Privacy Policy

This Privacy Policy explains how Maneforge d.o.o. (“Maneforge”, “we”, “us” or “the Controller”) collects, uses, stores and protects personal data when you visit our website, create an account, place an order, manage a subscription, subscribe to marketing communications, enter a promotion or contact us.

We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable Slovenian law.

1. Controller Details

Maneforge d.o.o.
Gubčeva ulica 12
2230 Lenart v Slovenskih goricah
Slovenia

Company ID: 9748423000
VAT ID: 26220237
Phone: +386 31 650 003
Email: boss@maneforge.com

You may contact us at any time regarding the processing of your personal data or the exercise of your data protection rights.

2. Personal Data We Process

The personal data we process depends on how you interact with us.

Account and Profile Data

When you create or use a My Profile account, we may process:

  • First and last name
  • Display name
  • Email address
  • Phone number
  • Billing and delivery addresses
  • Optional profile picture
  • Account login and security information
  • Account activity and preferences

Your display name and, where applicable, your profile picture may be visible if you submit a product review or use another public website feature.

Passwords are stored in protected, encrypted or hashed form. We cannot view your password.

Orders and Subscriptions

When you place an order or start or manage a subscription, we may process:

  • Products and quantities ordered
  • Order and purchase history
  • Subscription plan, frequency and status
  • Renewal and delivery dates
  • Changes made to a subscription
  • Delivery and billing information
  • Payment status
  • Discounts and promotional codes
  • Returns, complaints and refunds
  • Invoice and transaction numbers
  • Customer communications relating to an order or subscription

Payment Data

Payments and recurring subscription payments are processed through Stripe.

We may receive and store:

  • Payment status
  • Amount, currency and transaction reference
  • Stripe customer or payment-method identifier
  • Card type and masked card details, such as the last four digits
  • Payment failure or renewal information

We do not receive or store your complete card number or card security code. Saved payment methods are stored securely by Stripe and represented in our system by a payment token.

Newsletter and Marketing Data

If you subscribe to our newsletter or agree to receive marketing communications, we may process:

  • Name
  • Email address
  • Phone number, if provided
  • Marketing preferences
  • Consent and unsubscribe records
  • Email interaction information, such as opens and clicks, where enabled and legally permitted
  • Approximate location derived from your IP address

Sweepstakes and Promotions

If you enter a sweepstakes or promotion, we may process:

  • Name
  • Email address
  • Phone number
  • Information required by the promotion rules
  • Delivery address where necessary to send a prize

Website and Technical Data

When you use our website, we may process:

  • IP address
  • Browser and device information
  • Approximate network location
  • Pages visited
  • Referrer URL
  • Session duration
  • Cookie identifiers and preferences
  • Security and technical logs

Technical information required for website security and operation may be processed without optional cookies. Analytics and advertising data are processed only where permitted and, where required, after you provide consent.

Communications

When you contact us, we may process your contact details, the contents of your message and any information required to handle your question, complaint or request.

3. How We Collect Personal Data

We collect personal data:

  • Directly from you when you create an account, place an order, start a subscription, complete a form or contact us
  • Automatically through our website, cookies and security systems
  • From payment providers such as Stripe
  • From delivery and logistics providers
  • From marketing platforms where you have consented to their use

4. Purposes and Legal Bases

We process personal data only when we have a valid legal basis under Article 6 of the GDPR.

Performance of a Contract

We process data where necessary to:

  • Create and manage your account
  • Process, deliver and manage orders
  • Create and manage subscriptions
  • Process initial and recurring payments
  • Manage subscription renewals and delivery dates
  • Handle returns, refunds and customer support
  • Send order, payment, subscription and delivery notifications

Legal Obligations

We process and retain information where necessary to comply with:

  • Accounting and tax requirements
  • Invoice and transaction record obligations
  • Consumer protection requirements
  • Requests from competent public authorities

Consent

We rely on consent for:

  • Email or SMS marketing
  • Non-essential analytics and advertising cookies
  • Other optional processing where consent is legally required

You may withdraw your consent at any time. Withdrawing consent does not affect processing that took place before the withdrawal.

Legitimate Interests

We may process data where necessary for our legitimate interests, including:

  • Protecting our website and accounts
  • Preventing fraud, abuse and payment misuse
  • Maintaining and improving website performance
  • Providing customer support
  • Keeping business and security records
  • Understanding how customers use our services
  • Sending cart reminders where permitted by law

Where consent is legally required for a particular communication or technology, we rely on consent instead.

5. Accounts, Subscriptions and Payments

Your My Profile account allows you to view and manage your account details, orders, addresses, payment methods and subscriptions.

Subscription changes and cancellations must be completed through the subscription section of your My Profile account. We process the information necessary to apply your selected changes and maintain an accurate subscription history.

Subscription payments renew automatically using the saved payment method unless the subscription is paused, cancelled or otherwise changed before the payment is processed.

Emails concerning orders, renewals, payment failures, delivery or subscription status are service messages required to manage your purchase. They are not marketing communications.

6. Cookies

We use necessary cookies to operate the website, maintain your shopping cart, secure your account, process checkout and remember your privacy preferences.

Analytics, personalisation and advertising cookies are used only where permitted and, where required, after you provide consent.

You can change or withdraw your cookie choices at any time through the cookie settings available on our website. More information is provided in our Cookie Policy.

7. Sharing Personal Data

We do not sell personal data.

We may share personal data only where necessary with:

  • Website hosting, development, security and IT providers
  • Stripe and other payment service providers
  • Delivery and logistics companies
  • Accounting, tax, legal and professional advisers
  • Email or SMS service providers
  • Analytics and advertising providers where you have consented
  • Public authorities where disclosure is required by law

Service providers may process personal data only for authorised purposes and must protect it through appropriate contractual, confidentiality and security obligations.

8. International Data Transfers

Some service providers may process personal data outside the European Economic Area.

Where this occurs, we use legally recognised safeguards, such as:

  • An adequacy decision by the European Commission
  • Standard Contractual Clauses
  • Additional technical and organisational safeguards where required

9. Data Retention

We retain personal data only for as long as necessary for the purpose for which it was collected or as required by law.

Typical retention periods are:

  • Account data: while the account remains active
  • Account deletion requests: data not legally required is normally deleted or anonymised within 30 days after verification
  • Order and contractual records: generally 5 years after completion
  • Subscription records: generally 5 years after the subscription ends
  • Invoices and accounting records: 10 years
  • Customer communications: up to 4 years after the last interaction
  • Marketing data: until consent is withdrawn or you unsubscribe
  • Sweepstakes data: until the promotion and any applicable claim period have ended
  • Cookie and analytics data: according to the relevant cookie duration stated in our Cookie Policy
  • Payment tokens: while required for active orders or subscriptions, or until removed, subject to Stripe’s own legal retention obligations

After unsubscribing from marketing, we may retain limited information on a suppression list to ensure that no further marketing messages are sent.

Deleted information may remain in protected backups for up to 30 additional days before being overwritten through the normal backup cycle.

10. Data Security

We use appropriate technical and organisational safeguards designed to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.

These measures include access controls, secure connections, protected account credentials, payment tokenisation, software maintenance and restricted access to personal data.

No online system can be guaranteed to be completely secure. You are responsible for keeping your account password confidential and informing us if you suspect unauthorised use of your account.

11. Providing Personal Data

Providing personal data is generally voluntary. However, certain information is required to create an account, process an order, manage a subscription, take payment or deliver products.

If you do not provide the required information, we may be unable to provide the requested service.

12. Your GDPR Rights

Subject to the conditions provided by applicable law, you have the right to:

  • Access your personal data
  • Rectify inaccurate or incomplete personal data
  • Erase personal data where there is no valid reason to retain it
  • Restrict the processing of personal data
  • Receive eligible data in a structured, commonly used and machine-readable format
  • Object to processing based on legitimate interests
  • Withdraw consent at any time
  • Object to direct marketing at any time

We do not use solely automated decision-making that produces legal or similarly significant effects concerning you.

To exercise your rights, contact boss@maneforge.com. We may request reasonable information to confirm your identity.

We normally respond within one month. For complex or multiple requests, this period may be extended by up to two additional months, in which case we will inform you.

13. Right to Lodge a Complaint

If you believe that your personal data has been processed unlawfully, you may lodge a complaint with the Slovenian supervisory authority:

Informacijski pooblaščenec
Dunajska cesta 22
1000 Ljubljana
Slovenia

Phone: +386 (0)1 230 97 30
Email: gp.ip@ip-rs.si
Website: www.ip-rs.si

You may also contact the data protection authority in the EU or EEA country where you live or work.

14. Changes to This Privacy Policy

We may update this Privacy Policy when our services, technology or legal obligations change. The latest version will always be published on our website with the updated revision date.

Last Updated: August 25, 2026