PRIVACY POLICY — DIRTY LENS
Last updated: 26/07/2026
1. Who We Are
Dirty Lens (“Dirty Lens,” “we,” “us,” “our“) sells eyewear online. For the purposes of applicable data protection law, we are the data controller responsible for your personal data.
| Legal business name | [Dirty Lens] |
| Registered address | [] |
| Country of registration | [Republic of North Macedonia] |
| Contact email | [privacy@dirtylens.com] |
| Contact phone | [] |
If you have any questions about this policy or how we handle your data, contact us using the details above.
2. Scope
This policy applies to visitors and customers of our website (built on WordPress/WooCommerce) and covers customers ordering from Macedonia, Albania, Kosovo, and Serbia. If we expand to other countries, we will update this policy accordingly.
3. Information We Collect
3.1 Information you give us directly
When you create an account, place an order, or contact us, we collect:
- Full name
- Delivery address and, where different, billing address
- Phone number (required for cash-on-delivery coordination with the courier)
- Email address
- Order details (products, sizes, quantities, order value, order history)
- Any information you include in messages to our customer support
3.2 Payment information
We currently accept cash on delivery. This means:
- We do not collect or store credit/debit card numbers, bank details, or other card payment data.
- Payment is handled entirely at the point of delivery, between you and the courier.
- If we add online payment methods in the future (card, e-wallet, etc.), this section will be updated to describe the payment processor involved and what data it handles.
3.3 Information collected automatically
Like most WordPress/WooCommerce stores, our site automatically collects some technical data when you browse, including:
- IP address
- Browser type and version, device type, operating system
- Pages viewed, time spent on pages, referring website
- Shopping cart and session data (so your cart isn’t lost between pages)
- Basic server log data
We do not currently run third-party analytics or advertising tools (like Google Analytics or Meta/Facebook Pixel). If we add any in the future, we’ll update this section and, where required, ask for your cookie consent first.
3.4 Cookies
Our site uses cookies that are strictly necessary for it to function, including:
- Session cookies to keep items in your cart and remember you’re logged in
- WooCommerce cookies used to manage the checkout process
- A cookie-consent cookie, if we display a cookie banner, to remember your preference
These essential cookies don’t require consent under most regional laws, but we’ll display a cookie notice if we add any non-essential ones later (e.g., analytics or marketing cookies).
3.5 Prescription / vision information (planned feature — not yet collected)
We plan to let customers submit prescription or vision details (e.g., sphere, cylinder, axis, pupillary distance) so we can prepare prescription eyewear. Once this feature is live:
- This information is treated as sensitive health-related data under data protection law.
- We will only collect it with your explicit, separate consent, given at the point you submit your prescription.
- It will be used solely to manufacture and verify your order — never for marketing or profiling.
- You’ll be able to ask us to delete it at any time (see Section 9).
(We recommend having this specific clause reviewed by a lawyer once the feature is built, since exact consent-wording requirements differ across Macedonia, Albania, Kosovo, and Serbia.)
4. How We Use Your Information
We use the personal data described above to:
- Process, pack, and deliver your order, and coordinate cash-on-delivery with our courier
- Create and manage your account, if you have one
- Communicate with you about your order (confirmations, delivery updates, order issues)
- Respond to customer service questions
- Manufacture prescription eyewear accurately, where applicable
- Improve our website and product range
- Detect and prevent fraud or abuse of our services
- Comply with legal and accounting obligations (e.g., invoicing, tax records)
We do not sell your personal data to third parties.
5. Legal Basis for Processing
Depending on the activity, we rely on:
- Performance of a contract — to process and deliver your order
- Consent — for prescription data, and for any future marketing communications or non-essential cookies
- Legal obligation — for tax, accounting, and record-keeping requirements
- Legitimate interest — for basic website security, fraud prevention, and improving our store, balanced against your rights
You can withdraw consent-based processing (e.g., marketing emails) at any time.
6. Who We Share Your Information With
We share personal data only where necessary to run our business:
| Recipient | Why | What’s shared |
|---|---|---|
| Courier / delivery company | To deliver your order and collect cash payment | Name, delivery address, phone number, order value |
| Website hosting provider | To host our WordPress/WooCommerce store | Technical/log data, order data stored in our database |
| WooCommerce/WordPress plugin providers | Plugins that power checkout, shipping, or other store features | Order and account data needed for the plugin to function |
| Accountant / bookkeeper | Tax and legal compliance | Invoicing and order data |
| Authorities | Where legally required (e.g., court order, tax inspection) | Whatever is legally requested |
We do not share prescription/vision data with anyone except the party directly manufacturing your eyewear, and only once that feature is active.
7. International Data Transfers
Our website and store data may be hosted on servers located outside Macedonia, Albania, Kosovo, or Serbia (for example, if our hosting provider’s data centers are in the EU or elsewhere). [Confirm your hosting provider’s server location and insert it here — e.g., “Our hosting provider stores data in [country/region].”] Where data is transferred outside your country, we take reasonable steps to ensure it’s protected to a standard consistent with this policy.
8. Data Retention
We keep personal data only as long as necessary:
- Order and invoicing data: for the period required by local accounting/tax law (commonly several years)
- Account data: until you ask us to delete your account, or after a period of inactivity
- Prescription data: only for as long as needed to fulfill your order, unless you ask us to keep it on file for future orders (with your consent)
- Marketing consent records: until you withdraw consent
9. Your Rights
Depending on where you live, you generally have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Delete your data (“right to erasure”), subject to legal retention requirements
- Restrict or object to certain processing
- Data portability — receive your data in a portable format
- Withdraw consent at any time, where processing is based on consent
- Lodge a complaint with your national data protection authority
To exercise any of these rights, contact us at [privacy@dirtylens.com]. We’ll respond within the timeframe required by applicable law.
Relevant supervisory authorities:
| Country | Authority | Website |
|---|---|---|
| North Macedonia | Agency for Personal Data Protection (Агенција за заштита на личните податоци) | azlp.mk |
| Albania | Commissioner for the Right to Information and Protection of Personal Data (IDP) | idp.al |
| Kosovo | Information and Privacy Agency (IPA) | aip.rks-gov.net |
| Serbia | Commissioner for Information of Public Importance and Personal Data Protection (Poverenik) | poverenik.rs |
10. Data Security
We use reasonable technical and organizational measures to protect your data, including secure hosting, access controls on our WooCommerce admin, and regular software/plugin updates. However, no method of transmission or storage is 100% secure, and we can’t guarantee absolute security.
11. Children’s Privacy
Our store is not directed at children, and we do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, contact us and we will delete it.
12. Changes to This Policy
We may update this policy from time to time — for example, when we launch prescription eyewear or add new tools to our store. We’ll update the “Last updated” date at the top, and for significant changes, we’ll take reasonable steps to notify you (e.g., a website notice or email).
13. Contact Us
Questions about this policy or your personal data?
Dirty Lens [Registered address] [privacy@dirtylens.com] [Phone number]
