Privacy policy
Last updated: 23 September 2026
DIG d.o.o. ("DIG", "we", "us" or "our") operates this online store and website, including the related information, content, features, tools, products and services (together, the "Services").
Our online store runs on the Shopify platform, which enables us to provide the Services to you and to sell you our products.
This Privacy Policy explains how we collect, use, store and share your personal data when you visit or use our website, create a customer account, make a purchase or another transaction, sign up for marketing messages, contact our customer support or otherwise communicate with us.
If there is a conflict between our Terms of Service and this Privacy Policy regarding the collection, use, processing or sharing of personal data, this Privacy Policy prevails.
Please read this Privacy Policy carefully to understand how we process your personal data and what rights you have in relation to it.
1. Data controller
For the purposes of applicable data protection laws, the controller of your personal data is:
DIG d.o.o.
Mladih gorana 12
11273 Batajnica
Serbia
Tax ID (PIB): 100196309
Email: office@dig.rs
Phone: +381 61 198 9366
2. Personal data we collect and process
By "personal data" we mean information that identifies you or can reasonably be linked to you.
Personal data does not include anonymous or properly anonymised data from which a specific natural person can no longer be identified.
Depending on how you use our website and the Services, we may collect and process the following categories of data:
Contact details
We may collect your first and last name, address, billing address, shipping address, country, phone number and email address.
Order and transaction data
We may process information about the products you view, the products you add to your cart, the products you purchase, your orders, past transactions, product returns, exchanges, refunds, cancelled orders, and the status and method of delivery.
Payment data
In connection with payment we may process information such as the selected payment method, transaction amount, currency, payment status, payment confirmation, transaction identifiers and other information needed to match a payment to your order.
When you pay by payment card or another electronic payment method, certain financial data is processed by authorised payment service providers.
DIG d.o.o. does not store full payment card numbers or card security codes when that data is processed directly by an authorised payment service provider.
The processing of payment data may additionally be governed by the privacy policy and terms of service of the relevant payment service provider.
Customer account data
If you create a customer account, we may process the data needed to identify the account, your preferences, account settings, order history and other data associated with the account.
Authentication data may be processed through Shopify's systems or other service providers we use to manage customer accounts.
Communications with us
When you contact DIG, we may process the information you provide to us by email, contact form, customer support, social media or other available communication channels.
This may include the content of your enquiry, order details and other information you voluntarily provide so that we can resolve your request.
Device and website usage data
When you use our website, certain data may be collected automatically, including your IP address, device type, operating system, browser type and version, network connection information, unique technical identifiers, the pages you visit, when and how you use the website, and how you interact with our content and products.
This data may be collected through cookies and similar technologies.
3. Sources of personal data
We may receive personal data directly from you when you make a purchase, create an account, contact us, sign up for notifications or otherwise provide your data to us.
Data may also be collected automatically while you use our website and the Services, including through cookies and similar technologies.
We may receive certain data from our service providers when the companies we engage process data on our behalf or provide us with services needed to run the online store.
We may also receive data from business and technology partners, to the extent such processing is permitted by applicable law.
4. How we use your personal data
Processing and fulfilling orders
We use your data to receive and process your order, process the payment, confirm the order, prepare the products, arrange delivery, enable shipment tracking, handle exchanges, returns and refunds, and communicate with you about your order.
Providing and improving the Services
We may use your data to operate the online store, maintain customer accounts, remember certain preferences, improve the functionality of the site, analyse how the Services are used, improve the customer experience and show more relevant content and products.
Customer support
We use your data to answer your enquiries, resolve problems with orders, provide product information, handle complaints, returns and exchanges, and maintain business communication with you.
Marketing and advertising
Where permitted by applicable law and, where required, with your consent, we may use certain data to send promotional emails, notify you of new products, send special offers and promotions, measure the effectiveness of marketing campaigns and show more relevant advertisements.
You can unsubscribe from marketing emails at any time using the unsubscribe link contained in those messages.
Unsubscribing from marketing messages does not affect service messages that are required to fulfil an order, secure your account or for other non-promotional communication.
Security and fraud prevention
We may use your data to protect our customers, our website and our business, prevent fraud, detect suspicious transactions, prevent misuse of the Services, secure payment transactions and protect our legal rights.
Legal and regulatory obligations
We may process your data where necessary to comply with tax, accounting, customs and other legal obligations, respond to lawful requests from government and other competent authorities, protect or exercise our rights, resolve disputes, and prevent and investigate unlawful activity.
5. Legal basis for processing
Where applicable law requires a specific legal basis for processing personal data, we may process your data on the basis of the performance of a contract, a legal obligation, legitimate interest or consent.
Performance of a contract applies where processing is necessary for us to process your order, take payment for the product, deliver it, enable a return or exchange, or otherwise perform our contract with you.
A legal obligation may be the basis for processing where we are required to process or retain certain data to comply with tax, accounting, customs or other legal obligations.
Legitimate interest may be the basis where processing is necessary to protect our business, prevent fraud, maintain security, improve the Services, or exercise and protect our rights, provided those interests are not overridden by your rights and freedoms.
We rely on consent as the legal basis where applicable law requires your prior consent, including for certain types of marketing, advertising or the use of non-essential cookies.
Where processing is based on consent, you may withdraw your consent at any time. Withdrawing consent does not affect the lawfulness of processing carried out before it was withdrawn.
6. Cookies and similar technologies
Our website and the Shopify platform may use cookies and similar technologies to make the store work properly, remember certain settings, maintain security, operate the cart and checkout, analyse site usage, measure performance, and for marketing and advertising where permitted.
To understand how visitors use the site we use Microsoft Clarity, a web analytics service provided by Microsoft. Clarity records anonymised interactions such as clicks, scrolling and page navigation and may set its own cookies; text you type into forms is masked. Clarity is loaded only where analytics cookies are allowed or you have consented to them, and you can withdraw consent at any time through the cookie settings. More information: Microsoft Privacy Statement.
Depending on your location, we may show you a consent management tool for the use of non-essential cookies.
Where consent is legally required, non-essential cookies are used in accordance with the choices you make through the available privacy settings.
7. How we share personal data
We share personal data only where necessary for legitimate business and legal purposes.
Shopify
Our online store runs on the Shopify platform. Shopify processes certain data needed to operate the online store, customer accounts, the checkout and other features we use.
Payment service providers
We may pass the data needed to complete a payment to authorised payment service providers.
Delivery and logistics companies
We may provide the data needed for delivery, such as name, address, phone number, email and shipment details, to courier, postal, logistics and customs partners involved in delivering your order.
IT and other service providers
We may use service providers for hosting, technical maintenance, analytics, customer support, email communication, data storage, fraud protection and other functions needed to run our business.
Marketing and analytics partners
Where permitted by applicable law and, where required, with your consent, certain data may be processed through marketing and analytics services to measure campaign results and show more relevant advertisements.
Competent authorities
We may disclose data to competent government, judicial, tax, customs or other authorities where we are required to do so by law or by a valid legal request.
Business changes
In the event of a reorganisation, merger, sale, transfer of business, bankruptcy or other similar business transaction, certain data may be transferred to the extent needed for that transaction and in accordance with applicable law.
8. Relationship with Shopify
Our online store is hosted by Shopify.
Shopify collects and processes certain data about access to and use of our online store in order to operate and improve its services.
Information you provide through our online store may be transferred to Shopify and other service providers who may operate outside the country in which you live.
Depending on the Shopify features we use and your privacy settings, Shopify may process certain data about your interaction with our store, the Shopify platform and other merchants that use Shopify.
In certain cases Shopify may independently determine the purposes and means of certain processing and be responsible for honouring the rights relating to that processing.
More information about how Shopify processes consumer data is available in Shopify's privacy documentation.
9. Third-party websites and services
Our website may contain links to other websites, social networks or services operated by third parties.
When you leave our website and use a third-party service, the processing of your data is governed by that third party's privacy policy.
We do not control and cannot be responsible for how independent third parties process data.
We recommend that you read their privacy policies before providing them with personal data.
10. Children's data
Our Services are not specifically directed at children.
We do not knowingly collect personal data from children in breach of applicable law.
If you are a parent or legal guardian and believe that a child has provided us with personal data in a way not permitted by law, please contact us so that we can consider a request for its deletion or take other appropriate measures.
11. Data security
We take reasonable technical, organisational and other measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.
However, no system for transmitting or storing data can guarantee absolute security.
Please do not send us confidential financial data, passwords or full payment card details by email, social media or other insecure communication channels.
12. Data retention
We keep personal data for as long as reasonably necessary for the purposes for which it was collected, including providing the Services, fulfilling orders, maintaining business records, resolving disputes and complying with legal, tax, accounting and regulatory obligations.
The retention period may depend on the type of data, the nature of our relationship with you, whether you have a customer account, statutory record-keeping periods, the need to resolve disputes, and the protection and exercise of legal claims.
Data is deleted, anonymised or access to it is restricted when it is no longer needed, unless there is a legal obligation or another permitted basis for retaining it further.
13. Your rights
Depending on the law that applies to you, you may have the right to request information about the processing of your personal data, obtain access to your personal data, request the correction of inaccurate or incomplete data, request the deletion of certain personal data, request the restriction of certain processing, object to certain types of processing, receive your data in a portable format where the legal conditions are met, withdraw previously given consent, opt out of certain forms of direct marketing, and exercise other rights available to you under applicable data protection law.
These rights are not absolute. In certain situations we may be legally entitled or required to retain certain data or to refuse a particular request.
To protect your data, we may ask you to confirm your identity before acting on a request.
We will respond to requests within the time limits set by applicable law.
14. Marketing and unsubscribing
If you have signed up to receive our promotional emails, you can unsubscribe at any time by clicking the unsubscribe link in the marketing message or by contacting us.
After you unsubscribe, we may still send you non-promotional messages required for order confirmation, payment information, delivery status, your customer account, returns or exchanges, security, and other transactional or legally required purposes.
15. Rights of users in the European Economic Area and the United Kingdom
If the processing of your data is subject to the laws of the European Economic Area or the United Kingdom, you may have additional rights, including the right of access, rectification, erasure, restriction of processing, data portability, objection to certain processing, withdrawal of consent, and the right to lodge a complaint with a competent data protection authority.
Where processing is based on legitimate interest, you may have the right to object under the conditions set out in applicable law.
Where data is used for direct marketing, you have the right to object to that processing.
16. International data transfers
DIG operates internationally and uses service providers that may process data in different countries.
As a result, your personal data may be transferred to, stored or processed outside the country in which you live.
Where applicable law requires specific safeguards for international data transfers, we will use appropriate legal mechanisms, which may include adequacy decisions, standard contractual clauses or other legally recognised transfer mechanisms.
17. Complaints
If you believe that the way we process your personal data does not comply with applicable law, please contact us first so that we can try to resolve the issue.
You may also have the right to lodge a complaint with the competent data protection authority in the country in which you live, or with another competent supervisory authority, in accordance with applicable law.
18. Changes to this Privacy Policy
We may change this Privacy Policy from time to time to reflect changes in our Services, business practices, technology, service providers, or applicable legal and regulatory requirements.
When we make changes, we will publish the updated version on our website and change the "Last updated" date.
Where legally required, we will also notify you of significant changes in another appropriate way.
19. Contact
If you have questions about this Privacy Policy or the way we process your personal data, or if you wish to exercise any of your rights, you can contact us at:
DIG d.o.o.
Mladih gorana 12
11273 Batajnica
Serbia
Tax ID (PIB): 100196309
Email: office@dig.rs
Phone: +381 61 198 9366
For the purposes of applicable data protection laws, DIG d.o.o. is the controller of personal data in the cases in which it determines the purposes and means of its processing.