Privacy Policy

1. Who we are

Sion creator is operated by SION CREATOR S.R.L.

Sion creator is a trading name of SION CREATOR S.R.L. Registered address: Str Scinteii nr 10, 470180, Livada, Romania. Company registration number: RO40745390. VAT / tax identification number: RO40745390.

Our online shop runs on karqa, a platform operated by Longauer Zsolt Întreprindere Individuală (Romania). karqa hosts the Shop and processes your personal data on our behalf, only on our instructions and under a data processing agreement; it does not use your data for its own purposes.

• Email: sioncreator77@gmail.com
• Phone: 0770385460
• Post: Str Scinteii nr 10, 470180, Livada, Romania

2. The personal data we collect

Depending on how you use the Shop, we may collect:

• Identity and contact data — your name, email address, telephone number and billing/delivery address.
• Order and transaction data — the products you buy, order value, order history and correspondence about your orders.
• Payment data — payment is handled by our payment processor (Stripe). We do not receive or store your full card number; we receive a confirmation of payment and limited details such as the card type and the last four digits.
• Order access — when you ask to see your orders, we email you a secure link that expires. We do not create an account for you or ask you for a password.
• Communications — messages you send us and our replies.
• Technical data — your IP address and device and browser information, which our servers receive when you use the Shop.
• Usage data — if you accept analytics cookies: the pages you visit and what you do in the Shop, the page that brought you here, your device, browser and screen, and your approximate location.
• Marketing preferences — your choices about receiving marketing from us.
• Reviews — the rating and text you write, and the name you choose to show with them, which are published on the Shop.

3. How and why we use your data

We use your personal data on the following legal bases under Article 6 GDPR:

• Performance of a contract — to process and deliver your orders, take payment, provide customer support and handle returns and refunds.
• Legal obligation — to comply with tax, accounting, consumer-protection and other legal requirements.
• Legitimate interests — to operate, secure and improve the Shop, prevent fraud and misuse, and keep records, provided these interests are not overridden by your rights.
• Consent — to send marketing communications (where required). You can withdraw consent at any time.
• Consent — to measure how the Shop is used with analytics cookies, if you accept them. You can withdraw consent at any time via the “Cookie preferences” link in the footer.
• Reviews — once your order is completed, we email you once to ask whether you would like to review what you bought (legitimate interests). You can ask us not to.

We need your name, contact details and address to take, deliver and invoice your order; without them we cannot sell to you. Everything else is optional. We do not make decisions about you based solely on automated processing.

4. Cookies

We use the cookies and browser storage the Shop needs to work — for example, to remember your cart. They need no consent.

With your consent, we also use Google Analytics cookies (_ga, and _ga_ followed by an identifier) to understand how the Shop is used so we can improve it. They last 13 months and are not extended by later visits. Your choice itself is remembered in a cookie of its own.

You can accept or reject non-essential cookies when you first visit, and change your choice at any time via the “Cookie preferences” link in the footer. Analytics only load after you consent; if you withdraw your consent, we switch them off and delete their cookies straight away.

5. Who we share your data with

We share personal data only as needed to run the Shop, with providers acting on our instructions under appropriate data-processing terms:

• Payment processing — Stripe, to take and verify payments.
• Order fulfilment and delivery — shipping and logistics partners, to deliver your orders.
• Email and notifications — Resend, which sends our order confirmations and service messages.
• Analytics — Google (Google Analytics), only if you accept analytics cookies: Google receives the usage data described above and, if you order, the order's number, value and items, which are used only to show us how the Shop is used. Google keeps these details for 2 months. How Google uses this information: https://policies.google.com/technologies/partner-sites
• Company checks — if you buy for a business, we check its tax number with the Romanian tax authority (ANAF) or, for a VAT number from another EU country, with the European Commission's VIES system, to invoice it correctly.
• Videos — if a page shows a YouTube video, nothing is loaded from YouTube until you press play; YouTube (Google) then receives your IP address and may store data in your browser.
• Our e-commerce platform — karqa, which hosts the Shop and processes its data for us, and karqa's providers: DigitalOcean (hosting and storage) and Vercel (serving the Shop's pages), both in Frankfurt, Germany.
• Professional advisers and authorities — accountants, legal advisers, and public authorities where we are required to disclose by law.

We do not sell your personal data.

6. International transfers

Your data is stored in the European Union, in Frankfurt, Germany. Some of our providers are based in the United States — Stripe, DigitalOcean, Vercel, Resend and Google — and may access it from there. Each of them is certified under the EU–US Data Privacy Framework, which the European Commission has found to ensure adequate protection, and their contracts also include the European Commission's Standard Contractual Clauses.

7. How long we keep your data

We keep personal data only for as long as necessary for the purposes described above. Order details that identify you are anonymised after a retention period we set, which is never shorter than 24 months from the order. Invoices and accounting records are kept for as long as tax and accounting law requires. Marketing data is kept until you withdraw consent or object. When data is no longer needed, we delete or anonymise it.

If you accept analytics cookies, Google keeps the details of your visits for 2 months; the statistics built from them do not identify you.

8. Your rights

Under the GDPR, you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased in certain circumstances;
• restrict certain processing, or object to processing based on our legitimate interests;
• object at any time to the use of your data for direct marketing;
• receive your data in a portable format;
• withdraw consent at any time, without affecting processing carried out before withdrawal.

To exercise any of these rights, contact us at sioncreator77@gmail.com.

You also have the right to lodge a complaint with the Romanian data protection authority, the National Supervisory Authority for Personal Data Processing (ANSPDCP, www.dataprotection.ro), or with the authority of the EU country where you live or work.

9. How we protect your data

We use appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or misuse. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Children

The Shop is not directed at children, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can remove it.

11. Changes to this policy

We may update this Privacy Policy from time to time. The date at the top of this page shows when it was last revised. Significant changes will be made clear on the Shop.

12. Contact us

If you have any questions about this Privacy Policy or how we handle your personal data, contact us:

• Email: sioncreator77@gmail.com
• Phone: 0770385460
• Post: Str Scinteii nr 10, 470180, Livada, Romania