Privacy Policy
Raw lab d.o.o.
Last updated: 14th January 2026
Introduction
This Privacy Policy describes how Raw lab d.o.o., Slovenska 58, 1000 Ljubljana, Slovenia (“Raw lab”, “we”, “us”, “our”) collects, uses, and protects your personal data when you visit our website, make a purchase, or otherwise interact with us via https://www.rawlab.co/store (the “Site”).
We process personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Slovenian and EU data protection laws.
By using our Site or Services, you acknowledge that your personal data will be processed as described in this Privacy Policy.
What personal data we collect
Depending on how you interact with us, we may collect the following categories of personal data:
a) Data you provide directly
- Name and surname
- Billing and shipping address
- Email address and phone number
- Order and payment confirmation details
- Account login details (if you create an account)
- Customer support communication
b) Data collected automatically
When you browse our Site, we may automatically collect:
- IP address
- Device and browser information
- Usage data (pages viewed, interactions)
- Cookies and similar technologies
c) Data from third parties
We receive limited data from trusted service providers such as:
- Shopify (e-commerce platform)
- Payment processors (to process payments securely)
- Shipping and fulfillment partners
Purposes and legal basis of processing
We process your personal data only when we have a lawful basis to do so, including:
- Order processing, payment, and delivery — processing is necessary for the performance of a contract.
- Customer support and communication — processing is based on our legitimate interest in providing effective customer service.
- Returns, refunds, and complaints handling — processing is required to comply with legal obligations under consumer protection laws.
- Website security and fraud prevention — processing is based on our legitimate interest in protecting our website, users, and business.
- Marketing emails and newsletters — processing is based on your explicit consent.
- Website analytics and performance monitoring — processing is based on our legitimate interest and, where required, your consent through cookies.
You may withdraw your consent at any time where consent is the legal basis for processing.
Cookies
We use cookies to:
- ensure proper website functionality
- remember preferences
- analyze traffic and performance
You can manage or disable cookies via your browser settings. Blocking cookies may affect site functionality.
More information: https://www.shopify.com/legal/cookies
Sharing personal data
We only share personal data when necessary and with trusted partners, including:
- payment providers
- logistics and delivery partners
- IT and hosting providers
- accounting and legal service providers (when required by law)
We do not sell personal data.
Data may be transferred outside the EU only where adequate safeguards (e.g. Standard Contractual Clauses) are in place.
Data retention
We retain personal data only as long as necessary:
- for order fulfillment and customer support
- to comply with tax, accounting, and consumer laws
- to resolve disputes or enforce agreements
When data is no longer required, it is securely deleted or anonymized.
Your rights under GDPR
You have the right to:
- access your personal data
- request correction or deletion
- restrict or object to processing
- data portability
- withdraw consent at any time
- lodge a complaint with a supervisory authority
In Slovenia, the supervisory authority is: Information Commissioner of the Republic of Slovenia (IP-RS).
Requests can be sent to info@rawlab.co. We may ask for identity verification before responding.
Marketing communications
If you subscribe to our newsletter, we may send you marketing emails. You can unsubscribe at any time via the link in the email.
Transactional emails (order confirmations, shipping updates) are not marketing and cannot be unsubscribed from.
Children’s data
Our Services are not intended for children under 16 years of age. We do not knowingly collect personal data from children.
Security
We implement appropriate technical and organizational measures to protect personal data. However, no system is completely secure, and we cannot guarantee absolute security.
Relation to terms & returns
This Privacy Policy operates together with:
- Terms of Service
- Returns & Refund Policy
Personal data related to orders, returns, refunds, and replacements is processed strictly to fulfill contractual and legal obligations (e.g. 14-day withdrawal right, refund processing, damaged goods handling).
Changes to this policy
We may update this Privacy Policy from time to time. Any changes will be published on this page with an updated date.
Contact
For any privacy-related questions or requests, contact us at:
Raw lab d.o.o., Slovenska 58, 1000 Ljubljana, Slovenia