Privacy Policy

Effective Date: October 8, 2026

Welcome to the privacy policy of VIP PROM d.o.o. This document outlines how we collect, use, disclose, and safeguard your personal information when you visit our e-commerce website www.vippromdoo.com, browse our curated selection of bathroom essentials, place orders, or interact with our customer care services. As a small, passionate team based in Croatia, we are deeply committed to protecting your privacy, maintaining full transparency about our data practices, and ensuring that every personal detail you share with us is handled with the utmost care, in full compliance with applicable Croatian and European Union data protection regulations.

1. Introduction and Scope of This Policy

This Privacy Policy applies to all visitors, registered users, customers, and other individuals who access or use our website, make purchases of our products ranging from soap dishes, shower heads, toothbrush holders, towel hooks, to other carefully designed washroom goods, or engage with our services including customer support, newsletter subscriptions, return processing, and on-demand repair services. It explains exactly what categories of personal data we process, the legal bases for processing, how long we retain your data, and all of your rights related to your personal information. We have crafted this policy to be easy to understand, avoiding unnecessary legal jargon, so you can make fully informed decisions when sharing your data with us.

By accessing our website, creating an account, submitting an order, or otherwise interacting with our services, you acknowledge that you have read, understood, and agree to the terms laid out in this Privacy Policy. If you do not agree with any part of this policy, we ask that you refrain from using our website and our services.

2. Contact Information of the Data Controller

The data controller responsible for all your personal information processing activities described in this policy is:
VIP PROM d.o.o.
Registered Address: Radnička cesta 40, 10000 Zagreb, Croatia
Contact Email: softly@vippromdoo.com
Contact Telephone: +385 91 602 3867

If you have any questions, concerns, or requests related to your personal data, our dedicated data protection team is reachable via any of the contact methods listed above. We will respond to all legitimate inquiries within 3 business days, in line with our commitment to open, responsive customer care available from Monday to Friday, 10am to 9pm CET.

3. Categories of Personal Information We Collect

We only collect information that is strictly necessary to deliver the high-quality e-commerce experience and practical, well-made bathroom essentials you expect from VIP PROM. We do not collect excessive data, nor do we gather information that is irrelevant to our core service offerings. The categories of personal information we may collect include:

3.1 Information You Provide Directly to Us

This is all data that you voluntarily submit when interacting with our website or our team:

• ‌Account and Profile Data‌: When you create a My Account profile on our website, we collect your full name, email address, chosen password, and optional contact preferences to make your future shopping experiences faster and more personalized.
• ‌Order and Transaction Data‌: When you place an order for products such as our Elevated Soap Dish with Feet for Air Circulation and Quick Drying, Filtered Shower Head with Vitamin C and E Cartridge for Skin and Hair, or any other item from our New Arrivals or full product catalog, we collect your full delivery address, billing address, telephone number, payment details (including encrypted payment card information or preferred payment method), and order-specific preferences including gift packaging requests for orders over €150.
• ‌Customer Support Communications‌: When you reach out to our team via our Contact page, email, or telephone with questions about products, shipping, 30-day extended returns, or on-demand repair services, we collect the content of your messages, your contact details, and any other information you share to help us resolve your inquiry efficiently.
• ‌Newsletter and Marketing Preferences‌: When you opt in to receive updates about our new product launches, exclusive promotions, and bathroom design tips, we collect your email address, and any stated preferences you share about the types of products you are interested in, such as bamboo bathroom accessories or rainfall shower heads.
• ‌Survey and Feedback Data‌: Occasionally, we may invite you to share feedback about your shopping experience or your satisfaction with a purchased product. Any feedback you submit, including your name and contact information if you choose to provide it, is stored to help us improve our product range and service standards.

3.2 Information We Collect Automatically When You Use Our Website

When you browse www.vippromdoo.com, we automatically collect certain technical data to help us maintain website functionality, improve user experience, and understand how visitors navigate our pages. This data includes:

• Your device type, operating system, browser type and version, and unique device identifiers
• Your IP address, which we use for fraud prevention, geolocation to display relevant shipping information, and website security purposes
• Website usage data including the pages you visit on our site, the links you click, the products you view, time spent on each page, search queries you submit on our store, and your navigation paths across our Shop, New Arrivals, About, and Contact sections
• Cookie data, as further outlined in Section 7 of this policy.

We do not use automatic data collection tools to gather sensitive personal information such as your racial origin, religious beliefs, health status, or political opinions at any point.

4. Purposes and Legal Bases for Processing Your Personal Data

We process your personal information only for clear, explicitly stated, legitimate purposes, in full alignment with European data protection law. The key processing activities we carry out, and their corresponding legal bases, are:

4.1 Processing to Fulfill Our Contractual Obligations to You

The majority of our data processing is carried out to perform the sales contract you enter into with us when placing an order on our website. This includes:

• Processing your order to ensure accurate fulfillment, from confirming product stock to preparing your package for dispatch
• Arranging shipping to your provided delivery address, sharing necessary contact details with our trusted logistics partners to ensure successful delivery of your bathroom goods
• Processing payments securely, verifying transaction authenticity to prevent payment fraud
• Managing your 30-day extended returns process, issuing refunds, processing product exchanges, and coordinating on-demand repair services if required for your purchased items
• Maintaining your registered user account, saving your order history, preferred delivery addresses, and saved shopping cart contents for your future convenience.

This processing is necessary for the performance of a contract between you and VIP PROM d.o.o., as outlined in Article 6(1)(b) of the GDPR.

4.2 Processing Based on Our Legitimate Interests

We process certain categories of your data for carefully considered legitimate business interests, which are always balanced against your privacy rights and freedoms. These legitimate interests include:

• Maintaining the security, stability, and functionality of our website, preventing unauthorized access, cyberattacks, and fraudulent transactions that could harm both our customers and our business
• Understanding how visitors use our website to optimize page layouts, improve product categorization, and create a more intuitive shopping experience for all users, for example making it easier for customers to find our full range of soap dishes, toilet nozzles, toothbrush holders, and towel hooks
• Sending you strictly necessary service-related notifications, such as order status updates, shipping confirmations, alerts about product recall notices (if any), and changes to our Shipping Policy, Refund and Returns Policy, or Terms of Service
• Analyzing aggregate, anonymized sales data to identify popular product trends, inform our future product development, and continue our founding mission of bringing practical, durable, reasonably priced bathroom essentials that fit everyday routines to our customers, without overpriced designs or unnecessary extras.

We will never use your personal data for interests that override your fundamental privacy rights, and you have the right to object to this processing at any time, as outlined in Section 8 of this policy. This processing is carried out under Article 6(1)(f) of the GDPR.

4.3 Processing Based on Your Explicit Consent

For processing activities that go beyond the requirements of our contract with you and our legitimate business interests, we will always request your explicit, opt-in consent. These activities include:

• Sending you optional marketing newsletters, promotional offers, and updates about new product launches that you have expressly agreed to receive
• Using non-essential, analytics-focused cookies to track anonymized website usage patterns, as detailed in our cookie notice
• Sharing your personal information with third-party partners for purposes that are not directly related to order fulfillment, which will never happen without your separate explicit written consent.

You have the full right to withdraw your consent at any time, without any negative consequences to your ability to shop on our website or access our services. Withdrawing consent is as simple as clicking the “unsubscribe” link at the bottom of any marketing email, or sending us a message at softly@vippromdoo.com to notify us of your preference. This processing is carried out under Article 6(1)(a) of the GDPR.

4.4 Processing to Comply with Our Legal Obligations

We will process your personal data when it is necessary for us to comply with our legal obligations under Croatian tax law, consumer protection law, anti-fraud regulations, and applicable EU legislation. This includes retaining order and transaction records for the legally required period for tax and accounting purposes, and disclosing relevant information to competent public authorities only when we are legally compelled to do so. This processing is carried out under Article 6(1)(c) of the GDPR.

5. Who We Share Your Personal Information With

We never sell, rent, or trade your personal information to third parties for their own marketing purposes, under any circumstances. We only share your data with carefully selected third parties who are strictly bound by data protection agreements that require them to protect your information to the same high standards we uphold, and only to the extent necessary to deliver our services to you. These trusted third parties include:

• ‌Logistics and Shipping Partners‌: We share your full delivery name, address, and contact telephone number with our chosen courier services, solely for the purpose of delivering your ordered products to you successfully. We never give these partners permission to use your data for any other purpose.
• ‌Secure Payment Processors‌: We work with PCI-DSS compliant payment service providers to process your payment details securely. All payment card information is encrypted end-to-end, and we never store full unredacted payment card details on our own servers.
• ‌Cloud Service Providers‌: Our website and customer data storage systems are hosted on secure, EU-based cloud servers that meet all GDPR data protection requirements, ensuring your data never leaves the European Economic Area unless it is subject to an adequacy decision recognized by the European Commission.
• ‌Professional Service Providers‌: We may share limited necessary data with our trusted accounting firms, legal advisors, and IT maintenance providers, only to the extent required for them to deliver their professional services to our business.

In the rare event that we are required by law, court order, or competent public authority to disclose your personal information, we will only release the exact minimum volume of data that is legally required, and we will make all reasonable efforts to notify you of the disclosure in advance where permitted by law.

6. International Data Transfers

All of the personal information we collect and process is primarily stored and processed within the European Economic Area (EEA). If we ever need to transfer your personal data outside of the EEA, we will ensure that appropriate safeguards are in place to protect your rights, including using standard contractual clauses approved by the European Commission, or only transferring data to countries that have received an adequacy decision confirming they provide an equivalent level of data protection to EU standards. You may request a copy of these safeguards at any time by contacting us at softly@vippromdoo.com.

7. Cookies and Similar Tracking Technologies

Our website www.vippromdoo.com uses cookies and similar small text files stored on your device to improve your browsing experience. We categorize these cookies into two groups:

1. ‌Strictly Necessary Cookies‌: These cookies are essential for the basic functionality of our website to work. They allow us to remember the contents of your shopping cart, keep you logged in to your My Account, ensure our checkout process runs smoothly, and protect our site from malicious activity. You cannot disable these cookies via our cookie banner, but you can adjust your browser settings to block them, though this may prevent you from being able to complete purchases or use key features of our site.
2. ‌Non-Essential Analytics and Preference Cookies‌: These optional cookies help us understand how visitors use our website, remember your preferences such as your chosen language or currency, and improve our site performance over time. We will only place these cookies on your device if you give us your explicit opt-in consent via our cookie management banner when you first visit our site. You can update your cookie preferences at any time by visiting the cookie settings page on our website.

8. Your Rights Over Your Personal Data

Under applicable data protection law, you hold a comprehensive set of rights related to your personal information. You can exercise any of these rights at any time, free of charge, by contacting us via email at softly@vippromdoo.com or calling our customer care line at +385 91 602 3867. These rights are:

• ‌Right of Access‌: You can request a full copy of all the personal data we hold about you, along with a detailed explanation of how we process that data. We will provide this information to you in a structured, commonly used machine-readable format upon request.
• ‌Right to Rectification‌: If you notice that any of the personal data we hold about you (such as your delivery address, email address, or telephone number) is inaccurate or incomplete, you can ask us to correct or update that information immediately. You can also make these updates yourself directly from the My Account section of our website.
• ‌Right to Erasure (Right to be Forgotten)‌: You can request that we delete all of your personal data from our systems, at any time, for legitimate reasons. We will honor this request as soon as reasonably possible, unless we are legally required to retain certain data for ongoing tax, accounting, or legal compliance purposes.
• ‌Right to Restriction of Processing‌: You have the right to ask us to temporarily stop processing your personal data in specific circumstances, for example if you dispute the accuracy of the data we hold, or if you have objected to our legitimate interest processing while we verify whether our legitimate grounds override your objection.
• ‌Right to Data Portability‌: You can request that we transfer all the personal data you have provided to us, directly to another data controller of your choice, in a standardized, easily transferable format, where this is technically feasible.
• ‌Right to Objection‌: You can object to any processing of your personal data that we carry out based on our legitimate interests, at any time. If we cannot demonstrate compelling legitimate grounds for the processing that override your rights, we will immediately cease that processing activity. You also have the absolute right to object to your personal data being used for direct marketing purposes, at no cost to you.
• ‌Right to Lodge a Complaint‌: If you believe that our processing of your personal data violates applicable data protection law, you have the right to submit a complaint to the competent national data protection authority in Croatia, as well as to any other EU member state where you reside or work.

We will never discriminate against or penalize any customer for exercising their data protection rights, and all requests will be responded to within one calendar month of receipt, with extensions permitted only for very complex requests, for a maximum of two additional weeks, for which we will notify you in advance.

9. Data Retention Periods

We will never keep your personal information for longer than it is necessary to fulfill the exact purposes for which it was originally collected. The specific retention periods we apply are:

• Order and transaction data: Retained for 10 years after the date your order is completed, to comply with Croatian tax and accounting legal requirements, after which it is securely anonymized or deleted.
• Registered user account data: Retained for as long as you keep your My Account active, and deleted within 30 days of you requesting that your account be closed.
• Marketing newsletter subscriber data: Retained until you choose to unsubscribe, at which point we immediately remove your email address from all of our marketing distribution lists.
• Customer support communications: Retained for 3 years after your inquiry is fully resolved, to help us reference prior interactions if you reach out to our team again with related questions, after which the messages are securely deleted.
• Automatically collected website usage data and analytics data: Retained for a maximum of 12 months, after which it is fully anonymized and cannot be linked back to any individual user.

Once the retention period for any category of your personal data expires, we will securely delete or irreversibly anonymize that data, with no possibility of recovery.

10. Data Security Measures

We implement industry-leading, multi-layered technical and organizational security measures to protect your personal information against unauthorized access, accidental loss, alteration, destruction, or misuse. These measures include end-to-end SSL encryption for all data transferred between your browser and our website, regular security audits of all our systems, role-based access controls that ensure only a very small, trained subset of our team has access to your personal data where strictly required to perform their job duties, regular offsite encrypted backups, and ongoing staff data protection training.

While we make every possible effort to protect your personal information, no data transmission system over the internet can be guaranteed to be 100% secure. If we ever detect a personal data breach that poses a high risk to your rights and freedoms, we will notify you and the relevant competent supervisory authority without undue delay, in full compliance with all legal breach notification requirements.

11. Protection of Minors

Our e-commerce website www.vippromdoo.com is not intended for use by individuals under the age of 16, and we do not knowingly collect any personal information from children under the age of 16. If we ever become aware that we have collected personal data from a minor under 16 without verifiable parental consent, we will immediately delete that information from all of our servers and systems. If you believe we may hold data about a child under 16, please contact us immediately at softly@vippromdoo.com.

12. Changes to This Privacy Policy

We may occasionally update and revise this Privacy Policy to reflect changes to our business operations, new legal requirements, or updates to our service offerings. When we make significant changes to this policy, we will update the “Effective Date” listed at the top of this document, and place a prominent notification on the homepage of our website www.vippromdoo.com to alert you to the updates before they take effect. We encourage you to review this Privacy Policy periodically whenever you visit our store, to stay informed about how we are protecting your personal information. Your continued use of our website and our services after the effective date of any revised Privacy Policy constitutes your acknowledgment and acceptance of the updated terms.

13. Final Provisions

This Privacy Policy forms an integral part of our Terms of Service, accessible on our website at all times. Any terms used but not defined in this document shall have the meaning set out in our Terms of Service. Every aspect of this policy is governed by the laws of the Republic of Croatia, and any disputes related to our data processing practices will be subject to the exclusive jurisdiction of the courts based in Zagreb, Croatia.

At VIP PROM, we built this business out of a desire to deliver simple, durable, practical bathroom essentials that fit seamlessly into your everyday routines, and that commitment extends fully to how we treat your personal data. We never add unnecessary extras or overcharge for our products, and the same philosophy applies to our privacy practices: no hidden data collection, no complicated fine print, just clear, honest, respectful treatment of your information. If you have any questions at all about this Privacy Policy, you are always welcome to reach out to our team at softly@vippromdoo.com, or visit us at our registered address at Radnička cesta 40, 10000 Zagreb, Croatia.