Skip to content 
Privacy Policy
1. Who We Are
Thurje Handmade is the commercial name of Mikaela Maçka PF (NIPT: M01808005D), a sole trader registered in Albania, with registered address at Baba Meleq, Old Bazaar, 7001 Korça, Albania. We operate the e-commerce website http://www.thurjehandmade.com, where we sell handmade rugs and textile products.
For the purposes of GDPR and applicable Albanian data protection law (Law No. 9887 as amended), Mikaela Maçka is the Data Controller.
Data Controller contact: contact@thurjehandmade.com
2. What Data We Collect and Why
2.1 When You Place an Order
To process and fulfil your order, we collect:
– Full name
– Delivery address
– Email address
– Phone number
– Order details and payment confirmation (payment data is processed by PayPal — we do not receive or store your full card details)
Legal basis: Contract performance (GDPR Art. 6(1)(b)) and legal obligation (Art. 6(1)(c)) for tax and accounting records.
2.2 When You Contact Us
Via our contact form, we collect your name, company name (optional), email address, and the content of your message.
Legal basis: Legitimate interests (Art. 6(1)(f)) to respond to enquiries.
2.3 Newsletter Subscription
If you subscribe to our newsletter, we collect your email address.
Legal basis: Consent (Art. 6(1)(a)). You may unsubscribe at any time.
2.4 Website Analytics
We use Google Analytics to collect anonymised data about how visitors use our Website (pages visited, time on site, geographic region, device type). IP addresses are anonymised before processing.
Legal basis: Consent (Art. 6(1)(a)), obtained via our cookie consent banner.
2.5 Advertising and Retargeting
We use the Meta Pixel (Facebook/Instagram) to measure the performance of our advertising campaigns. We also use Google Listings & Ads to list our products on Google Shopping and manage advertising campaigns.
Legal basis: Consent (Art. 6(1)(a)), obtained via our cookie consent banner.
2.6 Email Marketing
We use MailPoet (Automattic Inc.) to manage newsletter subscriptions and send marketing emails. We collect your email address for this purpose.
Legal basis: Consent (Art. 6(1)(a)). You may unsubscribe at any time via the link in any email we send.
2.7 Spam Filtering
We use Akismet (Automattic Inc.) to filter spam submissions through our contact forms. Akismet may process the content of your message and associated metadata (IP address, browser user agent).
Legal basis: Legitimate interests (Art. 6(1)(f)) to maintain a functional and secure website.
2.8 Cookie Consent Management
We use Complianz (van Ommen IT) to manage and record your cookie consent preferences.
Legal basis: Legal obligation (Art. 6(1)(c)) to maintain a record of consent under GDPR.
3. How We Share Your Data
We share data with the following third parties, solely to provide our services:
– DHL / Albanian Post — receive your name, delivery address and phone number to fulfil your shipment.
– PayPal (WooCommerce PayPal Payments) — handles payment transactions securely. We do not receive or store your full card details. See paypal.com/privacy.
– Automattic Inc. (USA) — provides WordPress.com hosting, MailPoet email marketing, and Akismet spam filtering. Data is transferred under Standard Contractual Clauses.
– Complianz (van Ommen IT, Netherlands) — manages cookie consent records.
– Google LLC (USA) — processes analytics data (Google Analytics) and advertising/product listing data (Google Listings & Ads).
– Meta Platforms Inc. (USA/Ireland) — processes advertising data via the Meta Pixel in accordance with Meta’s Data Policy.
We do not sell or rent your personal data to any third party for their own marketing purposes.
4. Data Retention
– Order records: 5 years (fiscal and legal obligation).
– Contact enquiries: 1 year from date of last contact.
– Newsletter subscriptions (MailPoet): Until unsubscription.
– Analytics (Google Analytics): 26 months.
– Cookie consent records (Complianz): 1 year.
– Spam filter data (Akismet): Akismet retains data for a maximum of 90 days.
5. Your Rights
Under GDPR, you have the right to:
– Access a copy of your personal data
– Rectify incorrect or incomplete data
– Request erasure of your data (right to be forgotten)
– Restrict or object to certain processing activities
– Data portability (receive your data in machine-readable format)
– Withdraw consent at any time (without affecting lawfulness of prior processing)
Submit requests to: contact@thurjehandmade.com. We will respond within 30 days. You also have the right to lodge a complaint with the Albanian Information and Data Protection Commissioner (IDP): http://www.idp.al.
6. Security
We use SSL/HTTPS encryption across our Website and implement appropriate technical and organisational measures to protect your data. Payment processing is handled entirely by PayPal under PCI-DSS standards.
7. Updates to This Policy
We may revise this Privacy Policy to reflect changes in our practices or applicable law. Updates will be published on this page with a revised date.
8. Contact
Email: contact@thurjehandmade.com