Privacy Policy

This Privacy Policy explains how Shirt Lily Training processes personal data when you use shirtlilyband.click. It describes the categories of data we collect, the purposes for which we use it, the circumstances in which we share it, and the rights that may be available to you.

Effective Date
As stated in this policy
Scope
All users of our services
Questions?
Contact Information

Contact Information

Privacy email
sales@shirtlilyband.click
Telephone
+386 31 642 898
Mailing address
Trg svobode 1, 8290 Sevnica
Privacy contact
01 · Purpose

Purposes of Processing

We use personal data to operate and improve the website, respond to inquiries, manage training-related communications, maintain security, prevent misuse, analyse site performance, comply with legal obligations, and keep records needed for administration and dispute handling. Where required, we also use data to manage consent choices and cookie preferences.

Processing is limited to the operational purposes described below.
02 · Sharing

Service Providers and Other Recipients

We may share personal data with trusted service providers that support website hosting, technical maintenance, analytics, security, communications, or administrative operations. These parties act on our instructions where they process data for us and are expected to use appropriate safeguards. If a business transfer or restructuring occurs, personal data may be disclosed as part of that transaction subject to applicable legal requirements.

Service providers receive only the information needed to perform their assigned functions.
GDPR
Regulation

GDPR Notice

Where the GDPR applies, we process personal data on a lawful basis such as consent, performance of a contract, compliance with legal obligations, or our legitimate interests, depending on the context. We limit processing to what is relevant and necessary for the stated purpose and apply appropriate safeguards to protect personal data.

Regulation
Because Shirt Lily Training operates in the European context and serves users in Slovenia and other EEA locations, GDPR applies where we process personal data of individuals in the European Economic Area.
This section is intended for individuals whose data is protected by the GDPR.
GDPR Compliant

GDPR Rights

If the GDPR applies to your data, you may have rights to access, rectify, erase, restrict, or object to processing, and to receive a copy of certain data in a portable format. Where processing is based on consent, you may withdraw consent at any time for future processing. You may also raise concerns with the competent supervisory authority if you believe your rights have been affected.

GDPR rights are available subject to the conditions and limits set out in applicable law.
01 · Collection

Personal Data We Collect

We may collect identifiers and contact details, training or inquiry information you submit, account or registration details if applicable, payment-related information handled through the relevant transaction process, and technical data such as device, browser, and usage information. We may also process communications you send to us and records of your interactions with the site.

The categories of data collected depend on how users interact with the site and services.
02 · Sources

Sources of Personal Data

We receive personal data directly from you when you complete forms, send messages, or otherwise use the site. We also obtain data automatically through your browser or device when you access the website, and from third parties that support hosting, analytics, security, or related operational functions.

Information comes from users, site activity, and service providers involved in operating the website.
03 · Cookies

Types of Cookies

Essential cookies are used to support core site functions, such as page navigation, security, and form handling. Preference cookies may remember your settings. Analytics cookies help us understand how the site is used and identify technical issues. Cookies may be session-based or persistent, depending on their purpose and lifespan.

The site uses essential and non-essential cookies, each serving different operational purposes.
04 · Controls

Cookie Controls

You may block or delete cookies through your browser settings, although some site functions may not work properly if you do so. Where the site provides a cookie preference tool, you may use it to adjust non-essential cookies. Browser-based controls do not usually remove cookies that have already been stored, so you may need to clear them separately.

Cookie settings can be managed through browser controls and, where offered, site preferences.
User Rights

Your Rights

Depending on your location and the way we process your data, you may have rights to access, correct, delete, restrict, or object to certain processing, and to request portability where applicable. Some requests may be limited where we must keep information for legal, security, or operational reasons.

Available rights may vary depending on the legal basis for processing and applicable local law.
Requests

How to Make a Request

To exercise a privacy right, please submit a clear request using the contact details in this policy and describe the data or processing activity involved. We may ask for information needed to verify your identity and to understand the request. If a request is complex or numerous, we may need additional time within the limits allowed by law.

Requests are handled after reasonable verification of identity and scope.
Data Retention

Data Retention

We keep personal data only for as long as needed for the purpose for which it was collected, including to provide services, maintain records, resolve disputes, comply with legal obligations, and support security or fraud prevention. When data is no longer required, we delete it, anonymise it, or retain it only where the law allows continued storage.

Retention periods depend on the purpose of processing and any legal or operational requirement to keep records.
Policy Updates

Policy Changes

We may update this Privacy Policy from time to time to reflect changes in our processing practices, legal requirements, or operational needs. The revised version will apply from the date it is posted unless a different effective date is stated. Where a change is material, we will take reasonable steps to draw attention to it.

We review this policy when our practices or legal obligations change.