Privacy policy

ioflow ("we", "us", "our") respects your privacy. This policy explains what personal information we collect, how we use it, and your rights. As a Romania-based (EU) business, we act as data controller under the EU General Data Protection Regulation (GDPR); we also respect the rights of our New Zealand customers under the NZ Privacy Act 2020.

Who we are (data controller)

ioflow, Prelungirea Ghencea 299, București 077025, Romania. Contact: contact@ioflow.shop.

Information we collect

  • Information you provide: name, delivery and billing address, email, phone, and order details.
  • Payment information: processed by our payment providers (e.g. Shopify Payments, PayPal). We don't store full card numbers.
  • Collected automatically: IP address, device/browser type, and pages viewed, via cookies.

How we use your information

  • To process and deliver orders and provide support.
  • To send order/shipping updates and respond to enquiries.
  • To prevent fraud and meet legal obligations.
  • With your consent, to send marketing emails (unsubscribe any time).

Legal bases (GDPR)

We process your data to perform our contract with you (orders), for our legitimate interests (improving and securing the store), to meet legal obligations, and with your consent where required.

Who we share it with

Only with providers who help us operate — Shopify (platform/hosting), payment processors, international shipping carriers (to deliver and clear customs), and analytics/advertising providers (e.g. Google) where enabled. We do not sell your personal information.

International transfers

As we operate from Romania and serve customers in New Zealand, your data may be processed in the EU, New Zealand, and other countries where our providers operate, with appropriate safeguards.

Your rights

  • EU/GDPR: access, correction, erasure, restriction, objection, and data portability. You may complain to the Romanian Data Protection Authority (ANSPDCP).
  • New Zealand customers: access and correction under the Privacy Act 2020; you may contact the Office of the Privacy Commissioner (privacy.org.nz).

To exercise any right, email contact@ioflow.shop.

Retention & children

We keep order records only as long as needed for orders, support, and legal/tax requirements, then delete or anonymise them. Our store is not directed to children under 16.

Contact

ioflow · Prelungirea Ghencea 299, București 077025, Romania · contact@ioflow.shop