.raw Privacy Policy

Raw lab d.o.o.
Last updated: 14th January 2026

Introduction

This Privacy Policy describes how Raw lab d.o.o., Slovenska 58, 1000 Ljubljana, Slovenia (“Raw lab”, “we”, “us”, “our”) collects, uses, and protects your personal data when you visit our website, make a purchase, or otherwise interact with us via https://www.rawlab.co/store (the “Site”). 

We process personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Slovenian and EU data protection laws. 

By using our Site or Services, you acknowledge that your personal data will be processed as described in this Privacy Policy.

What personal data we collect

Depending on how you interact with us, we may collect the following categories of personal data:

a) Data you provide directly

Name and surname
Billing and shipping address
Email address and phone number
Order and payment confirmation details
Account login details (if you create an account)
Customer support communication

c) Data from third parties

We receive limited data from trusted service providers such as:

Shopify (e-commerce platform)
Payment processors (to process payments securely)
Shipping and fulfillment partners

b) Data collected automatically

When you browse our Site, we may automatically collect:

IP address
Device and browser information
Usage data (pages viewed, interactions)
Cookies and similar technologies

Purposes and legal basis of processing

We process your personal data only when we have a lawful basis to do so, including:

Order processing, payment, and delivery – processing is necessary for the performance of a contract.
Customer support and communication – processing is based on our legitimate interest in providing effective customer service.
Returns, refunds, and complaints handling – processing is required to comply with legal obligations under consumer protection laws.
Website security and fraud prevention – processing is based on our legitimate interest in protecting our website, users, and business.
Marketing emails and newsletters – processing is based on your explicit consent.
Website analytics and performance monitoring – processing is based on our legitimate interest and, where required, your consent through cookies.

You may withdraw your consent at any time where consent is the legal basis for processing.

We use cookies to:

ensure proper website functionality
remember preferences
analyze traffic and performance

You may withdraw your consent at any time where consent is the legal basis for processing.

You can manage or disable cookies via your browser settings. Blocking cookies may affect site functionality.

More information: https://www.shopify.com/legal/cookies

Sharing personal data

We only share personal data when necessary and with trusted partners, including:

payment providers
logistics and delivery partners
IT and hosting providers
accounting and legal service providers (when required by law)

We do not sell personal data.

Data may be transferred outside the EU only where adequate safeguards (e.g. Standard Contractual Clauses) are in place.

Data retention

We retain personal data only as long as necessary:

for order fulfillment and customer support
to comply with tax, accounting, and consumer laws
to resolve disputes or enforce agreements

When data is no longer required, it is securely deleted or anonymized.

Your rights under GDPR

You have the right to:

access your personal data
request correction or deletion
restrict or object to processing
data portability
withdraw consent at any time
lodge a complaint with a supervisory authority

In Slovenia, the supervisory authority is:
Information Commissioner of the Republic of Slovenia (IP-RS)

Requests can be sent to info@rawlab.co.
We may ask for identity verification before responding.

Marketing communications

If you subscribe to our newsletter, we may send you marketing emails. You can unsubscribe at any time via the link in the email. 

Transactional emails (order confirmations, shipping updates) are not marketing and cannot be unsubscribed from.

Children’s data

Our Services are not intended for children under 16 years of age. We do not knowingly collect personal data from children.

Security

We implement appropriate technical and organizational measures to protect personal data. However, no system is completely secure, and we cannot guarantee absolute security.

Relation to terms & returns

This Privacy Policy operates together with:

Terms of Service
Returns & Refund Policy

Personal data related to orders, returns, refunds, and replacements is processed strictly to fulfill contractual and legal obligations (e.g. 14-day withdrawal right, refund processing, damaged goods handling).

Changes to this policy

We may update this Privacy Policy from time to time.
Any changes will be published on this page with an updated date.

Contact

For any privacy-related questions or requests, contact us at:
info@rawlab.co

Raw lab d.o.o., Slovenska 58, 1000 Ljubljana, Slovenia