Privacy Policy

Last updated: 4 October 2026

This page explains how we use personal data. Rules for ordering, delivery, withdrawal and complaints are in our Terms and Conditions.

1. Who is responsible for your data?

The controller is Memento vivere, d.o.o., Celovška cesta 106, 1000 Ljubljana, Slovenia, VAT ID SI30575958, operator of the Nina & Valentin online store.

For questions about personal data, contact info@ninainvalentin.si or +386 40 55 77 67.

2. What data do we use and why?

Orders and delivery

We collect the buyer’s name, address, phone number and email address, and the gift recipient’s name, address and phone number. We need these details to process and deliver the order. If you add a greeting card, we also store its text so we can write the card. We do not use that text for another purpose.

Gift recipients

When you send a gift to someone else, we process their details on the basis of our legitimate interest in delivering the order. The courier may call the recipient to hand over the parcel. If you choose anonymous delivery, we do not reveal your identity to the recipient.

Payments and invoices

For online payments, the provider of the payment method you select processes payment details (for example Stripe or PayPal when available). We do not store card details in the store. We use order and payment information to complete purchases and handle claims. To issue and process invoices, we may share order details with our accountants and the provider of e-racuni.com. We retain invoice data as required by law.

Accounts, loyalty and communication

If you create an account, we keep your account details and order history. If you choose social sign-in, the provider supplies basic profile details such as your name and email address. If you join the ROSY loyalty programme, we record points earned and redeemed and related orders. Participation is voluntary. We send newsletters only with your consent; you can unsubscribe through any newsletter or by contacting us. We use contact-form details to answer your enquiry.

3. Legal grounds

• Performance of a contract: orders, payments, delivery and claims.
• Legal obligation: issuing and retaining invoices.
• Consent: newsletters and optional cookies when used.
• Loyalty programme terms: managing points and rewards if you join ROSY.
• Legitimate interests: delivering gifts to recipients, store security and prevention of misuse.

4. How long do we keep data?

We keep order and invoice data for the periods required by law; account data while the account is active, subject to legal retention and claims; newsletter details until you withdraw consent; and contact messages for as long as needed to answer and handle any follow-up claim.

5. Who receives data?

Where necessary for these purposes, data may be shared with the delivery service, the selected payment provider, our accountants, the provider of e-racuni.com, hosting and email-service providers. Depending on the service, a provider may act as a processor or an independent controller. We do not sell personal data.

If you allow analytics or advertising cookies in the cookie settings, data about your visit and shop events (for example pages viewed, adding to the basket, purchases, cookie identifiers, IP address) is also received by Google (Google Analytics, Google Ads) and Meta Platforms (Meta Pixel and Conversions API). The legal basis is your consent, which you can withdraw at any time via “Cookie settings” in the footer. Details are in our Cookie Policy.

If you allow analytics cookies, we also use Microsoft Clarity (Microsoft Ireland Operations Limited, Ireland), which records how pages are used (clicks, scrolling, movements, device and browser type, approximate location from the IP address) and turns this into recordings and heatmaps that help us fix problems and improve the shop. Form field contents and the checkout, order confirmation and account pages are masked in recordings. The legal basis is your consent, which you can withdraw at any time via “Cookie settings”. Microsoft may also process data in the USA under the EU-U.S. Data Privacy Framework.

6. Your rights

You may request access, correction, erasure, restriction or portability of your data, object to processing, and withdraw consent. Write to info@ninainvalentin.si. We respond within one month. You may complain to the Information Commissioner of the Republic of Slovenia.

7. Security and cookies

The store uses HTTPS. Access to personal data is limited to people who need it for their work. Our Cookie Policy explains cookies in more detail.

8. Changes

We may update this policy. The version shown here, with its update date, is the current one.