Privacy Policy

Last updated: June 2026

This Privacy Policy explains how Jehona Bunjaku collects, uses, stores and protects personal data when you visit our website, create an account, place an order, contact us, subscribe to our newsletter or use our services.

This policy is prepared with reference to the Law on Personal Data Protection of the Republic of Kosovo, Law No. 06/L-082, and, where applicable, the EU General Data Protection Regulation (GDPR) and UK GDPR.

1. Data controller

The data controller responsible for your personal data is:

Jehona Bunjaku
St. Vicianum
10000 Prishtina
Kosovo

Email: info@jehonabunjaku.com
Phone: +383 49 355 200
Website: https://jehonabunjaku.com

2. Personal data we collect

We may collect and process the following categories of personal data:

Account and contact data

name and surname
email address
phone number
billing address
shipping address
account username and password information
communication preferences

Order and transaction data

products ordered
order number
order value
selected currency
payment status
shipping method
delivery tracking information
returns, refunds and exchange history
customer service notes related to your order

Payment data

Payments are processed by third-party payment providers. We may receive limited payment information such as payment status, transaction reference, payment method type and fraud-check result.

We do not store full card numbers or full payment credentials on our website.

Communication data

If you contact us by email, phone, contact form, social media or messaging services, we may process the information you provide, including your message, contact details and any files or photos you send.

Newsletter and marketing data

If you subscribe to our newsletter or accept marketing, we may process your email address, name, subscription status, consent record and email interaction data such as opens or clicks, depending on the email platform used.

Technical and usage data

When you visit our website, we may collect technical data such as:

IP address
browser type and version
device type
operating system
pages visited
date and time of visit
referral source
cart/session information
cookie preferences
website interaction data

Reviews and user content

If you leave reviews, comments or other content, we may process the information you provide and display it on the website.

3. How we collect personal data

We collect personal data when you:

visit our website
create an account
place an order
add products to cart
complete checkout
contact us
subscribe to our newsletter
submit a review or comment
use order tracking
request a return, refund or exchange
interact with our cookie banner or website tools

We may also receive limited data from payment providers, delivery companies, analytics tools, marketing platforms or other service providers used to operate the store.

4. Why we process personal data

We process personal data for the following purposes:

to operate and secure the website
to create and manage customer accounts
to process and fulfil orders
to accept payments and prevent fraud
to arrange shipping and delivery
to provide order tracking
to handle returns, refunds and exchanges
to respond to customer inquiries
to provide customer support
to send order confirmations and transactional emails
to send newsletters and marketing emails where consent is given
to improve the website, products and customer experience
to comply with tax, accounting and legal obligations
to protect our rights, customers, website and business

5. Legal bases for processing

Depending on the context, we process personal data based on one or more of the following legal bases:

performance of a contract, such as processing and delivering your order
compliance with legal obligations, such as accounting and tax records
consent, such as newsletter subscriptions or non-essential cookies
legitimate interests, such as website security, fraud prevention, customer service and business administration
protection of legal claims and enforcement of our rights

Where processing is based on consent, you may withdraw your consent at any time.

6. WooCommerce, WordPress and store functionality

Our store may be operated using WordPress, WooCommerce and related plugins. These systems may process data necessary for cart functionality, checkout, customer accounts, order management, emails, taxes, shipping and website security.

Necessary store cookies may be used to remember cart contents, manage checkout sessions and keep the website functioning properly.

7. Payment providers

Payments are processed through secure third-party payment providers, which may include card processors, PayPal or other providers shown at checkout.

Payment providers process payment data according to their own terms and privacy policies. We receive only the information required to confirm payment, manage orders and handle refunds.

8. Shipping and delivery partners

To deliver your order, we may share necessary information with courier, postal or logistics partners. This may include your name, shipping address, phone number, email address, order reference and customs-related information where required.

For international shipments, certain information may be shared with customs authorities, shipping brokers or destination-country authorities as required by law.

9. Newsletter and marketing

If you subscribe to our newsletter, we may send you emails about new collections, product drops, promotions, atelier news and special offers.

You can unsubscribe at any time using the unsubscribe link in our emails or by contacting info@jehonabunjaku.com.

We do not sell your personal data.

10. Cookies and similar technologies

We use cookies and similar technologies to operate the website, remember cart contents, support login sessions, save cookie preferences and, where consent is given, measure website performance or marketing activity.

More information is available in our Cookie Policy.

11. Analytics and marketing tools

If analytics or marketing tools such as Google Analytics, Google Tag Manager, Meta Pixel, TikTok Pixel, Pinterest Tag, Google Ads, email marketing pixels or similar technologies are used, they should be activated only after the required consent has been obtained, where applicable.

These tools may process technical data, device data, browsing activity, conversion data or marketing interaction data.

12. Social media

We may use social media platforms such as Instagram and Facebook. If you interact with us through social media, the platform may process your data according to its own privacy policy.

Our website may contain links to social media pages. Clicking those links may transfer you to third-party platforms.

13. Contact forms and customer support

When you contact us through a contact form, email, phone or other communication channel, we process your data to respond to your request and manage the relationship with you.

Please avoid sending highly sensitive information unless necessary.

14. International data transfers

Because we sell internationally and may use global technology, payment, shipping, hosting or marketing providers, your personal data may be processed outside Kosovo, including in the European Economic Area, the United Kingdom, the United States or other countries.

Where required, we take appropriate measures to protect personal data when it is transferred internationally.

15. How long we keep personal data

We keep personal data only as long as necessary for the purposes described in this policy.

Typical retention periods include:

order and accounting records: as required by tax and accounting law
customer account data: until the account is deleted or no longer needed
support messages: as long as needed to handle the request and protect legal rights
newsletter data: until you unsubscribe or consent is withdrawn
cookie consent records: as required to document consent
security logs: for a limited period needed to protect the website

We may keep certain data longer if required by law or necessary for legal claims.

16. Data security

We use reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.

However, no internet transmission or online storage system is completely secure. Customers are responsible for keeping account passwords confidential.