Privacy Policy

This website is operated by the official Croatian distributor of Dok Bua Ku / Twinlotus oral care products and data controller, Balti Savjetovanje d.o.o., Lopašićeva 6, 10000 Zagreb, Croatia. The OIB and court-register details will be published before online sales open. For any privacy matter, use the contact form at https://twinlotus.hr/en/contact.

We collect only the data you give us and the minimum needed to run the site:

• Enquiry and pre-order form: name, email address, phone number (optional), the product you ask about, and your message.
• Orders (once the web shop is live): name, email, phone, delivery address, the items you order, and payment status. Card details are processed by our payment provider (Revolut) and never reach our servers.
• Technical data: basic server logs (IP address, browser type, pages visited) kept for security and troubleshooting.

• To answer your enquiries and process pre-orders: performance of a contract or steps prior to one (Art. 6(1)(b) GDPR).
• To fulfil and deliver orders and handle complaints: Art. 6(1)(b) GDPR.
• To meet legal obligations such as accounting and tax rules: Art. 6(1)(c) GDPR.
• To send newsletters or marketing: only with your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.

Data is stored in the European Union (our database and file storage run in an EU data centre in Frankfurt, Germany). Enquiries are kept for up to 2 years after our last contact. Order and invoice data is kept as long as Croatian accounting and tax law requires. Server logs are kept briefly and rotated automatically.

We never sell your data. We share it only with service providers needed to run the shop: website hosting (Vercel), database and storage (Supabase), payment processing (Revolut), email delivery, and the courier that delivers your order: and with authorities where the law requires it.

Under the GDPR you can ask us at any time for access to your data, correction, deletion, restriction of processing, data portability, or object to processing based on our legitimate interest. Where processing is based on consent, you can withdraw it at any time.

To exercise any right, send a written request through https://twinlotus.hr/en/contact. You also have the right to complain to the Croatian Personal Data Protection Agency (AZOP, www.azop.hr).

This site currently uses only cookies that are strictly necessary for it to work (for example, remembering your language and, in the back office, keeping administrators signed in). Analytics or marketing cookies will only ever be set with your prior consent via the cookie banner. You can change your choice at any time by clearing this site's cookies in your browser: the banner will appear again on your next visit.