Privacy policy

This Privacy Policy explains how Meta Bamboo (“Meta Bamboo”, “we”, “us” or “our”), collects, uses and shares your personal data when you visit or use our websites, place an order, create an account, contact us, or interact with us through social media or other channels.

This policy applies to our websites, including metabamboo.com.

Personal data we collect

Depending on how you use our websites and services, we may collect the following categories of personal data:

  • Contact details: Your name, billing and delivery address, telephone number and email address.

  • Account and technical data: Your account login details, IP address, browser type, device identifiers, approximate geographic location, pages viewed, referring pages, session information and interactions with our websites.

  • Purchase information: Products ordered, order history, delivery details, payment method, payment status, returns and refunds. Payment details are processed by our payment providers in accordance with their own privacy terms.

  • Communication data: Messages and enquiries sent to us by email, through customer service, via social media or by other means.

  • Marketing preferences: Your consent, subscriptions and preferences for receiving news, product updates and promotions.

  • Social-media activity: Your interactions with our profiles, advertisements and content on social-media platforms.

  • Cookies and similar technologies: Information collected through cookies, pixels, tags, local storage and similar technologies, as described in the Cookies section below.

We collect personal data directly from you, automatically when you use our websites, and from service providers or platforms that support our business, where permitted by law.

Purposes and legal bases for processing

We process your personal data only where we have a valid legal basis under the General Data Protection Regulation (“GDPR”).

Our legitimate interests include operating and securing our business, preventing fraud, improving customer experience, understanding website performance and protecting our legal rights. When we rely on legitimate interests, we consider and balance those interests against your privacy rights and reasonable expectations.

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

Marketing communications

We send electronic marketing communications only where we have a lawful basis to do so. Where consent is required, you will receive such communications only after giving your consent.

You can unsubscribe at any time by using the unsubscribe link included in a marketing email or by contacting us at info@metabamboo.com.

After you unsubscribe, we may keep limited information on a suppression list to ensure that we respect your preference and do not send further marketing communications to that address.

Cookies and similar technologies

Our websites use cookies and similar technologies to provide essential functionality, remember your preferences, understand website use, measure performance and, where permitted, personalise content and advertising.

Cookies that are strictly necessary for the operation of our websites may be used without consent where permitted by law. Non-essential cookies, including analytics and advertising cookies, are used only after you have made a choice through our cookie banner.

You can review or change your cookie choices through the cookie settings available on our websites. You may also manage cookies through your browser settings. Disabling certain cookies may affect the functionality of the websites.

How we share your data

We do not sell your personal data.

We may share personal data with trusted recipients where necessary for the purposes described in this policy, including:

  • E-commerce and hosting providers: Including Shopify, which powers our online store.

  • Payment providers: To authorise and process payments, prevent payment fraud and manage refunds.

  • Logistics and delivery partners: To prepare, ship, track and deliver your orders.

  • Technology and customer-service providers: Including providers of website functionality, data storage, email delivery and customer-support tools.

  • Analytics and advertising partners: Including Google and Meta, where the relevant cookies or processing have been enabled and a lawful basis applies.

  • Professional advisers: Such as accountants, auditors, insurers and legal advisers where necessary.

  • Public authorities and other recipients: Where disclosure is required by law, court order or another lawful request, or where necessary to establish, exercise or defend legal claims.

Where a service provider processes personal data on our behalf, we require appropriate contractual and data-protection safeguards in accordance with applicable law. Some recipients, such as payment providers, social-media platforms and public authorities, may process personal data as independent controllers under their own privacy policies.

International data transfers

Some of our service providers may process personal data outside the European Economic Area (“EEA”), including in the United States.

Where personal data is transferred outside the EEA, we use a transfer mechanism permitted by applicable data-protection law. Depending on the recipient and destination, this may include an adequacy decision, European Commission-approved Standard Contractual Clauses, participation in a recognised data-protection framework, or another lawful safeguard. Where required, we also assess whether supplementary measures are necessary to protect your data.

You may contact us for further information about the safeguards used for relevant international transfers.

Data security

We use appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

These measures may include encrypted transmission using SSL/TLS, access controls, authentication measures, secure data-storage practices, service-provider controls and monitoring appropriate to the nature and risk of the processing.

No method of transmission or storage is completely secure. While we take reasonable steps to protect your data, we cannot guarantee absolute security.

Data retention

We retain personal data only for as long as reasonably necessary for the purposes described in this policy, including satisfying legal, accounting and reporting obligations, resolving disputes and enforcing agreements.

The retention period depends on the type of data and why it was collected:

  • Order, payment and accounting records: Retained for the period required under applicable Slovenian tax and accounting laws, which may be up to 10 years.

  • Customer-account information: Retained while your account remains active and afterwards where necessary to comply with legal obligations, resolve disputes or protect legal rights.

  • Marketing preferences and consent records: Retained until you withdraw consent or unsubscribe, together with limited suppression information where needed to respect your choice.

  • Customer-service communications: Retained for as long as necessary to address your enquiry and for a reasonable period afterwards, taking account of applicable limitation periods and potential disputes.

  • Analytics and cookie data: Retained according to the relevant cookie duration, your cookie settings and the retention periods used by the applicable service provider.

When personal data is no longer required, we delete or anonymise it, unless continued retention is required or permitted by law.

Your rights under the GDPR

Subject to the conditions and exceptions set out in applicable law, you may have the following rights regarding your personal data:

  • Right of access: Request confirmation of whether we process your personal data and receive a copy of it.

  • Right to rectification: Ask us to correct inaccurate or complete incomplete personal data.

  • Right to erasure: Ask us to delete personal data where there is no longer a lawful reason to retain it.

  • Right to restriction: Ask us to limit how we process your personal data in certain circumstances.

  • Right to data portability: Receive certain personal data in a structured, commonly used and machine-readable format, and ask us to transmit it to another controller where technically feasible.

  • Right to object: Object to processing based on legitimate interests. You may object to direct marketing at any time.

  • Right to withdraw consent: Withdraw consent at any time where processing is based on consent.

  • Right to lodge a complaint: Submit a complaint to a competent data-protection authority.

To exercise your rights, contact us at info@metabamboo.com. We may need to request information to verify your identity before responding. We will respond within the period required by applicable law.

You have the right to lodge a complaint with the supervisory authority in the country of your habitual residence, place of work or place of the alleged infringement. Our lead supervisory authority in Slovenia is:

Information Commissioner of the Republic of Slovenia
Dunajska cesta 22
SI-1000 Ljubljana
Slovenia
Website: https://www.ip-rs.si/en/

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes to our practices, technologies, service providers or legal obligations.

The current version will always be published on our websites. Where changes are material, we will provide an appropriate notice on the website or through another suitable communication channel.

For the purposes of applicable data-protection law, the controller of your personal data is:

Vordor d.o.o.
Ukmarjeva ulica 6
1000 Ljubljana
Slovenia
Email: info@metabamboo.com

“Personal data” means any information that identifies you or can reasonably be linked to you.

Contact us

For questions about this Privacy Policy, our handling of personal data or the exercise of your rights, contact us at:

Meta Bamboo / Vordor d.o.o.
Ukmarjeva ulica 6
1000 Ljubljana
Slovenia
Email: info@metabamboo.com