Privacy Policy

Who we are

Tilia is the controller of your personal data and processes it under the Personal Data Protection Act. For any privacy question, contact us through the contact page.

• The controller is Tilia, based in Serbia.
• We process data fairly, lawfully and only for the stated purposes.
• A data-protection contact is available on the contact page.

What data we collect

We collect only the data needed to process and deliver your order, to answer your enquiry, and for the basic operation of the site.

• Your name, delivery address and phone number.
• Your email for order confirmation and tracking.
• The content of any message you send and, with consent, your email for our updates.

Purpose and legal basis

We use your data to fulfil your order, to communicate with you and to meet legal obligations. Every processing has a legal basis.

• Processing to conclude and perform the contract (order and delivery).
• Meeting legal obligations (such as issuing invoices and keeping records).
• Processing based on your consent (such as our updates and analytics cookies), which you can withdraw at any time.

Cookies and analytics

The site uses cookies to work correctly and, with your consent, to understand how it is used. We do not load analytics before consent.

• Necessary cookies are always active and need no consent.
• Analytics and similar cookies load only after your consent via the cookie bar.
• You can withdraw or change your consent at any time.

Retention and sharing

We keep data only as long as needed for the stated purposes and as required by law, then delete or anonymise it.

• Order data is kept in line with tax and accounting rules.
• We share it only with the courier for delivery and with trusted providers acting on our instructions.
• We do not sell your data or share it for marketing without your consent.

Your rights and contact

You have the right to access, rectify, erase or restrict the processing of your data, and to object. Send your request through the contact page.

• The right to access, rectify, erase and restrict processing.
• The right to data portability and the right to object to processing.
• The right to lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection.