Privacy policy

Last updated: 31 October 2026. The Romanian version prevails.

1. Data controller

Your personal data is processed by WEBHUNT S.R.L., Str. Semilunei nr. 6, Corp A, ground floor, Sector 2, 020797 Bucharest, Romania, J2021003647403, VAT ID RO43825150, as controller under Regulation (EU) 2016/679 (GDPR).

For any question about your data, write to contact@giclee.ai.

2. What we process and why

Orders. Name, email, phone, delivery and billing address, company name and VAT ID (if you request a company invoice), the products ordered, the names to print on personalised prints and the gift message. We use them to fulfil and deliver the order and send confirmations. Legal basis: performance of the contract (art. 6(1)(b) GDPR).

Personalisation. For personalised prints we process the texts you enter: names, dates (for example the wedding, baptism, birth or death date), the church and godparents' names, and the text of letters. For the memorial print with a photo, the uploaded image is stored on our server, is never public and is used only to print the order. If you do not complete the order, the photo is deleted automatically after 48 hours. For paid orders, the photo is deleted automatically about 90 days after delivery; until then we may use it only for a reprint or to handle a claim. Please upload only photos you have the right to use. Legal basis: performance of the contract (art. 6(1)(b) GDPR).

Payments. Payment is processed by Stripe. We do not receive card details, only the payment confirmation and the last digits of the card, if Stripe provides them.

Accounting. Invoices and order documents are kept for the period required by accounting law. Legal basis: legal obligation (art. 6(1)(c) GDPR).

Waitlist. If you sign up for a collection that is not yet available, we keep your email and the chosen collection to notify you at launch. Legal basis: consent (art. 6(1)(a) GDPR), which you can withdraw at any time.

Offers and news by email. We send offers and news only if you ticked the "Send me offers and news by email" box in the cart. The box is never ticked by default. We keep your email address, the date and time of your consent and the wording you agreed to. With the same consent we may send a single reminder email for an unfinished payment. Order emails (confirmation, shipping, invoice) are sent in any case, as they are needed to perform the contract. You can withdraw consent at any time, free of charge, through the unsubscribe link in every email or by writing to the contact address above. Withdrawing does not affect emails sent before. After you withdraw we stop these emails, but we keep proof of the consent and of the withdrawal for up to 3 years, so we can show it if asked. Legal basis: consent (Art. 6(1)(a) GDPR).

Security. Your IP address is used temporarily, in memory, to limit abusive requests and is not stored in databases. Legal basis: legitimate interest in protecting the site (art. 6(1)(f) GDPR).

3. Who receives the data

• Stripe Payments Europe, Ltd. (Ireland), for payment processing.
• Resend, for sending confirmation emails, from its EU region.
• Cloudflare, Inc., for secure delivery of the site.
• netcup GmbH (Germany), the server provider that hosts the site.
• Sameday Courier (easybox and door delivery), for delivery (name, address, phone).
• Oblio (oblio.eu), the invoicing application, for issuing invoices and submitting them to RO e-Factura.
• Precocious Integrated Solutions S.R.L. (Professional Contab Consulting), for bookkeeping.

Some providers may transfer data outside the European Economic Area, usually to the United States. Such transfers rely on the European Commission's standard contractual clauses or the EU–US Data Privacy Framework.

We do not sell your data and do not use it for advertising.

4. Retention

• Order data: as long as needed to fulfil the order and handle any claims, then for the period required by accounting law for financial documents.
• Photos uploaded for the memorial print: 48 hours if the order is not paid; about 90 days after delivery for paid orders.
• Waitlist: until the collection launches or you unsubscribe.
• Technical logs: 30 days.

5. Your rights

You have the right of access, rectification, erasure, restriction, portability and objection, and the right to withdraw consent at any time. To exercise them, write to contact@giclee.ai. We reply within one month.

You have the right to lodge a complaint with the Romanian data protection authority (ANSPDCP), www.dataprotection.ro.

6. Cookies

Details are in the Cookie policy.