Your cart is currently empty!
Privacy Policy
Effective Date: 6 November 2026
Welcome to www.timmlux.com, operated by TIMMLUX, trgovina in storitve d.o.o. (referred to as “we”, “us” or “our” in this policy). We are deeply committed to protecting the personal information privacy, security and rights of all users who visit our website, browse our products and use our e-commerce services. This Privacy Policy is designed to clearly explain how we collect, use, store, share, protect your personal information when you interact with our kitchen textile shopping platform, as well as the full scope of rights you hold over your personal data.
We develop this policy in strict compliance with the General Data Protection Regulation (GDPR), relevant Slovenian data protection legislations, the Chinese Personal Information Protection Law and all applicable cross-border e-commerce data compliance rules, to make sure all your personal information processing activities are legal, proper, transparent and minimalized. Before you start using any services on www.timmlux.com, please read this full policy carefully to fully understand our data handling practices.
1. Who We Are
The data controller responsible for your personal information processing in accordance with applicable data protection laws is:
- Full Business Name: TIMMLUX, trgovina in storitve d.o.o.
- Registered Address: Ulica Staneta Severja 10, 2000 Maribor, Slovenia
- Contact Email: vryn@timmlux.com
- Contact Telephone: +386 51 321 044
If you have any questions, concerns or requests related to your personal data and this Privacy Policy, you can reach out to us at any time via the contact details listed above. We will respond to all legitimate inquiries within 30 calendar days.
2. Scope of Application
This Privacy Policy applies to all personal information processing activities carried out when you access www.timmlux.com, browse our full range of kitchen and home textile products, register an account, place an order, complete payment, use our after-sales support, sign up for marketing notifications, or interact with any other features we provide on our platform.
This policy does not apply to third-party services that we link to on our website, including but not limited to third-party payment processors, independent logistics service providers, or external social media platforms. When you use these third-party services, their respective privacy policies will govern their processing of your personal information, and we strongly recommend you review those policies before providing any personal data to those third parties.
3. Definitions of Key Terms
To help you understand this policy clearly, we provide the following plain-text explanations of important terms:
- Personal Information: Refers to any information recorded in electronic or other formats that can identify or is related to a specific natural person, including your name, phone number, email address, delivery address, order records, device information, browsing history and other data that can be linked to you. This definition excludes fully anonymized statistical data that cannot identify any individual, even with additional supplementary information.
- Sensitive Personal Information: Refers to categories of personal information that may pose risks to your personal safety, property security and legal rights if leaked, misused or illegally accessed, including your precise delivery address, payment account details, identity verification information, and precise geolocation data. We implement extra strict protection measures for all sensitive personal information you provide to us.
- Anonymization: A processing method that transforms personal information so that it cannot identify any specific natural person, and this process cannot be reversed or restored to re-identify an individual.
- Pseudonymization: A processing method that modifies personal information to remove direct personal identifiers, such that the information can no longer be attributed to a specific individual without the use of additional separate information that we store in a secure, isolated location.
4. Categories of Personal Information We Collect
We strictly follow the principles of data minimization and necessity, and only collect information that is essential to deliver the e-commerce services you request. We will never collect any irrelevant personal information without your explicit consent. The personal information we may collect comes from two main sources:
4.1 Information You Actively Provide to Us
- Account Registration Information: When you create a TIMMLUX user account, you may choose to provide your username, email address, contact phone number, login password, and optional profile information like a nickname or profile avatar. This information is used to complete account creation, verify your identity, and support secure account login and management. You can also browse many product pages on our website without registering an account, though some features like one-click order tracking and saved delivery addresses will not be available.
- Transaction and Order Information: When you place an order for our kitchen textile products (including our range of insulated gloves, placemats, kitchen cloths, table linens and other home textile items), you will need to provide consignee name, contact telephone number, full delivery address, zip code, and any special order notes. We use this information to generate your formal order, confirm your purchase, arrange shipment, and ensure your products can be accurately delivered to you.
- Payment and Settlement Information: When you complete payment for your order, we will collect transaction serial number, payment status, payment method record, and order amount. We do not directly store your full bank card number, payment password or other core payment credentials: all sensitive payment processing is completed via certified, secure third-party payment service providers, in full compliance with global payment security standards. We only retain necessary transaction records for order reconciliation, post-purchase refund processing and financial compliance obligations.
- After-sales and Consultation Information: When you contact our customer support team, submit a return or exchange request, send us a product inquiry, or provide feedback about your shopping experience, you may provide us with corresponding consultation content, proof of purchase, product issue photos, and contact details. We use this information to resolve your problems efficiently, process your after-sales claims, and continuously optimize our product and service quality.
4.2 Information We Collect Automatically With Your Authorization
- Device and Access Information: When you visit www.timmlux.com, we automatically collect your device model, operating system version, browser type, IP address, time of access, page browsing trajectory, click operation records, and language preference settings. This information is used to maintain website security, diagnose technical failures, optimize page loading performance, and provide you with a smooth browsing experience adapted to your device.
- Cookie and Cache Information: We use standard Cookie and web cache technologies to collect information about your visit preferences, login status, and commonly used functional records on our platform. This helps us implement automatic login, display personalized product recommendations that match your interests, and count platform traffic data for operational optimization. You can fully manage or disable Cookie functions at any time via your own browser settings, but please note that disabling Cookies may affect the usability of some interactive features on our website.
- Voluntary Marketing Authorization Information: With your separate, explicit opt-in consent, we will collect your preference information for our new products, discount activities, and seasonal promotions, so that we can send you the marketing content that you have expressed interest in. You can withdraw this consent and unsubscribe from marketing communications at any time, and this will not affect your normal use of our core shopping services.
5. How We Use Your Personal Information
We only process your personal information for clear, legal, explicitly stated purposes that we have notified to you. We will never overstep the agreed scope of use, or misuse your personal information without obtaining new separate consent from you. The main legitimate use scenarios include:
- Core Service Fulfillment: We use your personal information to complete account registration verification, process your order from creation to delivery, arrange logistics tracking, process your payment and support after-sales services like returns and refunds, to make sure your entire shopping process for high-quality kitchen textiles goes smoothly.
- Platform Security Protection: Your information will be used to identify abnormal login behaviors, prevent fraud transactions, block malicious brushing and unauthorized access attacks, maintain the normal transaction order of our platform, and fully protect your account property and personal information security.
- User Communication and Notification: We will use your contact details to send you real-time order status updates, logistics delivery reminders, after-sales progress notifications, service upgrade announcements, and respond to your customer service inquiries and complaints promptly.
- Legal and Compliance Obligations: We may process your personal information to cooperate with relevant regulatory authorities, customs declaration for cross-border orders, tax declaration, and complete other legal compliance obligations required by applicable laws.
- Platform Optimization and Experience Improvement: We will process your browsing and behavior data in a fully anonymized, aggregated format to analyze overall user demand trends, optimize our product display logic, upgrade our website page functions, expand our product categories of kitchen textiles, and continuously improve your overall shopping experience. The anonymized data we use for optimization cannot be linked back to any specific individual user.
6. Storage and Protection of Your Personal Information
6.1 Storage Rules
- Storage Period: We only retain your personal information for the shortest period necessary to fulfill the service purposes you requested, and meet the statutory data retention requirements. During the validity period of your account, we will normally keep your account information, order records and transaction data. After you permanently delete your account, except for the information that we are legally required to retain for tax filing, logistics traceability and compliance verification purposes (which will be kept for no more than 3 years), all your other personal information will be thoroughly and irreversibly erased.
- Storage Location: Most of your personal information is stored in compliant, high-security data centers located within the territory of Slovenia and the European Economic Area. For cross-border order processing scenarios that require necessary data transmission to overseas cooperating logistics or service partners, we will strictly follow all applicable cross-border data transmission compliance rules, take adequate data protection measures, and fully ensure the security of your personal information during transmission.
- Classified Storage Management: We implement tiered storage for different categories of personal information: ordinary non-sensitive user information and sensitive personal information such as your payment details and precise delivery address are stored separately with special encryption for the sensitive data, and we strictly restrict internal access permissions to ensure that only authorized staff with legitimate business needs can access the information, and only within the scope necessary to complete their work.
6.2 Security Protection Measures
We have implemented multi-layer technical and management security protection systems to fully safeguard your personal information:
- On the technical side, we use SSL encrypted transmission for all data exchange between your browser and our website, encrypted database storage, firewall isolation, regular data desensitization, tamper-proof and anti-attack technologies to defend against hacking, data leakage and theft risks. We also carry out regular vulnerability detection and security system upgrades to continuously maintain our data protection capability.
- On the management side, we have established a strict internal hierarchical data permission system. All our staff who may access user personal information must sign a non-disclosure agreement, and unauthorized access, copying, disclosure or sale of user personal information is strictly prohibited. Any violation will result in corresponding disciplinary action and we reserve the right to pursue legal liability for any serious breaches.
- We also maintain a complete data security emergency response plan. In the unlikely event of a personal information security incident, we will immediately activate the emergency mechanism, take remedial measures as soon as possible, and notify you of the relevant situation in accordance with the requirements of applicable laws.
7. Sharing and Disclosure of Your Personal Information
We will never sell, rent or otherwise transfer your personal information to any third party for marketing purposes without your explicit separate consent. We may only share your necessary personal information with third-party service providers under the following limited circumstances, and we will require all our cooperating partners to strictly comply with applicable data protection laws and take sufficient measures to protect your personal information:
- Necessary Sharing to Fulfill Transaction Services: We will share the necessary consignee name, delivery address and contact phone number with our cooperating logistics service providers, solely for the purpose of delivering the products you purchased to you smoothly.
- Sharing with Authorized Payment Partners: We will share the necessary transaction verification information with our certified payment service providers, solely for the purpose of completing your payment processing and refund operations.
- Disclosure Required by Law: We may disclose your personal information when we are required by law, legal process, mandatory administrative order from a competent authority, to meet our legal obligations.
- Sharing After Your Explicit Consent: In any other scenario where we need to share your personal information, we will clearly inform you of the scope of information to be shared, the purpose of sharing, and obtain your separate explicit consent in advance.
8. Your Rights Over Your Personal Information
Under applicable data protection laws, you hold the following complete rights related to your personal information processed by us:
- Right of Access: You have the right to submit a request to obtain a copy of all your personal information that we hold.
- Right to Correction: If you find that the personal information we hold about you is inaccurate or incomplete, you have the right to request us to correct and update the relevant information immediately.
- Right to Erasure (Right to be Forgotten): You have the right to request us to delete your personal information under circumstances including that the information is no longer necessary for the original purpose we collected it for, you withdraw your consent to our processing, or our processing of the information violates applicable laws.
- Right to Restriction of Processing: You have the right to request us to restrict the processing of your personal information when you contest the accuracy of the data, you believe our processing is illegal, or we no longer need the data but you require us to retain it for legal claim purposes.
- Right to Data Portability: You have the right to request us to provide your personal information that you have provided to us, in a structured, commonly used and machine-readable format, or to transmit the data directly to another data controller where technically feasible.
- Right to Withdraw Consent: You can at any time withdraw any consent you previously gave us for processing your personal information, including unsubscribing from our marketing communications, or disabling non-necessary Cookies. The withdrawal of consent will not affect the lawfulness of any processing we carried out before you withdrew your consent.
- Right to Lodge a Complaint: If you believe that our processing of your personal information violates applicable data protection laws, you have the right to submit a complaint to the relevant local data protection supervisory authority.
To exercise any of the above rights, you can send us a request via the contact information we provided earlier in this policy. We will verify your identity before processing your request, and respond to you within the time period required by applicable law.
9. Updates to This Privacy Policy
We may update this Privacy Policy periodically as our services evolve, or when there are changes to applicable legal and regulatory requirements. When we make updates to this policy, we will publish the revised version on this page of www.timmlux.com, adjust the “Effective Date” marked at the top of the policy, and remind you of the update through obvious notifications on our website before the revised policy takes effect. We recommend that you review this Privacy Policy periodically to stay informed of our latest data protection practices.
10. Contact Information
If you have any questions, comments, concerns or requests related to this Privacy Policy or our personal information processing activities, please contact us via:
- Mailing Address: Ulica Staneta Severja 10, 2000 Maribor, Slovenia
- Email: vryn@timmlux.com
- Telephone: +386 51 321 044
We will process and respond to all your legitimate inquiries as quickly as possible, no later than 30 calendar days after receiving your message.