Skip to main content

Privacy policy

Privacy Policy — UnlockBali

Effective date: April 16, 2026
Last reviewed: April 16, 2026
Contact: [VERIFY: calatori.vise@gmail.com or alternate contact email]

Legal disclaimer: This document is provided as a starting point. Have a qualified lawyer in your jurisdiction review before publishing. It does not constitute legal advice.

1. Who we are

UnlockBali is operated by Deni Matros, a sole trader based in Romania.

If you have any questions about how we handle your personal data, contact us at the email above.

2. What data we collect and why

We only collect data we actually need. Here is what we collect, why, and the legal basis we rely on.

2.1 Order and account data

When you purchase a product, Shopify collects:

  • Your name
  • Email address
  • Billing address
  • Payment information (processed by Shopify Payments, Stripe, or PayPal — we never see your full card details)
  • Order history

Legal basis: Performance of a contract (Article 6(1)(b) GDPR). We need this data to deliver your order and send your download link.

Retention: We keep transaction records for as long as legally required — typically up to 7 years for tax and accounting purposes.

2.2 Email marketing (exit popup / newsletter)

If you enter your email address in our exit popup or newsletter form, we collect:

  • Your email address

Legal basis: Consent (Article 6(1)(a) GDPR). You can withdraw your consent at any time by clicking the unsubscribe link in any email we send.

Retention: Until you unsubscribe or ask us to delete your record.

2.3 Website analytics

We use analytics tools (Google Analytics and/or Meta Pixel — see Section 5) to understand how visitors use our website. These tools may collect:

  • IP address (anonymised where possible)
  • Browser and device type
  • Pages visited
  • Referral source
  • Time spent on site

Legal basis: Legitimate interest (Article 6(1)(f) GDPR) in understanding our audience and improving the website, balanced against your privacy interests. Where required by applicable law, we obtain your consent via a cookie banner before loading these tools.

Retention: As defined by each third-party tool's settings; typically up to 14 months in Google Analytics.

3. Cookies

We use cookies and similar tracking technologies. You can control these through our cookie banner when you first visit the site, or by adjusting your browser settings.

  • Essential cookies (e.g., Shopify session cookie, cart cookie) — Make the store work; you cannot check out without these. You cannot opt out of essential cookies.
  • Analytics cookies (e.g., Google Analytics: _ga, _gid) — Count visits and understand traffic sources. You may opt out via the cookie banner.
  • Marketing cookies (e.g., Meta Pixel: fbp, fbc) — Measure ad performance and enable retargeting. You may opt out via the cookie banner.

For a full list of cookies Shopify places, see Shopify's cookie policy.

4. How we use your data

We use your data to:

  • Process and deliver your order
  • Send your PDF download link
  • Respond to customer service inquiries
  • Send marketing emails (only if you opted in)
  • Improve our website and understand our audience
  • Comply with our legal obligations (tax, accounting)

We do not sell your data. We do not use it for automated decision-making or profiling that has legal or similarly significant effects on you.

5. Who we share your data with

We do not sell or rent your data. We share it only with the service providers listed below, all of whom are contractually bound to protect it.

6. International data transfers

Our primary platform, Shopify, is headquartered in Canada and uses servers in the United States. Shopify relies on the EU Standard Contractual Clauses (SCCs) approved by the European Commission to lawfully transfer personal data from the EU/EEA to the US. Details are available in Shopify's data processing agreement.

Other providers listed above (Google, Meta) similarly rely on SCCs or other approved transfer mechanisms.

7. Your rights under GDPR

As an EU resident, you have the following rights:

  • Access — request a copy of the personal data we hold about you.
  • Rectification — ask us to correct inaccurate data.
  • Erasure ("right to be forgotten") — ask us to delete your data, subject to our legal obligations (e.g., we may need to keep transaction records for tax purposes).
  • Restriction — ask us to pause processing your data while a dispute is resolved.
  • Portability — receive your data in a machine-readable format.
  • Objection — object to processing based on legitimate interest.
  • Withdraw consent — for any processing based on consent (e.g., marketing emails), you can withdraw at any time.

To exercise any right, email calatori.vise@gmail.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Romanian data protection supervisory authority:

Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP)
Website: www.dataprotection.ro
Email: anspdcp@dataprotection.ro
Phone: +40 318 059 211

8. Data security

We take reasonable measures to protect your data, including relying on Shopify's PCI-compliant infrastructure. No system is 100% secure; if you suspect a security issue, contact us immediately at calatori.vise@gmail.com.

9. Children

Our website is not intended for children under 16. We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.

10. Changes to this policy

We may update this policy from time to time. When we do, we will update the effective date at the top of this page. Material changes will be notified by email if you are a registered customer.

11. Contact

For any privacy-related questions or requests:

Email: calatori.vise@gmail.com
Deni Matros
[FILL IN: full registered address, city, county, postal code, Romania]
Romania