WHO WE ARE
The controller of your personal data is NEYCHUR d.o.o., Smlednik 31A, 1216 Smlednik, Slovenia (trading as Tropics' Narcotics). Contact: info@tropicsnarcotics.com
WHAT WE COLLECT AND WHY
- Order data (name, addresses, email, phone, order details) to process and deliver your order and issue invoices. Legal basis: performance of contract and legal obligations.
- Payment data, processed directly by our payment providers. We do not store your card details.
- Support communication, to answer your questions. Legal basis: performance of contract / legitimate interest.
- Newsletter data (email), only if you subscribe. Legal basis: consent, which you can withdraw at any time via the unsubscribe link.
- Browsing data (device info, IP address, pages viewed) through cookies, for site functionality and, with your consent, analytics and advertising.
WHO WE SHARE IT WITH
We share data only with service providers who help us run the shop: Shopify (store platform), payment providers, shipping carriers, Google Analytics (analytics), Meta (advertising, only with consent), and our email marketing provider. Some of these providers process data outside the EU under appropriate safeguards such as the EU Standard Contractual Clauses. We do not sell your personal data. We do not engage in automated decision-making that has legal or similarly significant effects on you.
HOW LONG WE KEEP IT
Invoices and accounting records are kept for 10 years as required by Slovenian law. Other order and support data is kept as long as needed for the purposes above. Newsletter data is kept until you unsubscribe.
COOKIES
Non-essential cookies are only set with your consent, which you can manage through the cookie banner on our site.
YOUR RIGHTS
You have the right to access, correct, delete, restrict or port your data, to object to processing, and to withdraw consent at any time. Contact us at info@tropicsnarcotics.com. You also have the right to lodge a complaint with the Information Commissioner of the Republic of Slovenia (www.ip-rs.si) or your local data protection authority.
Last updated: October 2026
