Privacy Policy

Last updated: 28 June 2026

1. Data controller

TOP GUIDE S.R.L., VAT no. 54815518, J2026036188000, Str. Calea Roșiori, Nr. 104, Sat Văcărești, Comuna Drăgănești de Vede, Teleorman, 147130, Romania, is the controller of your personal data.

Email: comenzi@magicgift.ro · Phone: 0779 243 541

Data is processed in accordance with Regulation (EU) 2016/679 (GDPR), Romanian Law no. 190/2018 and Law no. 506/2004.

2. What data we collect

We collect the following personal data needed to process orders:

• First and last name;
• Delivery address (county, locality, street, postal code);
• Phone number;
• Email address;
• The images you upload to personalize the product.

3. Purpose of processing

• Processing and delivering orders;
• Communicating with the customer about order status;
• Sending order confirmation by email;
• Complying with legal obligations (invoicing, accounting);
• Direct marketing and promotion to existing customers (offers, new products, personalized ads).

4. Legal basis

Processing is based on performance of the contract (placing the order) under Art. 6(1)(b) GDPR and on legal obligations under Art. 6(1)(c) GDPR.

For direct marketing to existing customers — including showing personalized ads through customer lists (Customer Match) — processing is based on legitimate interest under Art. 6(1)(f) GDPR. You may object to this processing at any time.

5. Storage period

Personal data is stored for as long as necessary to fulfil the stated purposes, but no longer than 3 years from the last order, except for data required by legal obligations (invoices — 10 years).

Data category	Storage period
Order and contact data	Maximum 3 years from the last order
Invoices and accounting documents	10 years (legal obligation)
Images uploaded for personalization	Maximum 12 months after order completion

6. Recipients

Data may be shared with:

• Courier services (FanCourier, Sameday) — for delivering orders;
• Hosting and storage services (Vercel, Supabase, Cloudflare) — for running the website;
• Email services (Resend) — for notifications;
• The payment processors Netopia Payments (Romania) and Stripe (international) — for online card payments. Card details are entered directly on the processor's secure platform; we neither see nor store them;
• Invoicing services (FGO) — for issuing invoices;
• Analytics services (Google Analytics 4, Vercel Analytics) — for website usage statistics;
• Advertising platforms (Google — Google Ads; Meta — Facebook/Instagram; TikTok) — for measuring conversions and displaying relevant ads. Contact data is transmitted only in encrypted (hashed) form.

Transfers outside the European Economic Area

Some of the providers above (Vercel, Cloudflare, Google, Meta, TikTok) are companies based in the United States or process data outside the EEA. These transfers are carried out on the basis of the Standard Contractual Clauses approved by the European Commission and/or the EU-U.S. Data Privacy Framework, which ensure an adequate level of data protection.

The images you upload

The photos you upload to personalize the product are stored on Cloudflare R2 and are used exclusively to produce your order. We keep them for a maximum of 12 months after order completion (for possible reorders or complaints), after which they are deleted. You can request their deletion at any time by writing to comenzi@magicgift.ro.

7. Marketing and advertising audiences (Customer Match)

We may use your email address and/or phone number, transmitted in irreversibly encrypted form (SHA-256 hashing), to advertising platforms such as Google (Google Ads) and Meta (Facebook/Instagram), in order to:

• show you relevant ads for our products;
• create similar audiences (people with a profile resembling our customers);
• exclude you from certain campaigns (for example, to avoid showing you ads for products you already bought).

The transmitted data is encrypted, is not sold and is not used by these platforms for purposes other than those above. The legal basis is legitimate interest (Art. 6(1)(f) GDPR). You may object at any time by writing to comenzi@magicgift.ro or manage your ad preferences directly in your Google or Facebook account.

8. Your rights

Under the GDPR, you have the right to:

• Access your personal data;
• Rectification of inaccurate data;
• Erasure of data (the “right to be forgotten”);
• Restriction of processing;
• Data portability;
• Object to processing.

To exercise these rights, contact us at comenzi@magicgift.ro or 0779 243 541.

9. Complaints

You have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) — dataprotection.ro.

For consumer disputes you may also contact the National Authority for Consumer Protection (ANPC) or use the European online dispute resolution platform: consumer-redress.ec.europa.eu.

10. Security

We implement appropriate technical and organizational measures to protect personal data, including SSL/TLS encryption, restricted access and secure storage.