Privacy policy

 

Date of last update: March 22, 2026

Istorii cu Cașcaval operates this online store and the related website, including all information, features, tools, products, and services made available to users, in order to provide a complete shopping experience tailored to customers’ needs. The platform is powered by Shopify.

This Privacy Policy describes how we collect, use, store, and disclose personal data when you visit the site, use our services, place an order, or otherwise interact with us.

By accessing and using the site, you confirm that you have read and understood this Privacy Policy and that you agree to the practices described herein.

The information below is provided in accordance with Law No. 133 of 08.07.2011 on the protection of personal data.

 

1. What personal data we collect

 

By “personal data” we mean any information that identifies you directly or indirectly or that may reasonably be associated with your identity.

Depending on how you interact with the site and our services, we may collect or process the following categories of data:

contact data, such as your first name, last name, delivery address, billing address, phone number, and email address;
financial and payment information, including transaction details, payment method, and payment confirmation;
account information, including username, password, preferences, and settings;
information regarding orders and transactions, including products viewed, added to cart, purchased, returned, or canceled;
information provided in communications with us, including support requests or feedback;
information about your device, browser, network connection, IP address, and other technical identifiers;
information about your use of the site, including how and when you interact with our services.

 

2. Sources from which we collect data

 

We may collect personal data from the following sources:

directly from you, when you create an account, place an order, complete forms, or contact us;
automatically, through the use of the site, via cookies and similar technologies;
from service providers who process data on our behalf;
from business partners or other third parties, to the extent permitted by law.

 

3. Purposes for which we use personal data

 

Your personal data may be used for the following purposes:

to provide, administer, and improve our services;
to process orders, payments, deliveries, returns, and exchanges;
to manage the user account;
to personalize the shopping experience;
to communicate with you regarding orders, requests, or your account;
to send commercial and promotional communications where permitted by law;
to prevent fraud, protect the site, and maintain the security of the services;
to comply with legal obligations and resolve possible disputes.

 

4. Legal basis for processing

 

Data processing is carried out, depending on the circumstances, on the basis of one or more of the following grounds:

performance of the contract concluded with you;
compliance with our legal obligations;
the company’s legitimate interest in administering and securing its services;
your consent, where required by law.

 

5. How we disclose personal data

 

In certain situations, we may disclose your personal data to third parties strictly on lawful grounds and for legitimate purposes, including:

to Shopify and other service providers who assist us in operating the online store;
to payment processors, delivery services, IT providers, cloud storage providers, or customer support services;
to marketing and advertising partners, within the limits permitted by law;
to public authorities or competent institutions where there is a legal obligation;
in the context of reorganizations, mergers, or other business operations, if necessary.

 

6. Relationship with Shopify

 

Our services are hosted and technically supported by Shopify, which may collect and process personal data in connection with the use of the online store for the provision and improvement of services.

Data transmitted through the site may be disclosed to Shopify and to partners or providers involved in the technical functioning of the platform, including outside the user’s country of residence.

In certain situations, Shopify may act as an independent controller for specific processing activities. For more information on how Shopify processes data, users may consult Shopify’s privacy policy and its privacy portal.

 

7. Third-party websites and services

 

The site may contain links to pages or platforms operated by third parties. We do not control and do not assume responsibility for the privacy policies, content, or practices of such third parties.

Access to such sites is at your own risk, and users are encouraged to review their terms and policies before providing personal data.

 

8. Children’s data

 

Our services are not intended for children, and we do not knowingly collect personal data from minors under the age of majority applicable in the relevant jurisdiction.

If a parent or guardian believes that a minor has provided us with personal data, they may contact us to request its deletion.

 

9. Data security and retention

 

We apply reasonable technical and organizational measures to protect personal data against unauthorized access, loss, misuse, or unauthorized disclosure.

However, no method of transmission or electronic storage can guarantee absolute security.

We retain personal data only for the period necessary to fulfill the purposes for which it was collected, to comply with legal obligations, to resolve disputes, and to enforce our internal policies.

 

10. Your rights

 

Depending on the applicable legislation and where you reside, you may benefit from the following rights:

the right of access to the personal data being processed;
the right to rectify inaccurate or incomplete data;
the right to erasure of data, under the conditions provided by law;
the right to restriction of processing;
the right to object to certain types of processing;
the right to data portability;
the right to withdraw consent where processing is based on consent;
the right to opt out of certain marketing communications.

The exercise of these rights may be subject to legal conditions and may require verification of the requester’s identity.

 

11. Marketing communications and preferences

 

We may send you promotional communications by email or other means, to the extent permitted by law.

You may withdraw your consent to such communications at any time by using the unsubscribe option in the messages received or by contacting us directly.

Even if you choose not to receive promotional messages, we may continue to send you communications necessary for the administration of your account or orders.

 

12. International data transfers

 

Your data may be transferred, stored, or processed outside the country in which you reside, including outside the European Economic Area or the United Kingdom, where this is necessary for the provision of services.

In such cases, we will use legally recognized mechanisms to protect the transferred data in accordance with applicable legislation.

 

13. Complaints

 

If you have questions, concerns, or complaints regarding how we process personal data, you may contact us using the contact details provided below.

To the extent provided by law, you also have the right to lodge a complaint with the competent personal data protection authority.

 

14. Changes to the privacy policy

 

We reserve the right to update this Privacy Policy periodically to reflect legislative, technical, or operational changes.

The updated version will be published on the site together with the date of the latest update.

 

15. Contact

 

For any questions related to this Privacy Policy or to exercise your rights, you may contact us at:

Istorii cu Cașcaval SRL
Email: info@icascaval.md
Address: Strada Bogdan Voievod 1, Chișinău, 2068, Republica Moldova