We use your data only to take, deliver and support your order, and for anything beyond that we ask first. This policy follows Law 195/2024 on personal data protection, in force since 23 August 2026 (it replaced Law 133/2011).
Who is responsible
RA Planet, Ciofu village, Telenești District, Moldova. For anything about your data: [email protected].
What we collect and why
| Data | Why | Legal basis | Kept for |
|---|---|---|---|
| Name, phone, email, delivery address, order, note, chosen chat and handle | to take, confirm, deliver and support your order | contract | as long as tax and accounting rules require |
| Payment record (payer name, amount, reference) | accounting | legal obligation | as long as tax and accounting rules require |
| Messages by chat or email | to answer you | contract, or our legitimate interest | 24 months |
| Account, if you create one | sign-in, order history | contract | until you delete the account |
| “Notify me” requests (email, product) | one email when the product is back; counting demand | your consent | until we notify you + 30 days, or until you unsubscribe |
| Product reviews | to show your review with “verified buyer” | your consent | until you ask us to remove it |
| Newsletter email | small-batch news | your consent | until you unsubscribe |
| Technical data (IP address, browser, security logs) | security and fraud prevention | legitimate interest | 30 days |
We do not sell your data, and we make no automated decisions about you.
Who receives it
Only the services we need, each for its own part:
- Hosting: OVH, data centre in the United Kingdom.
- Security and speed: Cloudflare, which also counts visits to the site.
- Fonts: Google. The site’s fonts are loaded from Google Fonts; your browser then contacts Google and sends it your IP address.
- Delivery: Poșta Moldovei or Nova Post (name, phone, address).
- Payments: your bank and ours, through MIA in Moldova or RoPay in Romania. We never see card details.
- Email: Zoho Mail (servers in the EU). Newsletter: Mailchimp.
- Chats: WhatsApp, Viber, Messenger or Instagram, only the one you choose; their own privacy rules apply.
- Our accountant: invoices and payments.
- Public authorities, only when the law requires it.
Outside Moldova
Data stored in the EU or EEA needs no extra authorisation. For services elsewhere, such as our host in the United Kingdom, or Cloudflare, Google, Mailchimp and Meta in the USA, we rely on the safeguards the law requires, such as standard contractual clauses.
Your rights
You may ask to see, correct or delete your data, to limit or object to its use, or to receive it in a portable format. You can withdraw consent and object to marketing at any time, without giving a reason. We reply within one month; if a request is complex we may extend this by two months and tell you why.
Complaints. If you think we misuse your data, write to us first. You may also complain to the National Centre for Personal Data Protection (Centrul Național pentru Protecția Datelor cu Caracter Personal), 48 Serghei Lazo St., Chișinău MD-2004, datepersonale.md.
How we protect it
Encrypted connection (HTTPS), access limited to the people who run the shop and our accountant, strong passwords and backups. If a breach puts your data at risk, we notify the authority within 72 hours and tell you if the risk is high.
Children and cookies
Children. The shop is meant for adults. We do not knowingly collect data from anyone under 16.
Cookies. See the Cookie policy.