Privacy policy

Last updated: 27 September 2026

Who is responsible for your information?

Quintéa is operated by THE AXN SRL, CUI 51514286, Trade Register number J2025021460006. Our registered office and postal contact address is Calea Moșilor nr. 88, sc. F, ap. 82, Bucharest, Romania. THE AXN SRL is the controller of the customer information we use to operate Quintéa.

For privacy questions or requests, email hello@quintea.eu or call +40 793 173 700.

What we collect and why

• Orders and customer accounts: your name, contact details, delivery and billing address, ordered items, payment status, order history and account information. We use this to take payment, deliver orders, provide account access and handle cancellations, returns and customer service. The legal basis is performing our contract with you or taking steps at your request before a contract.
• Customer messages: the information you send when you contact us. We use it to answer your request and resolve complaints, relying on our contract or our legitimate interest in providing customer service. Please avoid sending unnecessary health information or full payment-card details.
• Legal and accounting records: invoice, transaction and correspondence information required for tax, accounting, product-safety and consumer-protection obligations. The legal basis is compliance with applicable law.
• Security and basic operation: device/browser information, IP address, activity logs and information needed to keep the cart, account and website working and prevent fraud. We rely on our legitimate interests in a secure, reliable store, subject to your rights and any consent required for the technology used.
• Optional marketing and measurement: your email address and marketing preferences when you choose to subscribe, and optional cookie or advertising information when you give the required consent. You can refuse these choices and still browse or buy. Where another legal basis for a particular communication is permitted, we provide the required information and opt-out.

Order and delivery information is needed to fulfil a purchase; if it is not provided, we may be unable to complete the order. Marketing consent is optional. We receive information directly from you, through your interaction with the store, and from providers involved in payments, delivery and website operation.

Payments and service providers

Our store is hosted by Shopify. Information needed for your transaction is shared with Shopify, the payment provider you choose, delivery providers and service providers supporting our website, customer service and accounting. They receive information needed for their work and process it under the applicable arrangements. Payment credentials are handled through the checkout and the relevant payment provider; do not send card details by email.

We may also disclose information when required by law, to protect legal rights and prevent fraud, or in connection with a genuine business transfer subject to applicable safeguards. We do not publish your order details.

Shopify's role

Shopify processes information to provide and improve its platform. Some enhanced Shopify features can use information about interactions with our store together with interactions with other merchants and Shopify. For processing where Shopify acts as an independent controller, its own privacy notice and rights process apply. Read the Shopify Consumer Privacy Policy or visit the Shopify Privacy Portal.

Cookies and your choices

Essential cookies and similar storage support functions such as the shopping cart, security, checkout and remembering your privacy choices. The product finder can also remember your selections in your browser so you can return to them.

Where required, optional analytics, advertising and personalisation technologies require your consent before use. Use the cookie banner to accept, reject or choose optional purposes. You can change or withdraw your choices through the store's cookie-preferences control. Withdrawal does not affect processing that was lawful before you withdrew consent. Your browser can also clear stored site data; doing so may remove saved cart or finder choices.

Email subscriptions

If you subscribe, we use your email for the marketing you agreed to receive. Use the unsubscribe link in a marketing email or contact hello@quintea.eu to stop. Order, delivery and service messages are separate from marketing subscriptions.

International processing

Shopify and other providers may process information outside Romania or the European Economic Area. Where a transfer requires safeguards, we rely on an applicable adequacy decision or appropriate contractual safeguards, such as European Commission Standard Contractual Clauses. Contact us for information about safeguards relevant to your data.

How long we keep information

We keep information for as long as needed for the purpose for which it was collected, including completing orders and returns, maintaining an account you use, handling disputes and meeting Romanian accounting, tax and other legal retention requirements. These obligations can require some records to remain after an account closes. Marketing information is kept until you withdraw or it is no longer needed; limited suppression records may be kept to respect your opt-out. Security and technical records are kept only for the period needed for their purpose. We then delete or anonymise information unless continued retention is legally required.

Your rights

Under the GDPR, you may request access, correction, deletion, restriction or portability where applicable, object to processing based on legitimate interests, and withdraw consent. You can object to direct marketing at any time. Where legally applicable, you may ask for human intervention and contest a decision based solely on automated processing that has legal or similarly significant effects.

Email hello@quintea.eu to exercise your rights. We may need proportionate information to verify your identity. We normally respond within one month; if the law permits an extension, we explain it within that period. You will not be treated unfairly for exercising your rights.

You can complain to Romania's data-protection authority, ANSPDCP, or your competent supervisory authority. You do not need to contact us first to make a complaint.

Children, security and updates

The store is intended for people able to place an order lawfully. We do not seek to collect children's information for marketing. If a child has provided information, contact us so we can assess and address it. We use appropriate organisational and technical safeguards, but no system can guarantee absolute security.

We update this notice when our practices or obligations change. The date above identifies the current version. Where required, we provide additional notice or ask for new consent.