Privacy Policy

This policy covers the Produkte Natyrale online store and its Android and iOS apps. Agim Balla P.F is the retailer and personal data controller. For privacy questions or to exercise your rights, contact info@produktenatyrale.com. Produkte Natyrale store

Data we use

• Accounts and purchases. For your account, we use your first and last name, email address, any phone number you provide, and a protected password hash. For orders, we use contact and delivery information, items, order value, payment method and status, and tracking information where available. We use this information to manage accounts and carts, process and deliver orders, send confirmations, and assist you after purchase.
• Favourites, reviews and messages. We save the products you add to your favourites. If you submit a review, we process your rating, comment and the photos you select. Once approved, a review may appear in the store alongside the author’s display name. We use the information you send through contact forms to respond. If you subscribe to the newsletter, we use your email to send subscription communications. You can contact our privacy email address to unsubscribe.
• Devices, sessions and notifications. We use session and cart identifiers, language preferences, and technical information such as IP addresses to operate and protect the service. The website uses session cookies. The app stores preferences and uses protected device storage for certain session and in-progress order information. When you use push notifications, a Firebase registration token identifies your app installation. Firebase may also process technical information about the app and device. Push notifications provide order updates. You can manage them in the app or your device settings.

• Reporting and blocking. When you report a review or reviewer, we process the review identifier, the reason for the report, and pseudonymous identifiers to prevent abuse. Staff use reports to assess content and take moderation action. The app stores reviewer blocks on your device.

Who receives the data

Authorised staff use the data for orders, support, moderation and privacy requests. We share the information needed for delivery and tracking with carriers. Hosting, website security and email service providers process the data they need to provide their services. Cloudflare helps deliver and protect the website. Google Firebase Cloud Messaging delivers push notifications, with Apple Push Notification service also involved on iOS. If the website offers a payment or sign-in option provided by a third party and you choose to use it, that provider processes the data needed for the transaction or sign-in.

Retention, security and deletion

We use HTTPS connections, hashed passwords and restricted access to administrative functions. We retain account data while the account is active. We keep communications, moderation reports and technical records for as long as needed to handle requests, protect the service or comply with a legal obligation.

After account deletion, necessary order and payment data outside accounting documents may be retained for seven years to trace transactions and handle disputes. Accounting documents, including invoices and payment documents that form part of the accounting records, are retained for ten years after the end of the reporting period or longer where the law requires it. Data in backups remains until the backup is replaced according to its retention cycle. Albanian Law No. 25/2018 on accounting and financial statements

To request deletion of your account and associated data, use the account deletion option in the app profile or open the request page in a browser and sign in. Staff expect to handle the request within 7 days and will confirm completion at the email address on your account. You may also contact us to access or correct your data, withdraw consent where applicable, or exercise other rights available under the rules that apply to you. Request account deletion