Privacy Policy

This Privacy Policy explains how personal data is collected, used, and protected when you visit and use the website https://pullybook.shop.
We respect your privacy and are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and the Law on Personal Data Protection of the Republic of Serbia.

1. Data Controller
The data controller responsible for processing your personal data is:
Ilgina Khusainova PR Beograd
Registered sole proprietor in the Republic of Serbia
Email: khusainova.ilgina94@gmail.com

2. Personal Data We Collect
We may collect and process the following personal data:

• Full name
• Email address
• Phone number
• Delivery address
• Order details
• Communication data related to your order

Payment information is processed directly by third-party payment providers. We do not store or have access to your full payment card details.

3. How We Use Your Personal Data
Your personal data is used for the following purposes:

• To process and fulfill your orders
• To contact you regarding your order and its details
• To create and deliver photo books and custom products
• To arrange delivery
• To provide customer support
• To comply with legal and accounting obligations

4. Legal Basis for Processing
We process your personal data based on the following legal grounds:

• Your consent
• Performance of a contract (order fulfillment)
• Compliance with legal obligations
• Legitimate business interests, such as communication with clients

5. Payments and Third-Party Services
Online payments are processed through Robokassa, which accepts Visa and MasterCard payments.
Payment processing is handled by third-party providers in accordance with their own privacy policies. We do not store payment card data.
We may also use third-party services such as:

• Google Analytics for website analytics

These services may process certain data in accordance with GDPR and applicable safeguards.

6. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes described in this policy, including legal, accounting, or reporting requirements.
When personal data is no longer required, it is securely deleted or anonymized.

7. International Data Transfers
Your personal data may be transferred and processed outside the Republic of Serbia, including by third-party service providers.
All such transfers are carried out in accordance with GDPR requirements and appropriate data protection safeguards.

8. Your Rights Under GDPR
You have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion of your personal data
• Restrict or object to processing
• Request data portability
• Withdraw consent at any time

To exercise your rights, please contact us at:
khusainova.ilgina94@gmail.com

9. Data Security
We implement reasonable technical and organizational measures to protect personal data from unauthorized access, loss, misuse, or disclosure.

10. Cookies and Analytics
The Website uses cookies and similar technologies to analyze traffic and improve user experience.
You can control or disable cookies through your browser settings.

11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. The current version will always be available on the Website.

12. Contact Information
If you have any questions regarding this Privacy Policy or the processing of your personal data, please contact us at:
khusainova.ilgina94@gmail.com