policy

privacy

We are 3D TEXTILE PATTERN SRL, the company operating the Designora Studio brand and its sub-brands, including Bazaar of Designora. When you shop with us or use one of our services, you trust us with your information. Protecting personal data and your privacy is a priority for us. We want to give you clear and transparent information about what we collect, why we need it, how we use it, who may receive it, how long we keep it, and what rights you have.
Important: This policy should be read together with our separate Cookie Policy. It applies to www.bazaarofdesignora.com and its related services. Third-party websites and services have their own privacy policies.
*
Last Update: July 2026

General Information

Who operates Designora Studio and Bazaar of Designora? 
The website www.bazaarofdesignora.com is owned and operated by 3D TEXTILE PATTERN SRL, a company registered in Bucharest, Romania. We operate under the Designora Studio brand and its sub-brands, including Bazaar of Designora. 
The website gives customers access to information about our products and services, customer accounts, ordering, order tracking, and communications about our products and services. 
Who is responsible for processing your personal data? 
3D TEXTILE PATTERN SRL is responsible for the personal data processed through the website and acts as the data controller under applicable data-protection law, including the EU General Data Protection Regulation (GDPR) and, where relevant, the UK Data Protection Act 2018. 
Because 3D TEXTILE PATTERN operates several brands, the exact brand involved may depend on the service you use. Unless another controller is specifically identified, 3D TEXTILE PATTERN SRL remains responsible for deciding why and how your data is processed. 
What does this Privacy Policy cover? 
This Privacy Policy governs personal data collected from natural persons through www.bazaarofdesignora.com, related domain names, customer accounts, order services, customer support, newsletters, and other services connected with the website. 
It does not apply to third-party websites, applications, software, products, or services merely linked from or integrated with the website. Those services are governed by their own privacy notices. 
What is your role as a data controller? 
As data controller, we determine the purposes and main methods of processing personal data through the website. We are responsible for using an appropriate legal basis, giving you clear information, protecting the data, and responding to valid rights requests. 
Some service providers act only on our instructions as data processors. Others, such as certain payment providers, couriers, advertising platforms, or public authorities, may act as independent controllers for the processing they determine themselves. 
Do you rely on consent for every use of personal data? 
No. Consent is only one of the legal bases available under data-protection law. Depending on the activity, we may process data because it is necessary to perform a contract with you, comply with a legal obligation, pursue a legitimate business interest, or because you have given consent. 
We may ask for consent where required, including for non-essential cookies, certain marketing activities, or a new use of data that is not covered by another appropriate legal basis. You may withdraw consent at any time, without affecting processing that was lawful before withdrawal. 
Is the website intended for children? 
The website is not marketed to children and should not be used by children to create accounts, place orders, or submit personal data without the involvement of a parent or legal guardian. We do not intentionally collect children’s personal data. 
If you are a parent or legal guardian and become aware that a child has submitted personal data to us, please contact us. We will review the request and delete or otherwise lawfully handle the data without undue delay. 
Is the website intended for children? 
The website is not marketed to children and should not be used by children to create accounts, place orders, or submit personal data without the involvement of a parent or legal guardian. We do not intentionally collect children’s personal data. 
If you are a parent or legal guardian and become aware that a child has submitted personal data to us, please contact us. We will review the request and delete or otherwise lawfully handle the data without undue delay. 

What personal data do we collect and why?

What is personal data? 
Personal data is information that identifies you directly or can be linked to you indirectly. Examples include your name, address, email address, telephone number, order information, account identifier, IP address, and information you provide when contacting customer service. 
Where do you obtain personal data from? 
We obtain personal data directly from you, automatically through your activity on the website, and from third parties that are lawfully involved in providing our services. 
  • Directly from you, such as when you create an account, place an order, complete a form, subscribe to a newsletter, or contact us. 
  • Automatically, such as server logs, IP address, browser and device information, website activity, and cookie-related data. 
  • From third parties, such as payment providers, print-on-demand partners, shipping companies, analytics providers, advertising partners, and other service providers. 
What data do you collect when I create an account? 
When you register a customer account, we may collect your location, customer number, first name, last name, telephone number, email address, and password. If you register as a business, we may also collect the company name, company registration number, tax or VAT number, nature of business, company type, contact name, and business contact details. 
We use this information to create and maintain the account, enable access to account features, provide requested services, contact you when necessary, and maintain business records. The legal bases are contract performance, our legitimate interests in operating and administering the website, and consent for optional information. 
What data do you collect when I place an order? 
When you place an order, we collect information needed to process, produce, ship, and document the transaction. This may include your name, billing and delivery addresses, email address, telephone number, ordered products, product variants, order number, delivery information, payment status, and any other details you choose to provide. 

 

We use this data to perform the sales contract, arrange production and delivery, send order updates, maintain business records, and meet accounting and legal obligations. 
What data do you collect when I contact you? 
When you contact us by email or another customer-service channel, we collect your name, email address, the content of your message, and any information or files you choose to include. We use this data to answer your enquiry, investigate an order issue, provide support, and maintain a record of our communication. 
Please do not send passwords, full payment-card details, or sensitive information that is not necessary for your request. 
What payment data do you process? 
Payments are processed by third-party payment processors, not directly by us. Depending on the selected provider, you may be asked for your name, card number, expiry date, security code, and billing address on the provider’s secure payment interface. 
We may receive limited transaction information, such as payment status, transaction identifier, amount, currency, billing details, card brand, and the final digits of the card. We use this information to match payments to orders, handle refunds where applicable, prevent fraud, and maintain legally required records. 
Do you store full payment-card details? 
We do not intend to store full card numbers or card security codes on our own systems. Those details are handled by our payment processors, including Stripe and Authorize.net, under their own security and privacy arrangements.
Do you collect my IP address?
Yes. When you use the website, we or our service providers may collect your IP address. We use it to analyze technical use, tailor the website to your approximate location, prevent fraud and abuse, maintain security, and support analytics. 
An IP address may be personal data. We therefore handle it under the safeguards described in this Privacy Policy. 
Do you use cookies? 
Yes. When you browse the website, we may collect cookie-related data. Cookies and similar technologies may be used for essential website functions, preferences, analytics, security, and advertising. 
The separate Cookie Policy explains the categories of cookies, their purposes, how long they remain active, and how you can manage your choices. Non-essential cookies are used on the basis of consent where required. 
What data do you collect through forms? 
When you complete a form on the website, we collect the information relevant to that form. Depending on the form, this may include your full name, trading name, telephone and fax numbers, email addresses, company details, address, contact-person details, order numbers, and any other information you decide to provide. 
We use this information to process the form, contact you where necessary, provide the requested service, and maintain business records. 
Do you collect sensitive personal data? 
We do not intentionally ask for special categories of personal data, such as health information, genetic or biometric data, racial or ethnic origin, political opinions, religious beliefs, trade-union membership, or information about sexual orientation. 
Please do not include this type of information in free-text fields, messages, uploads, or product-related communications unless it is strictly necessary. If sensitive data is received unexpectedly, we will assess whether it should be deleted, restricted, or otherwise handled under applicable law. 
What happens if I refuse to provide requested personal data?
If the information is necessary to create an account, process an order, deliver a product, answer your request, prevent fraud, or comply with law, we may be unable to complete the requested operation without it. Optional information and marketing consent are not required for making a purchase unless clearly stated. 

What technical and usage data do we collect? 

What technical and usage information is collected? 
To understand and improve use of the website, we and Google Analytics may automatically collect technical and usage information. This can include the features you use, time spent on pages, loading times, errors, device type, operating system, browser type, visited URLs, referral information, and other online interactions. 
Although some technical information may not identify you by itself, it can become personal data when combined with identifiers such as an IP address or cookie ID. We treat identifiable technical information as personal data. 
Why do you use technical and usage data? 
We use it to understand how visitors use the website, measure relevance and engagement, investigate bugs and security incidents, prevent abuse, develop features, and adapt the website to different devices and technical requirements. 
What happens if technical data is aggregated or de-identified? 
If technical data is combined with personal data in a way that can identify you, we treat the combined information as personal data. If data is irreversibly de-identified so that it can no longer be linked to a natural person, it is no longer personal data and may be used for legitimate business, statistical, research, or service-improvement purposes. 
Do you keep customer feedback and support records? 
Yes. If you contact us, we may keep records of questions, complaints, recommendations, compliments, and our responses. Where reasonably possible, we remove information that is unnecessary for maintaining those records. 

How and why do we process your personal data? 

Why do you process personal data? 
We process personal data to provide the best practical customer experience when you visit our website or use our services. We also process data at your request so that we can create and manage accounts, process and deliver orders, provide customer support, take payments through our providers, communicate with you, protect the website, comply with law, and improve our products and services. 
What legal bases do you rely on? 
Depending on the activity, we rely on one or more of the following legal bases: 
  • Performance of a contract with you, or steps requested before entering into a contract. 
  • Compliance with a legal obligation, including accounting, tax, consumer-protection, and regulatory obligations. 
  • Our legitimate business interests, such as operating, analyzing, securing, promoting, and administering the website and our business. 
  • Your consent, where the law requires it or where information is optional. 
  • The establishment, exercise, or defense of legal claims, where relevant. 
Can you use my data for a new purpose? 
We do not use personal data for purposes that are incompatible with the reason it was collected. If we need to use it for a materially different purpose, we will assess whether the new purpose is legally compatible, provide additional information where required, and obtain consent if no other lawful basis applies. 

How do we communicate with you? 

When will you send me newsletters? 
If we have your email address, we may send newsletters about website developments, products, or special offers when you have expressly opted in, voluntarily subscribed through the website, or when applicable law permits us to send information closely related to products or services you have already used. 
Marketing consent is separate from the service messages needed to process an order. 
How can I stop marketing messages? 
You can opt out free of charge at any time by selecting the unsubscribe link in a newsletter, adjusting the settings in your customer account where that feature is available, or contacting us directly. 
We may keep a minimal suppression record so that we remember not to send further marketing to the same address. 
Do your newsletters use tracking pixels? 
They may. Tracking pixels can help us understand whether a newsletter was opened and which links were selected. We use this information to analyze and improve marketing campaigns and pursue our legitimate business interests, subject to applicable consent requirements. 
What are service-related notices? 
Service-related notices include order confirmations, receipts, payment information, production and shipping updates, account-security messages, technical emails, and other administrative communications. These messages are sent when needed to provide the service or comply with law and are not ordinary marketing messages. 
You cannot opt out of messages that are necessary to process an active order, maintain account security, or provide legally required information. 

How long do we keep your personal data?

How long do you retain personal data? 
We keep personal data only for as long as it is needed for the purposes described in this policy, until you validly request deletion, or for a longer period where another legal basis requires or permits retention. 
When the data is no longer necessary and no legal reason remains to retain it, we securely delete or anonymize it. 
How long do you retain account data? 
Account information is generally retained while the account remains active. If you ask us to delete your account, we will remove or anonymize information that is no longer needed, while retaining order, payment, tax, fraud-prevention, dispute, or legal records for as long as required or permitted by law. 
How long do you retain order and payment records? 
Order, invoice, transaction, and payment-status records are retained for the period required by applicable accounting, tax, consumer-protection, and limitation rules. This may continue after an account is deleted. 
How long do you retain technical data? 
Technical and usage data is retained for as long as reasonably necessary for analytics, security, audits, legal compliance, dispute resolution, and enforcement of agreements. Retention settings may also depend on the providers we use, including Google Analytics.
What about backups and legally required records? 
Deleted data may remain temporarily in protected backups until the normal backup cycle expires. Where law requires us to preserve business, accounting, tax, or legal records for a specific period, we retain the necessary information and securely delete it once that period ends. 

How do we share and disclose your data? 

Who do you share personal data with? 
Where necessary, personal data may be shared within the brands operated by 3D TEXTILE PATTERN and with suppliers, subcontractors, independent contractors, consultants, and third parties carrying out specific tasks on our behalf. 
We disclose only the data reasonably required for operating the website, producing and delivering orders, processing payments, providing information, pursuing legitimate interests, preventing fraud, protecting security, performing contracts, complying with law, or carrying out a use to which you have consented. 
Which service providers may receive my data?
The service providers identified in our chosen setup include: 
  • Hostinger, for hosting, database, and cloud-storage services. 
  • MailerLite, for newsletter distribution. 
  • WooCommerce, for the online store, and Elegant Themes, for the website theme. 
  • Google Analytics, for website analytics. 
  • Endicia, Royal Mail, UPS, FedEx, and DHL, for shipping and delivery services. 
  • Stripe and Authorize.net, for payment services. 
  • Pure Chat, for live-chat services. 
  • Independent contractors and consultants who support our business. 
Do you sell my personal data? 
We do not directly sell personal data to third parties for money. However, online identifiers such as cookie-generated data and IP addresses may be used for advertising, retargeting, third-party marketing, profiling, cross-device tracking, and other marketing activities, depending on the choices available in our cookie and consent tools. 
Where another country’s privacy law uses a broader definition of ‘sale’ or ‘sharing’, the controls and disclosures provided for that region will apply. 
Do you use behavioral advertising? 
Yes, personal information may be used to provide targeted advertising or marketing communications that we believe may be relevant to you. This can include information about your website use, purchases, and interaction with advertisements on other websites, shared directly with advertising partners or collected through cookies and similar technologies, subject to consent where required. 
Google privacy information: https://www.google.com/intl/en/policies/privacy/ 
Google Analytics opt-out: https://tools.google.com/dlpage/gaoptout 
Network Advertising Initiative information: https://www.networkadvertising.org/understanding-online-advertising/how-does-it-work 
Facebook ad settings: https://www.facebook.com/settings/?tab=ads 
Google ad settings: https://www.google.com/settings/ads/anonymous 
Bing personalized-ad policies: https://advertise.bingads.microsoft.com/en-us/resources/policies/personalized-ads 
Digital Advertising Alliance opt-out portal: https://optout.aboutads.info/ 
Can technical or de-identified data be shared? 
Technical data that cannot identify a natural person may be shared for business, research, website improvement, product development, or statistical purposes. If information can identify you, we treat it as personal data and apply the protections in this policy. 
Can you disclose data in response to legal requests? 
Yes. We may disclose information to courts, regulators, tax authorities, law-enforcement bodies, or other public authorities where required by law or necessary for a public-interest objective such as national security, fraud prevention, or law enforcement. 
What happens if the website or business is sold? 
If the website or business is sold, merged, reorganized, financed, or transferred in whole or in part, personal data may be disclosed to advisers, potential purchasers, and a successor entity. We will require appropriate confidentiality and data-protection safeguards and will inform you of a change of controller where required. 

International Data Transfers 

Where is my personal data processed? 
Personal data is generally stored or processed in your country, in Romania, or elsewhere in the EU/EEA, but it may also be transferred to and processed in countries outside this area where our service providers, production partners, couriers, payment providers, analytics providers, or other contractors operate. 
How do you protect international transfers? 
When personal data is transferred outside the EEA, we seek to use a lawful transfer mechanism and appropriate safeguards. Depending on the recipient, this may include an adequacy decision, contractual protections, data-processing agreements, or another mechanism recognized by applicable law. 
We do not intentionally make an international transfer where no appropriate level of protection or lawful basis is available. 

How do we protect your personal data? 

What security measures do you use? 
We use organizational and technical measures designed to protect personal data from loss, misuse, unauthorized access, disclosure, alteration, or destruction. These measures include access controls, secured networks, SSL, encryption, strong passwords, anonymization where possible, and careful selection of data processors. 
Access is limited to people and providers who need the information for their role and who are subject to appropriate confidentiality and security obligations. 
Can you guarantee complete security? 
No online service can guarantee absolute security. We use reasonable safeguards and review risks, but communications and information-processing technologies can be affected by events beyond our reasonable control.
What happens if there is a security breach? 
If a personal-data breach occurs, we will investigate, contain, document, and mitigate it. Where required by law, we will notify the competent supervisory authority and affected individuals within the applicable timeframe. 

What rights do you have? 

What privacy rights can I exercise? 
Subject to legal conditions and exceptions, you may exercise the following rights: 
  • Access: obtain confirmation and a copy of personal data we hold about you, together with information about its processing. 
  • Rectification: correct inaccurate or incomplete personal data. 
  • Erasure: ask us to delete personal data where the legal conditions are met. 
  • Restriction: ask us to limit processing in certain circumstances. 
  • Data portability: receive eligible data in a structured, commonly used, machine-readable format and, where feasible, have it transferred to another controller. 
  • Objection: object to processing based on legitimate interests and object to direct marketing at any time. 
  • Withdrawal of consent: withdraw consent where processing relies on it. 
  • Complaint: raise a concern with us or lodge a complaint with a competent data-protection authority. 
How can I exercise my rights? 
Contact us and explain your request in sufficient detail. To protect your information, we may ask for reasonable verification that allows us to identify you in our systems. We will not ask for more information than is necessary for verification. 
You can also update certain account information directly in your account pages where those features are available, including access, correction, portability, and account deletion options. 
How long will you take to respond? 
We will respond without undue delay and generally no later than 30 days after receiving a valid request. Where a request is complex or numerous, data-protection law may allow additional time, and we will inform you where this applies. 
Will you discriminate against me for exercising my rights? 
No. We do not deny goods or services, charge different prices, remove discounts or benefits, impose penalties, or provide a lower quality of service merely because you exercised a privacy right. 
Can I complain about your use of my data? 
Yes. We ask that you contact us first so that we can investigate and respond to your concerns. If you are not satisfied with the outcome, you have the right to lodge a complaint with your local data-protection authority or another competent supervisory authority. 

Third-party Websites and Services 

Does this policy apply to third-party services? 
No. This policy explains our processing and the disclosures we make to third parties, but it does not replace the privacy notices of payment providers, delivery companies, social-media platforms, advertising partners, analytics providers, or websites that you visit through a link. 
Please review the relevant third party’s privacy and cookie information before submitting data to it. 

Our Contact Details

How can I contact you about this Privacy Policy? 
If you have questions about this Privacy Policy, our data-protection practices, or a privacy-rights request, please contact us through the contact details published on www.bazaarofdesignora.com. 
Include your name, the email address associated with your account or order, the nature of your request, and any relevant order or account reference. Do not send passwords or full payment-card details.Â