GDPR Privacy Information

Last updated: September 1, 2026

This GDPR Privacy Information supplements our Privacy Policy and should be read together with it. It explains the legal bases on which we process personal information when the General Data Protection Regulation (“GDPR”) or equivalent privacy laws in the European Economic Area (“EEA”), United Kingdom or Switzerland apply.

Data Controller

Purrfect Pages Studio is the customer-facing brand of PIXELS & PAGES vl. Lidija Kuhar, which is the data controller responsible for the processing described in this notice.

Our registered address is stated in our Privacy Policy and Legal Notice.

Email: PixelsandPages@outlook.com

Legal Bases for Processing

The legal basis we use depends on why the information is being processed.

Performance of a Contract

We process personal information when it is necessary to enter into or perform a contract with you. This includes:

  • processing and confirming orders;

  • processing payments and receiving payment confirmations;

  • delivering digital products and providing download access;

  • managing customer accounts;

  • responding to order-related requests;

  • providing customer support; and

  • processing refunds, complaints or other contractual remedies.

If the information required to complete an order is not provided, we might be unable to accept the order, process payment or deliver the purchased product.

Compliance with Legal Obligations

We process and retain information where necessary to comply with legal obligations, including:

  • accounting, invoicing and tax requirements;

  • consumer protection and written-complaint obligations;

  • fraud-prevention and payment regulations;

  • responding to valid requests from courts, regulators or public authorities; and

  • maintaining records required by applicable law.

Legitimate Interests

We may process information where necessary for our legitimate business interests, provided that those interests are not overridden by your rights and freedoms.

These interests may include:

  • protecting the security of our website, customers and business;

  • detecting and preventing fraud, misuse and technical problems;

  • responding to questions and providing customer support;

  • maintaining and improving website performance and usability;

  • obtaining basic reporting and analytics;

  • establishing, exercising or defending legal claims; and

  • keeping appropriate records of our communications and business activities.

When relying on legitimate interests, we consider the nature of the information, the reasonable expectations of customers and the possible effect of processing on their privacy.

Consent

We rely on your consent where required by law, including for:

  • sending promotional email communications;

  • using non-essential cookies and similar technologies;

  • personalized advertising or marketing measurement; and

  • certain processing connected with Shopify Enhanced Services.

You can withdraw your consent at any time by using the unsubscribe link in a marketing email, changing your cookie preferences, using an available privacy-choice page or contacting us. Withdrawing consent does not affect processing that took place lawfully before withdrawal.

Payments

Payments are processed by Shopify, PayPal or another payment provider offered at checkout.

We do not normally receive or store complete payment-card numbers or card security codes. Payment providers process those details under their own privacy and security terms. We generally receive limited transaction information, such as payment status, payment method and other details necessary to manage the order and comply with legal obligations.

Shopify and Enhanced Services

Our store is hosted by Shopify. Shopify processes information about visits, customer interactions and purchases to operate the store, provide security, process transactions and provide other Shopify services.

Because Shopify Network Intelligence is enabled, Shopify may also use information about interactions with our store together with information from interactions with Shopify and other merchants to provide Enhanced Services, including personalization, analytics, fraud prevention and more relevant advertising.

Shopify may act as our service provider or as an independent data controller, depending on the processing activity.

More information and Shopify’s privacy controls are available at:

https://privacy.shopify.com/en

International Transfers

Shopify and other service providers may process information outside the country in which you live.

Where personal information is transferred outside the EEA, United Kingdom or Switzerland, the transfer will rely on an applicable legal mechanism, such as an adequacy decision or approved standard contractual clauses, where required by law.

Retention

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including:

  • for the duration of a customer account;

  • as required by applicable accounting, tax and consumer-protection laws;

  • until marketing consent is withdrawn;

  • while necessary to resolve a complaint or dispute; and

  • for the establishment, exercise or defence of legal claims.

Information is deleted or anonymized when it is no longer required, unless continued retention is required or permitted by law.

Your Rights

Depending on the applicable law, you may have the right to:

  • request access to your personal information;

  • correct inaccurate or incomplete information;

  • request deletion or restriction of processing;

  • object to processing based on legitimate interests;

  • withdraw consent;

  • receive certain information in a portable format; and

  • lodge a complaint with a data protection authority.

We may need to verify your identity before responding to a request. We will respond within the time required by applicable law.

Requests can be sent to PixelsandPages@outlook.com.

You may also lodge a complaint with the Croatian Personal Data Protection Agency (AZOP) or the competent supervisory authority in your country:

https://azop.hr/data-subject-rights/

United States Privacy Choices

We do not sell personal information in exchange for money.

Some disclosures or uses connected with personalized advertising may be considered “selling,” “sharing” or “targeted advertising” under certain United States state privacy laws. Where applicable, visitors can use the Your Privacy Choices or data-sharing opt-out page provided through our store.

Further Information

For more information about the categories of information we process, sources of information, recipients, security, cookies and available privacy choices, please read our main Privacy Policy.