Privacy & Cookie Policy
Last updated: 9 October 2026
1. Introduction
Kaaita d.o.o. (“Kaaita”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal data.
This Privacy & Cookie Policy explains how we collect, use, store and share personal data when you visit www.kaaita.com(the “Website”), purchase our products, subscribe to our newsletter, contact us or otherwise interact with us.
We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”), applicable Slovenian legislation and, where applicable, other data protection laws such as the UK GDPR.
2. Data Controller
The controller responsible for your personal data is:
Kaaita d.o.o.
Prikrnica 14
1251 Moravče
Slovenia
Email: sayhay@kaaita.com
Website: www.kaaita.com
3. Personal Data We Collect
Depending on how you interact with us, we may collect the following information.
Website and technical information
When you visit the Website, we or our service providers may collect:
IP address
Browser, network and device information
Pages visited before and during your visit
Clicks, internal links, searches and scrolling activity
Dates, times and duration of visits
Cookie preferences
Shopping cart and checkout activity
Orders and purchases
When you place or begin placing an order, we may collect:
Name and surname
Email address and telephone number
Billing and shipping address
Company name and VAT identification number, where provided
Products ordered and order value
Delivery method
Order, payment and refund status
Correspondence relating to your order
We do not normally receive or store your complete payment card details. Payments are processed securely by the payment provider selected at checkout.
Customer accounts
If customer accounts are available and you create one, we may process your login information, saved addresses, order history, shopping cart and account preferences.
Enquiries and direct communication
When you contact us, request information or discuss a direct or custom order, we may collect your name, contact information, company details and the contents of your communication.
Newsletter subscriptions
When you subscribe to our newsletter, we collect your email address and any other information you voluntarily provide, such as your name.
4. How and Why We Use Personal Data
We process personal data for the following purposes and legal bases.
To process and deliver orders
We use order, contact, billing and delivery information to:
Process purchases and payments
Deliver products
Send order and shipping notifications
Manage returns, refunds and complaints
Provide customer service
The legal basis is the performance of a contract or taking steps at your request before entering into a contract.
To meet legal obligations
We process and retain information when required for accounting, taxation, consumer protection, fraud prevention and other legal obligations.
The legal basis is compliance with a legal obligation.
To respond to enquiries
We use the information you provide to respond to questions, prepare offers and communicate about potential or existing business relationships.
The legal basis is taking steps before entering into a contract or our legitimate interest in responding to enquiries and managing our business relationships.
To operate and secure the Website
We process necessary technical information to provide the Website, maintain security, prevent misuse, preserve shopping cart and checkout functions and troubleshoot technical problems.
The legal basis is our legitimate interest in operating a secure and functional Website and, where applicable, the performance of a contract.
Analytics and improvement
With your consent, we use analytics information to understand how visitors use the Website, assess traffic and improve its content, performance and shopping experience.
Where analytics depends on non-essential cookies or similar technologies, these technologies are activated only after you give consent through our cookie banner.
Newsletter and marketing communications
We send newsletters and promotional communications only where we have an appropriate legal basis, normally your consent.
You can withdraw your consent at any time by clicking the unsubscribe link in an email or contacting us at sayhay@kaaita.com. Withdrawing consent does not affect processing that took place before the withdrawal.
If available and permitted by applicable law, we may send a reminder after you begin but do not complete an online purchase. You may opt out of these messages.
5. Website Hosting and Squarespace
The Website and online store are hosted by Squarespace.
Squarespace may process personal data needed to provide, secure and improve the Website and its commerce functions. This may include browser, network and device information, IP address, page activity, account information, shopping cart information and order data.
More information is available in the Squarespace Privacy Policy.
6. Payments
Payments may be processed by Stripe and PayPal, depending on the payment method you select.
These providers receive information necessary to process the payment, prevent fraud, comply with legal obligations and manage disputes or refunds. They process certain personal data under their own privacy policies.
Payment providers may carry out independent fraud-prevention and security checks. Kaaita does not receive or store your complete payment card number.
7. Google Analytics
With your consent, we may use Google Analytics to understand how visitors interact with the Website.
Google Analytics may process information such as:
IP address
Device and browser information
Approximate location
Pages visited
Referring website
Interactions with the Website
Dates, times and duration of visits
Google Analytics is activated only in accordance with the cookie preferences available on the Website.
More information is available in the Google Privacy Policy.
8. Email Communications
We may use Squarespace Email Campaigns or another email service provider to manage newsletter subscriptions and send communications.
Our service provider may process your email address, subscription status and information about delivery and interaction with emails. We use this information to operate our mailing list and understand whether our communications are useful.
You can unsubscribe at any time using the link included in every marketing email.
9. Cookies
Cookies are small text files stored on your device when you visit a website. The Website uses cookies and similar technologies for the purposes described below.
Necessary cookies
Necessary cookies support essential functions such as:
Website security
Cookie preferences
Shopping cart and checkout
Customer accounts
Fraud prevention
URL redirects
These cookies are required for the Website to function and do not require consent where they are strictly necessary.
Analytics and performance cookies
These cookies help us understand Website traffic, visitor activity and performance. They may be used by Squarespace Analytics and Google Analytics.
They are used only after you provide consent where required.
Preference and functional cookies
These cookies remember choices and settings that improve your experience. Where they are not strictly necessary, they are used only with your consent.
Managing your cookie preferences
When you first visit the Website, you can accept, decline or manage non-essential cookies through our cookie banner.
You can change or withdraw your consent at any time by using the “Manage Cookies” option available on the Website. You may also delete cookies through your browser settings.
Withdrawing consent does not affect the lawfulness of processing carried out before consent was withdrawn. Restricting cookies may affect certain Website features.
For current information about cookies used by Squarespace, visit The Cookies Squarespace Uses.
10. Who We Share Personal Data With
We may share personal data only where necessary with:
Squarespace, as our Website and online-store provider
Stripe and PayPal, as payment providers
Google, where Google Analytics is enabled with consent
Email communication and newsletter providers
Delivery, postal and logistics providers
IT, hosting and technical-support providers
Accountants, legal advisers and other professional advisers
Public authorities, courts or law-enforcement bodies where required by law
A buyer or successor in connection with a merger, restructuring or sale of all or part of our business
We do not sell personal data.
Service providers may use personal data only for the agreed services or as otherwise permitted by applicable law.
11. International Data Transfers
Some of our service providers may process personal data outside Slovenia or the European Economic Area.
Where required, such transfers are protected by an adequacy decision, the European Commission’s Standard Contractual Clauses or another legally recognised safeguard.
Further information about international transfers is available in the privacy policies of the relevant service providers.
12. Data Retention
We retain personal data only for as long as necessary for the purpose for which it was collected.
In particular:
Order, invoice and transaction information is retained for the periods required by applicable accounting, taxation and consumer-protection laws.
Customer-service and enquiry records are retained for as long as necessary to respond, manage the relationship and establish or defend legal claims.
Newsletter information is retained until you unsubscribe or we discontinue the mailing list, subject to limited records needed to respect your opt-out.
Customer-account information is retained while the account remains active and afterwards where required for legal or contractual purposes.
Cookie and analytics information is retained according to the applicable cookie duration and the settings of the relevant service provider.
We may retain information for longer where required by law or where necessary for legal proceedings.
13. Your Rights
Subject to applicable law, you may have the right to:
Request access to your personal data
Request correction of inaccurate or incomplete data
Request deletion of your personal data
Request restriction of processing
Object to processing based on legitimate interests
Receive certain data in a structured, commonly used and machine-readable format
Request transfer of eligible data to another controller
Withdraw consent at any time where processing is based on consent
Lodge a complaint with a data-protection supervisory authority
To exercise your rights, contact us at sayhay@kaaita.com. We may need to request additional information to verify your identity.
You also have the right to lodge a complaint with:
Information Commissioner of the Republic of Slovenia
Dunajska cesta 22
1000 Ljubljana
Slovenia
Email: gp.ip@ip-rs.si
Website: https://www.ip-rs.si
14. Security
We use reasonable organisational and technical measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.
However, no internet transmission or electronic storage system can be guaranteed to be completely secure.
15. Children’s Privacy
The Website is not intended to collect personal data directly from children. Purchases must be made by adults or with the involvement of a parent or legal guardian.
If you believe that a child has provided personal data to us without appropriate permission, contact us at sayhay@kaaita.com.
16. Changes to This Policy
We may update this Privacy & Cookie Policy when our practices, services or legal obligations change.
The latest version will always be published on this page, together with the date of the most recent update.
17. Contact
For questions about this Privacy & Cookie Policy or the processing of your personal data, contact:
Kaaita d.o.o.
Prikrnica 14
1251 Moravče
Slovenia
Email: sayhay@kaaita.com

