing cookies and emails).

3. Who we share your information with

We do not sell your personal information for money. We share it only with service providers that help us run our business:

  • Shopify: our e-commerce platform, which hosts our store and processes orders
  • Payment processors: to handle payments securely
  • Fulfillment and shipping partners: to produce, pack, and deliver your order (your name, address, and phone number)
  • Meta (Facebook & Instagram): for advertising and measurement (see Section 4)
  • [Email marketing provider, e.g. Klaviyo]: to send newsletters if you subscribed
  • [Any other tools: TikTok, Google Analytics, review apps]
  • Authorities: if required by law

4. Cookies, pixels, and tracking

We use cookies and similar technologies to make our store work, remember your cart, and measure our ads.

Meta Pixel and Conversions API: We use the Meta Pixel on our website and Meta's Conversions API on our server. These send Meta information about actions you take on our site (such as viewing a product, adding to cart, or purchasing), along with information such as your IP address, browser details, and hashed (encrypted) contact details like email or phone number. Meta uses this to measure the performance of our ads and to show you relevant ads. You can learn more and control your ad preferences in your Facebook or Instagram Ad Settings.

Managing cookies: You can control or delete cookies through your browser settings. Blocking some cookies may affect how our store works. [If you use a cookie consent banner: You can change your choices at any time via the cookie settings link at the bottom of our website.]

5. International data transfers

We are based in Slovenia (EU), and our service providers may process data in other countries, including the United States. Where data is transferred outside the EU, we rely on appropriate safeguards such as the EU Standard Contractual Clauses or adequacy decisions.

6. How long we keep your information

  • Order information: as long as required for tax and accounting purposes (typically up to [10] years under Slovenian law)
  • Customer support messages: up to [2] years
  • Marketing data: until you unsubscribe or withdraw consent

7. Your rights

Depending on where you live, you may have the right to:

  • Access the personal information we hold about you
  • Correct inaccurate information
  • Delete your information
  • Object to or restrict how we use it
  • Receive a copy of your data in a portable format
  • Withdraw consent at any time (for example, unsubscribe from emails)
  • Lodge a complaint with a data protection authority (in Slovenia, the Information Commissioner of the Republic of Slovenia)

California residents (CCPA/CPRA): You have the right to know what personal information we collect and share, to request deletion, to correct it, and to opt out of the "sharing" of your personal information for cross-context behavioral advertising. To opt out or exercise your rights, email us at info@minielfco.com. We will not discriminate against you for exercising these rights.

Canadian residents: You have the right to access and correct your personal information under PIPEDA.

Australian residents: You may access and correct your personal information and complain to us or to the Office of the Australian Information Commissioner (OAIC).

To exercise any of these rights, email info@minielfco.com. We will respond within 30 days.

8. Security

We use reasonable technical and organizational measures to protect your information. However, no method of transmission over the internet is 100% secure.

9. Children

Our store is not directed at children under 16, and we do not knowingly collect their personal information.

10. Changes to this policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date.

11. Contact us

Questions about this policy or your data? Email info@minielfco.com.