Privacy policy
As part of our business activities, we collect and process personal data provided to us by clients. Since the protection of your privacy is our priority, we have adopted the following privacy rules.
Ormadea Lab d.o.o. adheres to the following principles in order to protect your privacy:
• We do not collect more information than necessary;
• We do not use your data for purposes that are not stated;
• We do not retain your data if it is no longer necessary;
• We never sell, lend, distribute, or publicly disclose your personal data;
• We do not forward your data to third parties;
• We do not use any automated processing or decision-making, nor profiling;
• We do not transfer your personal data to a third country or international organization;
• We also ensure that your data is securely stored.
Ormadea Lab d.o.o. collects only limited amounts of information about you that are necessary in order to respond to your request, and we hope to establish a long-term and trustworthy business relationship.
We at Ormadea Lab d.o.o. have created privacy rules aimed at helping you understand which data we collect, for what purpose we use it, and how you can exercise your rights.
It is important to read our privacy rules, and we hope you will take the time and attention to do so.
Data on the Controller of Your Personal Data
The controller of this website and your personal data is Ormadea Lab d.o.o., Martićeva ulica 10, 10000 Zagreb.
What is the purpose and legal basis for collecting your data?
Taking the most appropriate actions at your request prior to entering into any business relationship, based on the company’s business activities and its legitimate interest.
Personal data we collect or process
When you contact us via our web contact form or directly via our email address. The information you enter (personal information such as your name, email address, phone number) or send via direct email message will be processed and stored so that we can contact you and respond to your request. If you are under the age of 16, you must provide the consent of a parent or legal guardian before providing personal data. By completing contact forms on our website or contacting us directly via email, you guarantee that the information you have provided is accurate and that you fully agree with the provisions of our privacy rules and the conditions stated therein.
Sources of personal data
We may collect personal data from the following sources:
Directly from you, including when you create an account, visit or use the Services, communicate with us, or otherwise provide your personal data;
Automatically through the Services, including data from your device when you use our products or services, visit our websites, and through the use of cookies and similar technologies;
From our service providers, including cases where we engage them to enable specific technology and when they collect or process your personal data on our behalf;
From our partners or other third parties.
How we use your personal data
We collect information about you so that we can contact you and respond to your request. We collect and use your personal data as necessary for the purpose of establishing our business relationship, as well as during the validity of our contractual relationship. During the duration of the contractual relationship, Ormadea Lab d.o.o. will send you notifications about new products and services that we believe may be of interest to you, if you have given consent for this when contacting our company via the web form. You may withdraw the consent you have given for this purpose at any time, in which case we will cease such processing.
How long will your personal data be stored?
As long as we have open communication for the purpose of establishing a joint business cooperation, as well as for the duration of our contractual relationship.
Relationship with Shopify
The Services are hosted on Shopify, which collects and processes your personal data relating to access to and use of the Services in order to provide and improve the Services. Information you submit to the Services will be transferred to and shared with Shopify, as well as with third parties that may be located in countries outside your location, in order to provide and improve the Services. In addition, in order to protect, expand, and improve our business, we use certain enhanced Shopify features that involve data and information obtained from your interactions with our Store, together with other merchants and with Shopify. In such circumstances, Shopify is responsible for processing your personal data, including responding to your requests to exercise your rights regarding the use of your personal data for these purposes. To learn more about how Shopify uses your personal data and what rights you have, you can visit the Shopify Consumer Privacy Policy. Depending on where you live, you can exercise certain rights regarding your personal data here: Link to the Shopify Privacy Portal.
Third-party websites and links
The Services may provide links to websites or other online platforms operated by third parties. If you follow links to sites that are not affiliated with us or under our control, you should review their privacy and security policies and other terms and conditions. We do not guarantee and are not responsible for the privacy or security of such sites, including the accuracy, completeness, or reliability of information found on those sites. Information you provide in public or semi-public places, including information you share on third-party social media platforms, may be visible to other users of the Services and/or users of those third-party platforms without limitation regarding their use by us or third parties. Our inclusion of such links does not in itself imply any endorsement of the content on such platforms or their owners or operators, except as disclosed in the Services.
Security and storage of your data
Please note that no security measure is perfect or impenetrable, and we cannot guarantee “complete security.” In addition, any information you send to us may not be secure during transmission. We recommend that you do not use insecure channels to send sensitive or confidential information.
The retention period of your personal data depends on various factors, such as the need to maintain your account, provide the Services, comply with legal obligations, resolve disputes, or enforce other applicable agreements and policies.
Your rights and choices
Depending on where you live, you may have some or all of the rights listed below regarding your personal data. However, these rights are not absolute, may apply only in certain circumstances, and in certain cases we may refuse your request in accordance with the law.
- Right of access / information. You may have the right to request access to the personal data we hold about you.
- Right to erasure. You may have the right to request deletion of the personal data we hold about you.
- Right to rectification. You may have the right to request correction of inaccurate personal data we hold about you.
- Right to portability. You may have the right to receive a copy of the personal data we hold about you and request that we transfer it to a third party, in certain circumstances and subject to certain exceptions.
- Managing communication preferences. We may send you promotional emails, and you may unsubscribe from receiving them at any time using the unsubscribe option displayed in our emails. If you opt out, we may still send you non-promotional emails, such as those regarding your account or orders you have placed.
If you reside in the United Kingdom or the European Economic Area (EEA), and subject to exceptions and limitations prescribed by local legislation, you may exercise the following rights in addition to the above:
Objection to processing and restriction of processing: You may have the right to request that we stop or restrict the processing of personal data for certain purposes.
Withdrawal of consent: In cases where we rely on consent to process your personal data, you have the right to withdraw such consent. If you withdraw your consent, this will not affect the lawfulness of any processing based on your consent prior to its withdrawal.
You may exercise any of these rights where indicated in the Services or by contacting us using the contact details provided below. For more information on how Shopify uses your personal data and all of your rights, including rights related to data processed by Shopify, you may visit https://privacy.shopify.com/en.
We will not discriminate against you for exercising any of these rights. We may need to verify your identity before we can process your requests, as permitted or required by applicable law. In accordance with applicable laws, you may appoint an authorized agent to submit requests on your behalf. Before accepting such a request from an authorized agent, we will require proof that you have authorized them to act on your behalf, and we may also need you to directly verify your identity with us. We will respond to your request in a timely manner, as required by applicable law.
Google Analytics
When collecting personal data, certain data may be stored by the Google Analytics platform.
For more information about the Google Analytics privacy policy, you can refer to the following link: https://policies.google.com/privacy?hl=en.
Information security
We have implemented security measures to protect personal data that you share with us. Your personal data is protected against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access to personal data that is transmitted, stored, or otherwise processed.
Cookies
In order to facilitate browsing of our website, our web server uses cookies. Cookies cannot be used to run programs or deliver viruses to your computer. Browsing our website is also possible without the use of cookies, if your internet browser is set accordingly.
Your consent
By using this website, you give consent to this privacy policy, i.e., you give explicit consent to Ormadea Lab d.o.o. to collect and further process your personal data, as well as any other data it becomes aware of through the provision of its services, in accordance with legal regulations and in line with the purpose defined in these rules. You also confirm that you are familiar with all essential information about Ormadea Lab d.o.o. and the services it provides.
Complaints
At any time, you may submit a complaint directly to the competent supervisory authority: the Croatian Personal Data Protection Agency (AZOP), Martićeva 14, Zagreb, contact: +385 (0)1 4609 999, azop@azop.hr, www.azop.hr.
International transfers
Please note that we may transfer, store, and process your personal data outside the country in which you live.
If we transfer your personal data outside the European Economic Area or the United Kingdom, we will rely on recognized transfer mechanisms such as the European Commission’s Standard Contractual Clauses or any equivalent agreements issued by the competent authority of the United Kingdom, as applicable, unless the data is transferred to a country that has been determined to provide an adequate level of protection.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time, including to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will publish the revised Privacy Policy on this website, update the “Last Updated” date, and notify you in accordance with applicable law.
Contact
If you have questions about our privacy practices or this Privacy Policy, or if you wish to exercise any of your rights, please contact us by phone or send us an email at info@brightpdrn.eu. For the purposes of applicable data protection laws, we are the controller of your personal data.
Last updated: Mai 18, 2026
