◆ Legal
Privacy Policy
How we collect, use and protect your data. Last updated: 2026.
1. Data controller
Balkan Smurf controls the personal data collected through this website for order delivery, customer support, fraud prevention, security and legal compliance.
2. Data we collect
We collect the email address entered at checkout, order details, product purchased, delivery status, support messages, language preference, basic technical logs and payment confirmation data received from the payment provider. We do not collect or store full card details or crypto wallet credentials.
3. Why we use data
We use data to deliver accounts, confirm orders, provide support, prevent fraud and abuse, secure the website, keep business records, respond to lawful requests and comply with applicable obligations. We do not sell personal data.
4. Legal basis
Data is processed where needed to perform the purchase contract, comply with legal obligations, protect our legitimate interests in security and abuse prevention, or based on consent where consent is required.
5. Data sharing
Data may be shared only with payment providers, email or hosting providers, security tools, professional advisers, authorities where legally required, and service providers needed to operate the website. Each provider receives only the data needed for its role.
6. Cookies
We use a language preference cookie (bs_lang) and, for the admin panel, a session cookie (bs_admin). We may also use necessary technical cookies for security and checkout reliability. No advertising cookies are used unless clearly disclosed.
7. Data retention
Order, delivery and support data is kept only as long as needed for delivery, support, fraud prevention, accounting, legal compliance and dispute handling. Data that is no longer needed is deleted or anonymized where reasonably possible.
8. Your rights
You may request access, correction, deletion, restriction or a copy of your personal data, and you may object to certain processing where applicable. Some data may need to be kept where required for legal, security or dispute reasons.
9. Security
We use reasonable technical and organizational measures to protect personal data from unauthorized access, loss, misuse or disclosure. No online system can be guaranteed completely secure, but we limit access and collect only what is necessary.
10. Contact
For privacy questions or data requests, contact us through the contact page or support email. We may need to verify the requester before acting on a privacy request.
