Majestic Puzzles


← Back to Policies

Privacy Policy

Last updated: July 4, 2026

This Privacy Policy explains how Tapija d.o.o. (“we”, “us”, “our”) collects and processes personal data when you use www.majestic-puzzles.com.

We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable UK data protection laws.

1. DATA CONTROLLER

Tapija d.o.o.

Puntižela 22

HR-52100 Pula

Croatia

Email: info@tapija.com

2. DATA WE COLLECT

We collect only data necessary to operate our store, process orders, and provide customer support.

2.1 Data you provide directly

When you use our website or place an order, we may collect:

  • Name
  • Email address
  • Billing and shipping address
  • Phone number (if provided at checkout)
  • Payment information (processed securely via payment providers, not stored by us)
  • Order details

2.2 Uploaded content (AI personalisation)

When you place a personalised order, you may upload:

  • photographs
  • images of individuals or pets
  • other visual content required for personalisation

These files are processed exclusively to:

  • generate AI-based artwork
  • fulfil your order

We do not use uploaded images for marketing or training purposes.

3. PURPOSE OF PROCESSING

We use your data for the following purposes:

  • processing and fulfilling orders
  • generating personalised AI artwork
  • delivery and logistics
  • customer support
  • payment processing and fraud prevention
  • legal compliance
  • communication regarding your order

4. LEGAL BASIS FOR PROCESSING

We process your data based on:

  • contract performance (order fulfilment)
  • legal obligations (tax and accounting requirements)
  • legitimate interest (fraud prevention, business operations, customer support)
  • consent (marketing communications, where applicable)

5. THIRD PARTIES AND DATA SHARING

We do not sell or rent personal data.

We may share data only with trusted third parties necessary for order fulfilment:

  • Shopify (store infrastructure)
  • payment processors (e.g. Shopify Payments, card networks)
  • shipping and fulfilment partners (including third-party print providers)
  • IT and hosting providers

These parties process data only as required to perform their services.

6. INTERNATIONAL DATA TRANSFERS

Your data may be processed outside your country of residence, including outside the UK/EEA, where service providers operate.

Where this occurs, appropriate safeguards (such as Standard Contractual Clauses) are applied.

7. DATA RETENTION

We retain personal data only as long as necessary:

  • order data: up to 7 years (legal/accounting obligations)
  • customer support data: as long as needed for communication
  • uploaded images: deleted within 4 business days after order completion
  • marketing data: until consent is withdrawn

8. DATA SECURITY

We apply appropriate technical and organisational measures to protect your data against:

  • unauthorised access
  • loss or alteration
  • misuse or disclosure

Access to data is restricted to authorised personnel only.

9. YOUR RIGHTS (GDPR & UK GDPR)

You have the right to:

  • access your personal data
  • correct inaccurate data
  • request deletion of data
  • restrict processing
  • object to processing
  • data portability
  • withdraw consent at any time
  • lodge a complaint with a supervisory authority

In Croatia, you may contact:

Croatian Personal Data Protection Agency (AZOP)

Selska cesta 136, Zagreb, Croatia

10. COOKIES

We use cookies to operate our website and improve user experience.

Cookies may include:

  • strictly necessary cookies (required for website functionality)
  • functional cookies (preferences, settings)
  • analytics cookies (website performance tracking)
  • marketing cookies (advertising and remarketing, if enabled)

You can manage cookie preferences through your browser settings or cookie banner.

11. AI AND AUTOMATED PROCESSING

We use automated systems (including AI tools) to generate personalised artwork based on uploaded images.

This processing:

  • is necessary to fulfil your order
  • does not make automated legal or financial decisions about you
  • is limited to creative image generation

12. CHILDREN’S DATA

Our services are not intended for children under 16 without parental consent.

We do not knowingly collect data from children without appropriate permission.

13. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time.

The updated version will always be posted on this page with the revised date.

14. CONTACT

For any privacy-related questions:

Email: info@tapija.com

Company: Tapija d.o.o.

Website: www.majestic-puzzles.com