Privacy policy

Last updated: February 3, 2025

This Privacy Policy describes how Gekko (“the website,” “we,” “us,” or “our”) collects, uses, and discloses your personal data when you visit or use our services or make a purchase on www.gekko.si (“the website”), or otherwise interact with us in relation to the website (together, the “Services”). In this Privacy Policy, “you” and “your” mean you as the user of the Services, whether you are a customer, a website visitor, or another individual whose data we collect in accordance with this Privacy Policy.

Please read this Privacy Policy carefully.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time, including due to changes in our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on the website, update the “Last updated” date, and take any other steps required by applicable law.

How we collect and use your personal data

To provide the Services, we collect personal data about you from different sources, as described below. The data we collect and use depends on how you interact with us.

In addition to the specific uses listed below, we may use the data we collect about you to communicate with you, provide or improve the Services, comply with applicable legal obligations, enforce applicable Terms of Service, and protect or defend the Services, our rights, and the rights of our users or others.

What personal data we collect

Data we collect directly from you
Data you provide directly through our Services may include:

  • Contact details, including your name, address, phone number, and email address.

  • Order information, including your name, billing address, shipping address, payment confirmation, email address, and phone number.

  • Account information, including your username, password, security questions, and other details used for account security.

  • Customer support information, including details you choose to include when communicating with us, such as messages sent via the Services.

Some features of the Services may require you to provide certain information about yourself directly. You may choose not to provide such information, but this may prevent you from using or accessing those features.

Data we collect about your use
We may also automatically collect certain information about your interaction with the Services (“Usage Data”), using cookies, pixels, and similar technologies. Usage Data may include information about how you access and use our website and your account, including device information, browser, network connection, IP address, and other details of your interaction with the Services.

Data we obtain from third parties
We may also receive data about you from third parties, including vendors and service providers who collect data on our behalf, such as:

  • Companies that support our website and Services, such as Shopify.

  • Payment processors, who collect payment details (e.g., bank account, credit/debit card information, billing address) to process your payment, fulfill your orders, and provide products or services requested to fulfill our contract with you.

When you visit our website, open or click on emails we send, or interact with our Services or ads, we or third parties we work with may automatically collect certain data using online tracking technologies such as pixels, web beacons, SDKs, third-party libraries, and cookies.

All data obtained from third parties will be treated in accordance with this Privacy Policy. See also the section Third-party websites and links below.

How we use your personal data

  • Providing products and services. We use your personal data to provide the Services and fulfill our contract with you, including processing your payments, fulfilling your orders, sending notifications about your account, purchases, returns, exchanges, or other transactions, creating and managing your account, arranging deliveries, and enabling returns or exchanges.

  • Marketing and advertising. We may use your personal data for marketing and promotional purposes, such as sending marketing, advertising, and promotional communications via email, SMS, or post, and showing ads for products or services. This may include tailoring our Services and advertising on our website and other websites. If you are an EEA resident, the legal basis for this processing is our legitimate interest in marketing our products (Art. 6(1)(f) GDPR).

  • Security and fraud prevention. We use your personal data to detect, investigate, or act on potential fraudulent, illegal, or malicious activity. If you register an account, you are responsible for maintaining your login credentials securely. If you believe your account has been compromised, contact us immediately. If you are an EEA resident, this processing is based on our legitimate interest in ensuring the security of our website (Art. 6(1)(f) GDPR).

  • Communicating with you and improving Services. We use your personal data to provide customer support and improve our Services. This is based on our legitimate interest in responding to you, providing effective services, and maintaining our business relationship (Art. 6(1)(f) GDPR).

Cookies

Like many websites, we use cookies. For specific information about the cookies used in relation to Shopify-powered stores, see Shopify Cookie Policy. We use cookies to operate and improve our website and Services (including remembering your actions and settings), perform analytics, and better understand user interactions. Third parties and service providers may also use cookies to tailor Services, products, and advertising on our website and other websites.

Most browsers automatically accept cookies, but you can change your browser settings to remove or reject cookies. Note that disabling cookies may negatively affect your user experience and cause some Services or features to stop working. Blocking cookies may also not fully prevent information from being shared with third parties such as our advertising partners.

How we disclose personal data

We may disclose your personal data to third parties in certain circumstances, including for contract fulfillment, legitimate business purposes, or other reasons consistent with this Privacy Policy. For example:

  • With vendors or third parties who perform services on our behalf (e.g., IT management, payment processing, data analysis, customer support, cloud storage, fulfillment, and shipping).

  • With business and marketing partners, to provide Services and advertising.

  • With your consent, such as when you request that we disclose information to third parties (e.g., shipping providers, social media integrations).

  • With our affiliates or within our corporate group in our legitimate interest to run our business.

  • In connection with a business transaction (e.g., merger, bankruptcy), to comply with legal obligations, enforce Terms of Service, or protect our rights or those of our users.

We disclose the following categories of personal data:

  • Identifiers (basic contact information, some order/account data).

  • Commercial data (order, shopping, customer support information).

  • Internet or network activity data (Usage Data).

  • Geolocation data (IP-based or other technical indicators).

We do not use or disclose sensitive personal data without your consent, nor to infer characteristics about you.

Third-party websites and links

Our website may contain links to third-party websites or platforms. If you follow such links, please review their privacy and security policies. We are not responsible for the privacy or security of those websites. Information you share on public or semi-public areas, including on third-party social platforms, may be visible to other users without restrictions. Our inclusion of such links does not imply endorsement.

Children’s data

The Services are not intended for children, and we do not knowingly collect data about children. If you are a parent or guardian of a child who has provided us with personal data, please contact us to request deletion.

As of the effective date of this Privacy Policy, we do not knowingly “sell” or “share” personal data of individuals under 16 years of age (as defined by applicable law).

Security and data retention

Please note that no security measures are perfect or impenetrable, and we cannot guarantee “absolute security.” Data transmitted to us may not be secure in transit. Do not use unsecured channels to send sensitive information.

How long we retain your data depends on factors such as whether we need it to maintain your account, provide Services, meet legal obligations, resolve disputes, or enforce agreements.

Your rights

Depending on where you live, you may have some or all of the following rights regarding your personal data:

  • Right of access: request access to personal data we hold about you.

  • Right of erasure: request that we delete personal data we hold about you.

  • Right of rectification: request corrections of inaccurate personal data.

  • Right to data portability: request a copy of your personal data and its transfer to a third party.

  • Right to restrict processing: request that we stop or limit the processing of your data.

  • Right to withdraw consent: if processing is based on consent, you may withdraw it.

  • Right to appeal: if we deny your request, you may appeal.

  • Communication preferences: you can unsubscribe from marketing emails at any time. You may still receive non-promotional communications about your account or orders.

We will not discriminate against you for exercising your rights. We may need to verify your identity before fulfilling your request. You may also authorize an agent to act on your behalf, provided they show proof of authorization. We will respond within timeframes required by law.

Complaints

If you have concerns about how we process your data, please contact us at the details below. If you are not satisfied with our response, you may have the right to complain to your local data protection authority. A list of EEA supervisory authorities is available here

International users

Your personal data may be transferred to, stored, and processed outside your country of residence, including by our employees, service providers, and partners.

If we transfer your data from Europe, we rely on recognized transfer mechanisms such as the European Commission’s Standard Contractual Clauses, or UK-approved equivalents, unless transferring to a country deemed to provide adequate protection.

Contact us

If you have any questions about this Privacy Policy or our privacy practices, or if you would like to exercise your rights, please email us at info@gekko.si or write to us at Kongresni trg 3, Ljubljana, 1000, SI.

Unless stated otherwise under applicable data protection laws, we are the controller of your personal data.