Privacy Policy
tembo Craft DESIGN
handmade
Last updated: August 8, 2026
1. INTRODUCTION AND GENERAL PROVISIONS
1.1. tembo Craft DESIGN (“we,” “us,” or “our”) respects the privacy of our users (“user” or “you”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at www.tembocraftdesign.com, including any other media form or media channel connected thereto (collectively, the “Site”).
1.2. Right to Amend: We reserve the exclusive right to make changes, amendments, or updates to this Privacy Policy at any time and for any reason at our sole discretion. Any modifications will become effective immediately upon posting the updated Privacy Policy on the Site. We will alert you about changes by updating the “Last updated” date at the top of this document. You are encouraged to periodically review this Privacy Policy to stay informed of updates. Continued use of the Site after the date such revised policy is posted constitutes your explicit awareness and acceptance of those changes.
1.3. Relationship to General Terms: For any privacy, data management, or legal matters not explicitly documented in this Privacy Policy, our General Terms & Conditions and our B2B Terms & Conditions shall strictly govern and apply.
2. DATA CONTROLLER INFORMATION
2.1. The Data Controller responsible for the collection and processing of your personal data on this Site is tembo Craft DESIGN.
2.2. For any questions, formal notices, or to exercise your data subject rights, you may contact us directly via email at info@tembocraftdesign.com or through our primary website contact channels.
3. COLLECTION OF YOUR INFORMATION
3.1. We may collect information about you in a variety of ways. The information we may collect on the Site includes:
3.1.1. Personal Data: Personally identifiable information, such as your name, shipping address, billing address, email address, and telephone number, that you voluntarily provide to us when participating in activities related to the Site, such as placing orders, subscribing to newsletters, or contacting customer support.
3.1.2. Derivative Data: Technical information our servers may automatically collect when you access the Site, such as your IP address, browser type, operating system, access times, and the pages viewed directly before and after accessing the Site.
3.1.3. Financial Data: We store minimal to no financial information. All sensitive billing data is processed and stored securely by our third-party payment gateways (e.g., Stripe, PayPal), and you are encouraged to review their respective privacy policies.
3.1.4. Social Media and Integration Data: User information from social networking sites, including basic account details, profile pictures, and public metrics, accessible if you connect your account or interact with our integrated social features.
3.1.5. Mobile Device Data: Device information, such as your mobile device ID, hardware model, manufacturer, and location metrics if accessing the Site via a mobile browser or application.
3.1.6. Survey and Promotional Data: Personal or preference information voluntarily provided when responding to customer surveys, contests, or feedback requests.
4. LEGAL BASIS AND USE OF YOUR INFORMATION
4.1. Legal Grounds for Processing: We process your personal data strictly under valid legal bases set forth by applicable privacy laws (including the EU GDPR), such as:
4.1.1. Contractual necessity (fulfilling your product orders and maintaining user accounts);
4.1.2. Legal obligations (compliance with tax, invoicing, and commercial laws);
4.1.3. Legitimate business interests (preventing fraud, enhancing site security, and internal analytics);
4.1.4. Explicit consent (direct email marketing and non-essential tracking technologies).
4.2. Specific Processing Purposes: Having accurate information permits us to provide a secure and customized experience. Specifically, we use information collected via the Site to:
4.2.1. Administer, fulfill, and manage purchases, orders, payments, and refund transactions;
4.2.2. Create, manage, and secure your personal or business account;
4.2.3. Deliver order confirmations, shipping updates, and administrative communications;
4.2.4. Send promotional newsletters, marketing updates, and special offers (where consented);
4.2.5. Monitor usage, analyze behavioral trends, and optimize Site efficiency;
4.2.6. Prevent fraudulent transactions, prevent theft, and protect against criminal activity;
4.2.7. Resolve customer support inquiries, dispute resolutions, and technical troubleshooting.
5. DISCLOSURE OF YOUR INFORMATION
5.1. We may share information we have collected about you in specific commercial or legal situations. Your information may be disclosed as follows:
5.1.1. By Law or to Protect Rights: If we believe the release of information is necessary to respond to legal process, investigate policy violations, or protect the safety and rights of our business and third parties.
5.1.2. Third-Party Service Providers: We may share data with external vendors who perform services on our behalf, including payment processing, logistics and parcel delivery, hosting, customer service, and email dispatch.
5.1.3. Online Postings: Content or comments voluntarily posted on public areas of the Site may be viewed by all visitors and distributed outside the platform in perpetuity.
5.1.4. Business Transfers: In the event of a merger, acquisition, asset sale, or bankruptcy, user data may be transferred as an acquired asset to a successor entity.
6. DATA RETENTION
6.1. We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is mandated or permitted by law.
6.2. Tax and Transactional Records: Accounting and invoicing records containing personal details are retained for a mandatory statutory period (up to 8 years) pursuant to applicable tax and commercial law requirements.
7. TRACKING TECHNOLOGIES AND COOKIES
7.1. We may use cookies, web beacons, tracking pixels, and analytics tools on the Site to help customize the platform and improve your browsing experience.
7.2. Non-essential cookies (such as marketing, profiling, and third-party analytical cookies) may be deployed strictly based on your affirmative consent obtained via our interactive cookie consent banner. For comprehensive details on cookie management and classification, please refer to our separate Cookie Policy posted on the Site.
8. YOUR DATA PROTECTION RIGHTS (INCLUDING AMENDMENT & ACCESS)
8.1. Under applicable privacy laws (such as the EU GDPR and global privacy frameworks), you possess statutory rights regarding the personal information we hold about you:
8.1.1. Right to Access: You have the right to request confirmation as to whether we process your data and to request copies of your personal records.
8.1.2. Right to Rectification and Amendment: You have the absolute right to request that we correct, update, or amend any personal information you believe is inaccurate, outdated, or incomplete.
8.1.3. Right to Erasure ("Right to be Forgotten"): You have the right to request that we delete your personal data from our systems, provided there are no overriding legal obligations (such as tax compliance) requiring its retention.
8.1.4. Right to Restrict Processing: You may request that we limit the processing of your personal data under specific legal circumstances (e.g., while the accuracy of data is being verified).
8.1.5. Right to Object: You have the right to object at any time to the processing of your personal data based on legitimate business interests or for direct marketing purposes.
8.1.6. Right to Data Portability: You have the right to request that we transfer your personal data to another organization or directly to you in a structured, machine-readable format.
8.2. To exercise any of these rights, you may submit a request by contacting us at info@tembocraftdesign.com or via our "Contact" page. We will respond to valid requests without undue delay.
9. B2B AND DROPSHIPPING OPERATIONS
9.1. B2B Partner Data: If you register as a B2B Partner, we collect and process corporate information, business tax numbers, and business contact details strictly for account management, B2B invoicing, and contract fulfillment.
9.2. Dropshipping End-Customer Data (Data Processing): In the context of dropshipping orders, the B2B Partner acts as the primary Data Controller of their end-customer's personal data. tembo Craft DESIGN acts purely as a Data Processor.
9.2.1. When a B2B Partner submits a dropshipping order, they share the end-customer’s name, shipping address, and phone number with us strictly for physical fulfillment and carrier delivery purposes.
9.2.2. We do not use end-customer data for marketing, profiling, or any purpose other than dispatching the order via our logistics partners.
9.2.3. The B2B Partner guarantees and warrants that they have obtained all legally required consents from their end-customers prior to sharing their details with us.
9.2.4. This section operates in direct conjunction with our dedicated B2B Terms & Conditions.
10. SECURITY OF YOUR INFORMATION
10.1. We employ industry-standard administrative, technical, and physical security measures to protect your personal information against unauthorized access, loss, or destruction.
10.2. While we take all reasonable precautions, no internet transmission or electronic storage method can be guaranteed as 100% impenetrable. Consequently, we cannot guarantee absolute security against malicious third-party interceptions.
11. AGE OF CONSENT
11.1. By using this Site, you represent that you are at least the age of majority in your jurisdiction of residence, or that you have granted explicit consent to allow any of your minor dependents to access and use the Site under your supervision.
12. COMPLAINTS AND SUPERVISORY AUTHORITIES
12.1. If you believe that our processing of your personal data infringes upon your statutory privacy rights, we encourage you to contact us directly to resolve the matter.
12.2. You also maintain the statutory right to lodge a formal complaint with a competent Data Protection Authority (such as the Hungarian National Authority for Data Protection and Freedom of Information - NAIH, or your local European Union supervisory authority).