Last updated: August 14, 2026
This Privacy Policy explains how Geval d.o.o. (“Stars5Shop”, “we”, “us”, “our”) collects, uses, shares, and protects personal information when you visit stars5shop.com or make a purchase from us. We sell to customers in both the European Union and the United States, so this policy is written to meet the requirements of the EU General Data Protection Regulation (GDPR) and applicable U.S. state privacy laws (such as the California Consumer Privacy Act / CPRA and similar laws in other states).
We recommend a licensed attorney review this policy before it goes live, since privacy laws vary by jurisdiction and change over time.
1. Who we are
Data controller: Geval d.o.o.
Registered address: Babičeva ulica 28, 1000 Ljubljana, Slovenia
Contact email for privacy questions: info@stars5shop.com
2. What personal data we collect
Depending on how you interact with our store, we may collect:
- Contact and account details: name, email address, phone number, billing and shipping address, account username and password.
- Order information: products purchased, order value, order history, and communications about your order.
- Payment information: our store does not store full payment card numbers. Payments are processed by [PAYMENT PROCESSOR NAME(S), e.g. Stripe / PayPal / WooCommerce Payments], who process your payment details directly under their own privacy policy.
- Technical data: IP address, browser type, device information, and pages visited, collected automatically through cookies and similar technologies.
- Communications: information you provide when you contact us through our contact form, email, or customer support.
- Marketing preferences: if you sign up for our newsletter or promotional emails (only with your consent).
3. How we use your data and our legal basis (GDPR)
Under the GDPR, we rely on the following legal bases to process your personal data:
- Performance of a contract — to process and fulfil your orders, manage your account, and provide customer support.
- Legal obligation — to comply with tax, accounting, and consumer protection laws.
- Legitimate interests — to keep our store secure, prevent fraud, and improve our website and services, provided this does not override your rights.
- Consent — for marketing emails and non-essential cookies (such as analytics or advertising cookies). You can withdraw consent at any time.
4. Cookies
Our store uses essential cookies required for core functionality, such as keeping items in your shopping cart and keeping you logged in. [LIST ANY ADDITIONAL TOOLS IN USE, e.g. Google Analytics, Meta/Facebook Pixel, email marketing tracking]. Where required by law, we will ask for your consent before setting non-essential cookies, and you can manage your preferences at any time through [COOKIE CONSENT TOOL, if one is installed] or your browser settings.
5. Who we share your data with
We do not sell your personal information. We share personal data only with service providers who help us run our store, including:
- Payment processors: Stripe, PayPal, and WooCommerce Payments
- Shipping and fulfilment providers: GLS
- Website hosting and infrastructure providers
- [ANY OTHER THIRD-PARTY TOOLS, e.g. email marketing platform, analytics, customer support software]
Each of these providers is only given the information it needs to perform its service and is required to protect your data.
6. International data transfers
If you are located in the European Economic Area (EEA) and your data is transferred to service providers outside the EEA (including in the United States), we take steps to ensure an adequate level of protection, such as relying on providers certified under recognised data protection frameworks or using Standard Contractual Clauses approved by the European Commission.
7. How long we keep your data
We keep order and account information for as long as needed to fulfil the purposes described in this policy, including to meet our legal, accounting, and tax obligations (generally 10 years for financial and accounting records, in accordance with Slovenian accounting and tax law for order records). If you have an account with us, we retain your account data until you ask us to delete it.
8. Your rights under the GDPR (EU/EEA residents)
If you are located in the EU/EEA, you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Request erasure of your data (“right to be forgotten”), subject to legal exceptions such as order records we must keep for tax purposes.
- Restrict or object to certain processing.
- Receive your data in a portable format.
- Withdraw consent at any time where processing is based on consent.
- Lodge a complaint with your local data protection authority.
To exercise these rights, contact us at info@stars5shop.com.
9. Your privacy rights in the United States
Depending on your state of residence, you may have rights similar to those above under state privacy laws (for example California’s CCPA/CPRA, and comparable laws in states such as Virginia, Colorado, Connecticut, and Utah). Where applicable, you have the right to:
- Know what personal information we have collected about you and how it is used.
- Request deletion of your personal information, subject to legal exceptions.
- Correct inaccurate personal information.
- Opt out of the “sale” or “sharing” of personal information — we do not sell personal information.
- Not be discriminated against for exercising these rights.
To exercise these rights, contact us at info@stars5shop.com. We will verify your request before responding.
10. Children’s privacy
Our store is not directed at children, and we do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact us so we can delete it.
11. Data security
We use reasonable technical and organisational measures to protect your personal data, including secure (HTTPS) connections and access controls. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
12. Changes to this policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page shows when it was last revised. We encourage you to review this page periodically.
13. Contact us
If you have questions about this Privacy Policy or how we handle your personal data, contact us at:
Geval d.o.o.
Babičeva ulica 28, 1000 Ljubljana, Slovenia
info@stars5shop.com
