Your data, in good hands.

The data controller is Lullula SRL, with its registered office in Sibiu, Str. Praga nr 9, Tax ID (CUI) 49505154, Trade Register No. J32/181/2024. You can write to us anytime at contact@lullula.ro or call us at 0743 298 568.

• When you order: your name, billing and shipping address, email, phone number and, if you want a company invoice, the company name and tax ID (CUI). If you send your order as a gift, we also keep the message for the greeting card.
• When you pay: you enter your card details directly on the secure NETOPIA Payments page. We never see them and we don’t store them.
• Through the contact form: your name, email and message.
• When you sign up for the newsletter: your email, only if you subscribe.
• When you visit the website: technical data (IP address, browser type, pages visited), through cookies, as described below.

• To prepare, ship and invoice your order and keep you updated on it (performance of a contract).
• To comply with our legal obligations, for example tax and accounting obligations.
• To answer your questions and handle returns or complaints.
• To remind you, just once, about a cart you left unfinished, and to prevent fraud (our legitimate interest).
• To send you news and offers, only if you agree. You can unsubscribe anytime using the link in every email.

We don’t sell your data. We share it only with the partners who help us get your order to you, and only as much as they need:

• NETOPIA Payments, to process card payments;
• the couriers (Fan Courier, DPD, Sameday) and the ecolet.ro platform we use to generate shipping labels (AWBs), for delivery;
• SmartBill, to issue invoices;
• Hostinger, the company that hosts our website and email;
• our newsletter provider, only for subscribed addresses;
• Google (Analytics and reCAPTCHA), Meta (Facebook Pixel) and Microsoft Clarity, for statistics, spam protection and campaign measurement, under the conditions set out in the cookies section;
• the authorities, when required by law.

We use strictly necessary cookies, without which the cart and checkout wouldn’t work, and a security cookie for the contact form (reCAPTCHA). Statistics and marketing cookies (Google Analytics, Facebook Pixel, Microsoft Clarity) are used only if you give your consent. You can change your choice anytime from the “Cookie settings” link in the site footer.

• We keep order data for 3 years from the date the order was placed. Invoices and accounting documents are kept for as long as accounting law requires.
• We keep messages sent through the contact form for as long as needed to answer you and resolve your request.
• We keep your newsletter address until you unsubscribe.
• If you created an account, your account data stays until you ask us to delete it.

You have the right to request access to your data, to have it corrected or deleted, to restrict its processing, to data portability, and to object to processing. You can withdraw your consent for the newsletter or for cookies at any time. For any of these, write to us at contact@lullula.ro and we’ll reply within one month at most. We can’t delete data that the law requires us to keep (for example, invoices).

If you believe we haven’t respected your rights, you can lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (dataprotection.ro).

The website uses an encrypted connection (HTTPS), and only the people on the Lullula team who handle orders have access to them.