Last updated: 2026-04-28
Hereke Tepisi & Staze & Etisoni ("we", "us", "our") respects your privacy. This policy explains what information we collect through hereketepih.com, how we use, share and store it, and what rights you have regarding your data.
Information you provide: name, email, phone number, delivery address and any other details submitted through contact forms, order checkout, newsletter signup or job applications.
Information collected automatically: IP address, device and browser type, visit timestamps and pages viewed. We use these only for analytics and security.
We use your data to respond to enquiries, fulfil orders, deliver products, send the newsletter (only with your consent), and to improve the website experience.
We do not use your data for automated profiling or for third-party advertising networks.
The site uses essential cookies to keep your cart and admin session active, plus Google reCAPTCHA for spam protection. You can disable cookies in your browser settings, but some functionality may stop working.
We do not sell your data. We share it only with trusted partners that help us run the service: courier companies (for delivery), email providers (Google Workspace), hosting and database (Neon, Google Cloud Storage), Google reCAPTCHA and Google Maps. All processors are bound by contract to keep your data confidential.
We may disclose data to competent authorities if required by law.
Order data is kept for as long as needed to perform the contract and meet legal obligations (accounting rules typically require 5–10 years). Newsletter records are kept until you unsubscribe. Contact form messages are kept for up to two years unless legal obligation requires longer retention.
You have the right to request access, rectification, erasure, restriction of processing, data portability, and to object to processing. You may also withdraw consent at any time — this does not affect the lawfulness of processing prior to withdrawal.
Send any request to info@hereketepih.com. We will respond within 30 days.
We use encryption in transit (HTTPS), bcrypt-hashed passwords, and access controls for admin functions. No internet transmission is fully secure — we recommend not sending sensitive data through unprotected channels.
Our hosting and file storage operate partly in EU data centres (Frankfurt, Germany). Where processors may transfer data outside the EU/EEA, we rely on Standard Contractual Clauses approved by the European Commission.
The site is not intended for individuals under 16. We do not knowingly collect data from minors.
We may update this policy from time to time. The "Last updated" date at the top reflects the current version. Material changes will be highlighted.
For any privacy-related questions, contact us at info@hereketepih.com or visit us at Kolodvorska 12 and Kurta Schorka 24, Sarajevo, Bosnia and Herzegovina.
