Privacy policy

Last updated: June 5, 2026

Who We Are

Natuva Labs (Tilen Piskule s.p.) is a Slovenia-based company that sells water filter straws online. We are the data controller responsible for your personal information.

Contact details:

• Email: support@natuvalabs.store
• Phone: +386 70 572 566
• Address: Keršova ulica 3, 3212 Vojnik, Slovenia
• Company Registration: 7361769000
• VAT: SI38879387

We operate under European Union regulations, including the General Data Protection Regulation (GDPR).

What Information We Gather

When You Shop With Us

Placing an order requires us to collect your name, email address, phone number, billing address, and delivery address. If you create an account, we also store your login credentials and security questions.

Your Browsing Activity

We keep a record of products you browse, add to your cart, or save for later. If you contact our support team, we retain those communications as well.

Technical Data

Our website automatically logs certain technical details when you visit — such as your IP address, browser type, operating system, and device. This helps us maintain a well-functioning site.

Cookies and Analytics Tools

We use third-party tools to better understand how visitors use our website:

• Microsoft Clarity — Records session activity (such as heatmaps and navigation patterns) to help us improve usability.
• Facebook Pixel — Tracks conversions and supports our advertising on Meta platforms.

These tools may collect browsing behaviour, IP address, and device information. They operate under their respective providers' privacy policies.

We also run scripts that support features like wishlists and language preferences, which may store small pieces of data to remember your settings.

How We Use Your Data

Your information serves the following purposes:

• Fulfilling and shipping your orders
• Sending order confirmations, shipping updates, and support responses
• Sending marketing emails via Shopify (only with your consent)
• Running analytics through Microsoft Clarity and advertising through Facebook Pixel
• Improving how our website works and personalising your experience
• Identifying usage trends to guide future improvements

Who We Share Your Data With

We work with a number of trusted third parties to run our business:

• Shopify — Our e-commerce platform and email marketing provider
• Payment processors — Shopify Payments and PayPal
• Logistics partners — Shipping and fulfilment providers
• Microsoft — For Clarity analytics
• Meta/Facebook — For advertising

We may also share data with business partners to deliver relevant advertising — for example, through Shopify Audiences. If you'd like to limit how Shopify merchants use your data for advertising, visit privacy.shopify.com/en.

In addition, your data may be shared in these circumstances:

• With entities within our corporate group for operational purposes
• In the event of a business sale, merger, or insolvency proceeding
• When required by law or requested by a legitimate public authority
• When you explicitly direct us to share it (for example, through a social media integration)

We are not responsible for how third parties handle data once it leaves our systems.

Summary of Data Shared (Past 12 Months)

Targeted Advertising

We may pass limited data — such as hashed email addresses, pixel data, and device identifiers — to advertising platforms for purposes including retargeting, conversion tracking, audience matching, and frequency management.

You can opt out of interest-based advertising through:

• Your Meta/Facebook ad settings
• Google Ad Settings
• The NAI opt-out tool
• Unsubscribe links included in our emails

While we do not sell personal data in the traditional sense, certain data-sharing activities may be classified as a "sale" or "sharing" under certain US state privacy laws.

Public Content

If you post a product review or other content in a public area of our website, that content is visible to anyone who visits. We have no control over what others do with publicly posted information and cannot guarantee its security once shared.

External Links

Our website may link to third-party sites we do not operate. We recommend reviewing the privacy policies of any external sites before sharing personal information. We are not responsible for those sites' content or practices, and linking to them does not constitute an endorsement.

How Long We Keep Your Data

We hold your personal data for as long as needed to serve the purposes described here, or as required by law. Transaction and order records may be kept for accounting and tax compliance purposes under Slovenian law. Payment data is handled by PCI-compliant processors using tokenisation.

Your Rights (EU/EEA Residents — GDPR)

As an EU-based company, we honour your rights under GDPR:

• Access — Request a copy of the data we hold about you
• Correction — Ask us to fix inaccurate or incomplete information
• Deletion — Request that we erase your data (subject to legal retention requirements)
• Restriction — Ask us to limit how we process your data in certain situations
• Portability — Receive your data in a structured, machine-readable format
• Objection — Object to processing for direct marketing at any time
• Withdraw consent — Pull back any consent you've previously given
• Opt out of targeted advertising or data sales — Direct us not to sell, share, or use your data for targeted advertising. We also honour the Global Privacy Control (GPC) signal.
• Limit sensitive data use — Ask us to restrict use of sensitive personal information to what is strictly necessary
• Appeal — If we decline a request, you can appeal that decision by responding to our denial notice
• Authorised agents — You may appoint someone to act on your behalf with appropriate proof of authorisation

To exercise any of these rights, email us at support@natuvalabs.store. We will not treat you differently for exercising them. We may need to verify your identity before acting on a request.

Your Rights (US State Residents)

Depending on your state of residence (including California, Colorado, Connecticut, Virginia, and others), you may have rights to:

• Access and obtain a copy of your personal information
• Request deletion or correction
• Opt out of the sale, sharing, or use of your data for targeted advertising
• Appeal a decision we make regarding your request

We honour the Global Privacy Control (GPC) signal as an opt-out of sale/sharing for that browser and device.

To make a request, contact us at support@natuvalabs.store.

Complaints

If you are concerned about how we've handled your data, please reach out to us first. If you're not satisfied with our response, you have the right to escalate to your national or regional data protection authority.

Cookies

We use several types of cookies on our website:

• Essential — Required for core functions like checkout and cart management
• Analytics — Microsoft Clarity to track how visitors navigate our site
• Marketing — Facebook Pixel for advertising measurement and targeting
• Functional — For wishlist and language preference features

You can control cookies through your browser settings, though disabling some may affect site functionality. For full details on cookies used within our Shopify-powered store, see shopify.com/legal/cookies.

International Transfers

Your data may be processed in countries outside your own, including the United States. Where personal data is transferred outside the European Economic Area, we ensure appropriate safeguards are in place — such as the European Commission's Standard Contractual Clauses or equivalent approved mechanisms — unless the destination country already has an adequate level of data protection.

Security

We take reasonable technical and organisational measures to protect your data, including:

• SSL encryption across our website
• Tokenised payment processing
• Access controls and permission management
• Regular reviews of our third-party vendors

That said, no system is completely immune to risk. By using our website, you acknowledge that some degree of inherent risk exists.

Children

Our store is not intended for children under 16. We do not knowingly collect personal data from minors. If you believe your child has submitted data to us, please contact us at support@natuvalabs.store and we will remove it promptly. We have no knowledge of selling or sharing data belonging to anyone under 16.

Your Choices

• Marketing emails — Unsubscribe at any time via the link in any of our emails. We may still send transactional messages such as order confirmations.
• Cookies — Manage preferences through your browser at any time.
• Data access, correction, or deletion — Contact us at support@natuvalabs.store.

Changes to This Policy

We may revise this Privacy Policy as our practices evolve or legal requirements change. Updates take effect as soon as they are posted on this page. We encourage you to check back periodically. Continued use of our website after a change is posted indicates your acceptance of the updated terms.

Natuva Labs (Tilen Piskule s.p.) — Keršova ulica 3, 3212 Vojnik, Slovenia support@natuvalabs.store | +386 70 572 566