Privacy Policy

1. Who We Are

DAFTARI is operated by Anna Daftari, based in Germany. We design and sell fine jewelry and donate 50% of profits to support Ukrainian women entrepreneurs. For any privacy-related questions, contact us at anna@403cap.com.

2. Data We Collect

When you place an order or contact us, we collect:

• Name, email address, phone number
• Shipping address and country
• Order details and payment reference (via Stripe — we do not store card data)
• Communication history (email, WhatsApp)

3. How We Use Your Data

• To process and fulfill your order
• To send order confirmation and shipping updates
• To respond to your inquiries
• To comply with legal obligations (e.g., invoicing under German law)

4. Legal Basis (GDPR)

We process your data based on: contract performance (Art. 6(1)(b) GDPR), legal obligation (Art. 6(1)(c) GDPR), and our legitimate interest in communicating with you about your order.

5. Third-Party Services

We use Stripe for payment processing. Stripe's privacy policy applies to payment data: stripe.com/privacy. We use DHL for shipping. Your address is shared with DHL solely for delivery purposes.

6. Data Retention

We retain order data for 10 years as required by German commercial law (HGB). Communication data is retained for 3 years.

7. Your Rights

Under GDPR, you have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion ("right to be forgotten"), subject to legal retention requirements
• Object to processing
• Lodge a complaint with your local data protection authority

To exercise these rights, email anna@403cap.com.

8. Cookies

We use only technically necessary cookies for website functionality. No tracking or advertising cookies are used.