Privacy Policy

1. Who is responsible

The data controller is:

POLARDENT d.o.o.
Kidričeva cesta 96
4220 Škofja Loka, Slovenia
info@polardent.store

Data protection contact: info@polardent.store.

2. What data we collect

• Account data: name, business name, email, password (hashed).
• Professional & billing data: VAT identification number, business address, professional status.
• Order data: products ordered, prices, invoices, order history.
• Delivery data: shipping address, contact details for delivery.
• Payment data: processed by our payment provider; we receive confirmation and limited transaction data, not full card numbers.
• Communications: messages you send us and our replies.
• Technical data: IP address, session/cart identifiers and similar data needed to run the site securely (see section 8).

3. Purposes & legal bases

• Providing the store, processing orders and delivery — performance of a contract (Art. 6(1)(b) GDPR).
• Invoicing, VAT and tax record-keeping — compliance with a legal obligation (Art. 6(1)(c) GDPR).
• Account management and customer support — contract and our legitimate interest in serving customers (Art. 6(1)(b) and (f) GDPR).
• Security, fraud prevention and site operation — legitimate interest (Art. 6(1)(f) GDPR).
• Marketing emails, where sent, — your consent or, for existing customers, legitimate interest, with an opt-out in every message (Art. 6(1)(a)/(f) GDPR).

4. Who receives your data

We share personal data only with processors and partners who need it to deliver the service, under data-processing agreements:

• Our hosting and IT infrastructure provider, within the EU/EEA.
• Our payment service provider.
• Our supplier and shipping carriers, to fulfil and deliver orders.
• Our accountant / tax advisors, and authorities where legally required.

We do not sell your personal data.

5. International transfers

We aim to keep personal data within the EU/EEA. Where a processor transfers data outside the EEA, we ensure appropriate safeguards (such as an adequacy decision or Standard Contractual Clauses).

6. How long we keep data

We keep personal data only as long as necessary. Invoicing and accounting records are retained for the period required by Slovenian tax and accounting law. Account data is kept while your account is active and deleted or anonymised on request, subject to those legal retention obligations.

7. Your rights

Under the GDPR you have the right to:

• access your personal data and obtain a copy;
• rectify inaccurate data;
• erase data ("right to be forgotten"), subject to legal retention;
• restrict or object to processing based on legitimate interest;
• data portability;
• withdraw consent at any time, without affecting prior processing.

To exercise these rights, contact info@polardent.store. You also have the right to lodge a complaint with the Slovenian supervisory authority, the Information Commissioner (Informacijski pooblaščenec), www.ip-rs.si.

8. Cookies

We use only cookies and similar storage that are strictly necessary to run the site — for example to keep your session, shopping cart and security in place. These do not require consent. Fonts are self-hosted and we do not load third-party CDNs or trackers, so no data is shared with third parties for this purpose. If we introduce any non-essential (e.g. analytics or marketing) cookies, we will ask for your consent first.

9. Security

We apply appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access, including encryption in transit, access controls and hashed passwords.

10. Changes

We may update this policy to reflect changes in our processing or the law. The "last updated" date above shows the current version; material changes will be communicated where required.

11. Contact

Questions about this policy or your data: info@polardent.store, or write to POLARDENT d.o.o. at the address in section 1.