Privacy policy.

The controller and legal operator of this website is DRUŠTVO SA OGRANIČENOM ODGOVORNOŠĆU ABECEDA, trading through the 3Domika and DOMIKI Jewellery brands, with its registered office at Trg Sunca 2, Budva, Montenegro. CRPS registration identifier: 5-0582189/003. PIB: 02794357. VAT registered; VAT number: 81/31-03028-3.

For privacy questions or requests, contact orders@domiki.me or +382 69 108 535. ABECEDA determines why and how personal information submitted through the website is used.

We follow data-minimisation principles and do not ask visitors to create an account.

• Order requests: a submitted request contains the customer’s name, email address, telephone number, delivery address where applicable, requested items, quantities and prices, delivery and payment preference, optional note, language, order reference and status, timestamps, and the versions of the notices shown at checkout. These details are stored in Cloudflare D1.
• Security verification: Cloudflare Turnstile processes browser, device and interaction signals and a verification token; our server provides the connecting IP address for verification. Short-lived hashed identifiers derived from IP and email are used for rate limiting.
• Technical information: hosting and security infrastructure may process an IP address, browser or device information, request time and security logs needed to deliver and protect the site.
• Optional analytics: if the visitor enables Analytics, Metricool receives technical and usage information associated with visits and pages viewed. Metricool is not loaded when analytics is refused.
• Browser storage: the privacy choice and shopping-bag identifiers and quantities are stored locally. Checkout contact and address fields are not stored in browser local storage; they are transmitted to D1 only when the request is submitted.
• Direct enquiries: if someone contacts us by email, telephone or social media, we receive the contact details and message that person chooses to provide.
• External services: opening Instagram, Ananas or a press link takes the visitor to another service governed by that service’s own privacy terms.

We use order information to receive and assess the request, contact the customer, confirm availability, delivery and payment, fulfil any resulting sale, provide customer support, prevent abuse and maintain necessary business records. Technical information is used to provide, maintain and secure the website. With consent, Metricool is used for audience measurement so we can understand aggregate visits and page use. Optional advertising and behavioural profiling are not used.

Depending on the interaction, processing is based on steps requested before a possible contract, performance of a contract, compliance with legal obligations, the studio’s legitimate interest in operating and securing its website and answering enquiries, or consent where consent is specifically requested.

Information is not sold or rented. Cloudflare provides hosting, D1 storage, R2 media storage, Access authentication and Turnstile. Brevo delivers transactional order emails, Zoho hosts the studio mailbox, and Metricool provides optional audience measurement after consent. Necessary delivery information may be shared with the chosen courier after fulfilment is confirmed. Providers receive only what is needed for their role. Information may also be disclosed where required by law or necessary to establish or defend legal claims.

Website and communication providers may operate infrastructure outside Montenegro. Where personal information is transferred internationally, appropriate contractual, organisational or legal safeguards should be used in accordance with applicable requirements.

The site currently has no automatic deletion of order records. They are retained while needed to process and document the request and any resulting sale, handle support or disputes, and meet applicable record-keeping requirements. Transactional email copies and delivery logs follow the retention settings of our mailbox and Brevo account; technical logs follow Cloudflare settings. We are adopting an operational retention and deletion schedule.

Subject to applicable law, a person may ask whether information about them is processed and request access, correction or deletion. They may also request restriction, object to certain processing, or withdraw consent without affecting earlier lawful processing.

• Send a request to orders@domiki.me.
• We may need to verify identity before acting on a request.
• A complaint may be made to Montenegro’s Agency for Personal Data Protection and Free Access to Information (AZLP): azlp.me.

The site uses HTTPS, restrictive browser security headers, Turnstile, rate limiting and staff-only access controls. Catalogue Studio and Order Desk pages are protected by Cloudflare Access and a named-email allowlist; administrative catalogue actions record the staff email for accountability. Product images are stored in Cloudflare R2 and may be served publicly through their media URL. No system is risk-free, so access, retention, providers and security measures are reviewed regularly.

This website is intended for a general audience and does not knowingly request personal information from children. This notice may be updated when the site’s features, providers or legal obligations change. The effective date above shows the latest version.