Privacy Policy
Last updated: October 16, 2026
This policy explains what personal information we collect through vitrinahaus.com, why, and how long we keep it. The data controller is Treydturniti Ltd.
1. What we collect
- From the demo form: name, phone, email, business name, city, type of business, social media links and the files you upload (logo, photos).
- When you pay: invoice details. Card details are handled by the payment provider, not stored by us.
- When you contact us: the content of your emails and messages.
2. Why we use it
- To build your demo and contact you (steps before a contract, GDPR Art. 6(1)(b)).
- To deliver your order, care plan and payments (performance of a contract).
- To issue invoices and meet accounting laws (legal obligation).
- To improve our website and advertising (legitimate interest, or your consent where required).
3. Who we share it with
We never sell or rent your personal information. We use trusted providers who process it only on our instructions:
- Cloudflare: website hosting, form handling and storage of uploaded files.
- Google (Gmail): receiving email.
- A payment provider (such as Stripe or a bank): processing payments.
- Meta (Facebook and Instagram): if you request a demo through an ad or form on those platforms.
Some of these providers may process data outside the EU. Such transfers rely on standard contractual clauses or another lawful basis under the GDPR.
4. How long we keep it
- Requests that don’t become orders: up to 12 months, then deleted.
- Client data: for as long as we work together and up to 5 years after.
- Invoices and accounting records: 10 years, as required by law.
5. Cookies
Our website currently uses no tracking or advertising cookies. If we start using them (for example, to measure ads), we will ask for your consent before loading them and update this policy.
6. Your rights
You can ask to access, correct or delete your data, restrict or object to its use, receive it in a portable format, and withdraw consent at any time. Email hello@vitrinahaus.com and we will reply within 30 days.
US residents, including California residents, have the right to know what personal information we hold, to request its deletion and to not be discriminated against for using these rights. We do not sell or share personal information for cross-context behavioral advertising.
EU residents may also complain to their local data protection authority, or to the Bulgarian Commission for Personal Data Protection, www.cpdp.bg.
7. Security
The website runs only over a secure connection (SSL). Only people working on your order have access to your data.
8. Changes
We may update this policy. The date of the last change is shown at the top.