Privacy policy

Last updated: July 2026

Informative translation. Dreya Candles is a business registered in Romania, so the rules described here are those of Romanian and European Union law. The Romanian version of this page is the legally binding one — switch the language to RO to read it.

The privacy of your data matters to us. This policy explains what data we collect, why, and how we protect it, in line with Regulation (EU) 2016/679 (GDPR).

1. Data controller

Cojocea Andreea Persoană Fizică Autorizată, tax ID (CUI) 54712598, registered office at Bulevardul Dunărea, nr. 19A, Galați, jud. Galați, email dreyacandles@gmail.com.

2. What data we collect

  • Identification and contact details: name, email, phone;
  • Delivery and billing address;
  • Order details (products, amounts) — we do not store card details, these are processed securely by Stripe;
  • Technical data: IP address, browser type, cookies.
  • Photos you optionally attach to the contact form (for example a product damaged in transit). We keep them in a private space that only Dreya Candles can access, and use them solely to resolve your report.

3. Why we use it

  • Processing and delivering orders;
  • Communication about your order (confirmations, updates);
  • Meeting legal obligations (for example invoicing);
  • The "back in stock" notice, if you ask for it on the page of a sold-out product: we use your address once, for that product only, and don't add you to any list;
  • Improving the experience on the site.

4. Who we share data with

Data may only be shared with providers needed to deliver the service: the payment processor (Stripe), the courier company and, where relevant, the email provider. We do not sell your data.

5. How long we keep data

We keep order data for the period required by tax law (as a rule 10 years for accounting documents). All other data we keep for as long as needed for the purpose it was collected for. Photos attached to a contact message are permanently deleted together with the message, once the report is resolved.

6. Your rights

You have the right of access, rectification, erasure, restriction, objection and data portability. You can exercise these rights by writing to us at dreyacandles@gmail.com. You can also contact the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP): dataprotection.ro.

7. Cookies

We use cookies to make the site work. Details on the Cookie policy page.