Privacy Policy

The controller of your personal data is «[Denumire PFA]» (trading as “FamousWave”), «[CUI]», «[Adresă completă]», Romania, European Union. For any question about your data, write to «[email@exemplu.ro]».

• order data: the package you bought, the amount and currency, the order number, the email you used at checkout and, if you provide it, your name and phone number;
• the target you give us: an Instagram or TikTok @username, or the link to a post, Reel or video — this is public information you choose to share so we can deliver;
• delivery data: what was delivered, when, and any refill request;
• technical data: IP address and browser type, used for security, abuse prevention and rate limiting;
• analytics and advertising data (only with your consent): how you reached the site and whether an ad led to an order.

• providing the service and performing the contract with you — Article 6(1)(b) GDPR / UK GDPR;
• legal, tax and accounting obligations, including keeping order records — Article 6(1)(c);
• security, abuse prevention and rate limiting — legitimate interest, Article 6(1)(f);
• measuring advertising (TikTok Pixel and TikTok Events API) — your consent only, Article 6(1)(a). You can withdraw it at any time from “Cookie preferences” in the footer.

We use providers acting as processors. They process data only on our instructions and under a data-processing agreement.

• Website hosting and delivery: Vercel;
• Checkout and payment: Shopify (Shopify Payments). We never see or store your card details;
• Order records and delivery queue: Upstash (Redis);
• Transactional email: Resend;
• Error monitoring: Sentry (technical data only);
• Delivery providers: the third-party services that perform the delivery receive only the public target you gave us (username or link) and the quantity — never your email or payment data;
• Advertising measurement (with consent): TikTok.

Some providers process data outside the European Economic Area (mainly in the United States). Transfers rely on the EU Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework.

If you are in the United Kingdom, your data is transferred to the EU under the UK adequacy regulations, and onward transfers follow the safeguards above.

Order data is kept for as long as the law requires us to keep accounting records (in Romania, generally 5 years from the end of the financial year), then deleted or anonymised. Technical logs are kept for a short period for security. Analytics data follows the retention of the tool you consented to.

You have the right of access, rectification, erasure, restriction, portability and objection, and the right to withdraw consent at any time without affecting processing done before withdrawal.

To exercise them, write to «[email@exemplu.ro]». You can also lodge a complaint with a supervisory authority: in the EU, the data protection authority of your country of residence (in Romania, ANSPDCP); in the United Kingdom, the Information Commissioner's Office (ICO).

Details about cookies and the advertising pixel are in the Cookie Policy. Nothing optional loads before you consent.