Privacy policy
Last updated: October 22, 2026
This policy explains what personal data we process when you shop at Frost Atelier. The data controller is C&C TECHNOLOGY SOLUTIONS SRL, Str. Popa Șapcă nr. 9, bl. P1, sc. A, ap. 1, Pitești, jud. Argeș, România, tax ID 55295073. You can contact us at +40 730 247 417.
What we collect
When you order: your name, shipping and billing address, email, phone number, the products ordered and payment details (not your card details, which only the payment processor handles).
When you write to us: your email address and your message.
Why, and on what legal basis
To process, ship and invoice your order and to handle returns and guarantee claims (performance of a contract, Art. 6(1)(b) GDPR).
To keep the accounting records required by law (legal obligation, Art. 6(1)(c) GDPR).
To prevent payment fraud (legitimate interest, Art. 6(1)(f) GDPR).
We do not send you newsletters or advertising without your separate consent.
Who we share it with
Shopify (the store and checkout platform), which processes data on our behalf.
The suppliers and warehouses that prepare and ship your order, including outside the EU (for example, China). We only share the name, address and phone number needed for delivery, because the order cannot be delivered otherwise (Art. 49(1)(b) GDPR).
The courier companies that deliver your parcel, and our accountant.
Our website hosting provider (Vercel).
We never sell your data.
How long we keep it
Order data, for as long as needed for delivery, returns and the guarantee. Accounting documents (invoices), for the period required by accounting law, up to 10 years.
Your rights
You can ask to access, correct or delete your data, restrict its processing, receive it in a portable format, and object to processing based on legitimate interest. Contact us at +40 730 247 417.
You can lodge a complaint with the Romanian data protection authority (ANSPDCP, dataprotection.ro) or with the authority in your own country.