Privacy Policy

Effective Date: October 10, 2026

Welcome to the privacy policy of Moda la Stella d.o.o. This document is designed to inform you clearly and transparently about how we collect, use, store, share and protect your personal information when you visit our official website www.modalastella.com, browse our curated minimalist clothing range, make purchases, interact with our brand content or use any related services provided through our platform. At Moda la Stella, rooted in Croatia as a quiet, design-led clothing brand built for people who value less, but better, we extend the same philosophy of intentionality, transparency and respect that we apply to our handpicked garments to the way we handle your personal data. We strip away unnecessary complexities just as we remove excess logos, loud prints and fleeting trends from our collections, ensuring that every part of our data processing practice is purposeful, secure and aligned with your rights and expectations.

1. Data Controller Information

For all purposes of applicable data protection regulations including the General Data Protection Regulation (GDPR) and other relevant Croatian and European data protection laws, the data controller responsible for your personal information is:

  • Full Legal Name: Moda la Stella d.o.o.
  • Registered Address: Svetonedeljska cesta 59, Žitarka, Croatia
  • Contact Email: syncpu@modalastella.com
  • Contact Telephone: +385 1 337 1417
  • Official Website: www.modalastella.com

If you have any questions, concerns or requests related to your personal data processing covered by this Privacy Policy, you can reach out to our designated data protection representative at any time using the contact details listed above. We commit to responding to all legitimate inquiries within 14 business days, without any unnecessary delays or excessive procedural barriers.

2. Types of Personal Information We Collect

We only collect personal information that is strictly necessary to deliver our e-commerce services, improve your shopping experience and fulfill our brand commitments to you. We do not engage in pervasive, unregulated data collection practices that go against our core value of “Less Noise, Better Wardrobes”, and we never harvest information that has no direct, clear purpose for our operations. The categories of personal information we may collect include:

2.1 Information You Provide Directly to Us

This refers to all data you voluntarily submit when interacting with our website:

  • ‌Account Registration Information‌: When you create a user account on www.modalastella.com, we collect your full name, email address, chosen password, and optional display name. This information helps you save your shopping preferences, track order history, and access faster checkout processes for future purchases of our new minimal basics, best-selling customer-loved styles and other apparel crafted with organic cotton, fine linen and soft merino wool.
  • ‌Order and Transaction Information‌: When you place an order on our shop, we collect your full shipping address, billing address, telephone number, payment method details (we do not store full credit card numbers on our own servers, all payment processing is handled through PCI DSS certified third-party payment providers), and order specific preferences such as selected size, color, customization notes, and gift wrapping requests. This information is essential to process your payment correctly, ensure your purchased garments are delivered to the correct location without delays, and resolve any post-delivery issues that may arise.
  • ‌Customer Support Correspondence Information‌: When you reach out to our support team via email, contact form on our website, or telephone, we collect the content of your messages, your contact identifiers, and any additional information you choose to share with us, such as feedback on the fit of our linen shirts, questions about the care instructions of our merino wool knitwear, or concerns about a recent delivery. This helps us resolve your issues efficiently and continuously improve our product and service offerings to better fit your daily routine.
  • ‌Marketing Preference Information‌: When you sign up for our newsletter to receive updates about new arrivals, exclusive limited offers, styling tips for our minimalist clothing range, and information about seasonal collections suitable for every Croatian season, we collect your email address, your stated product preferences, and your consent status for different types of marketing communications. You can adjust these preferences or unsubscribe from our marketing list at any time, with no extra steps required.

2.2 Information We Collect Automatically When You Use Our Website

When you browse www.modalastella.com, we automatically collect certain technical information through secure, privacy-friendly tools, to maintain the stability of our website, optimize browsing speed, and understand how visitors interact with our content:

  • ‌Device and Browser Information‌: We collect details such as your device model, operating system version, browser type and language, screen resolution, unique device identifiers, and IP address. This information helps us ensure that our website displays correctly whether you are browsing from a desktop computer, smartphone or tablet, and helps us detect and prevent unauthorized access attempts or malicious activities.
  • ‌Website Usage Logs‌: We collect data about your browsing behavior on our platform, including the pages you view on our shop, the time you spend on each product page of our minimalist clothing range, the links you click, the search terms you enter in our on-site search bar, the pages that refer you to our website, and the time and date of each visit. This aggregated, largely anonymized data helps us identify which parts of our website may be confusing to navigate, which product lines our customers are most interested in, and how we can adjust our page layouts to deliver a smoother, more intuitive shopping experience.
  • ‌Cookie and Similar Tracking Technology Data‌: We use strictly necessary, functional and analytical cookies on our website. Strictly necessary cookies are essential to let you complete core actions such as adding items to your shopping cart, proceeding through the checkout process, and logging into your user account. Functional cookies remember your preferences such as your selected currency, region setting, and saved sizing preferences, so you do not need to re-enter these settings every time you return to our site. Analytical cookies help us understand aggregated, non-personalized traffic patterns without collecting data that can be used to identify individual visitors. We do not use third-party advertising tracking cookies that follow your browsing behavior across unrelated websites, as this practice runs counter to our brand value of reducing unnecessary noise. You can manage or disable cookies at any time through your browser settings, though please note that disabling strictly necessary cookies may limit your ability to use some core functions of our e-commerce website.

3. How We Use Your Personal Information

Every use of your personal information is based on clear legal grounds defined under applicable data protection laws, including the performance of our contractual obligations to you, our legitimate business interests that do not override your privacy rights, your explicit consent where required, and compliance with our legal regulatory obligations. The specific purposes for which we process your data are:

  1. ‌Fulfill and Process Your Orders‌: We use your order, shipping and payment information to complete the entire transaction lifecycle, including verifying your payment, sending you order confirmation and shipping notification emails, coordinating with our courier partners to deliver your ordered garments to your specified address, processing returns and exchanges when you request them, and issuing refunds in line with our published return policy. All these steps are designed to make sure you receive your selected pieces that are crafted to outlast seasonal fads in perfect condition, as seamlessly as possible.
  2. ‌Maintain and Improve Our Website and Services‌: The automatically collected technical and usage data helps us resolve technical bugs, optimize page loading speed for visitors across different regions, update our website layout to make it easier for you to find new minimal basics or best-selling styles that match your taste, and test new features that can enhance your overall shopping experience. For example, if our analytics show that many customers spend extra time looking for product care instructions on our merino wool products, we can adjust our product page layout to display this information more prominently.
  3. ‌Provide Personalized Customer Support‌: The information you share in your support inquiries helps our team respond to your questions accurately, track your post-purchase concerns efficiently, and provide you with tailored advice, such as guidance on how to wash your organic cotton t-shirt to maintain its softness, or information about restock dates for a popular best-selling item that you are interested in.
  4. ‌Send Relevant Marketing Communications (With Your Explicit Consent)‌: If you have opted in to receive our newsletter, we will use your email address to send you carefully curated updates, including announcements of our new arrivals, limited-time exclusive offers for returning customers, styling suggestions that show how our clean cuts and premium fabrics can fit different moments of your daily routine, and stories about our design process and local Croatian production practices. We will never send you unsolicited spam emails, and every marketing message we send will include a clear, simple unsubscribe link that lets you opt out of future marketing communications at any time, free of charge.
  5. ‌Comply With Legal Obligations‌: We may process your personal information when we are required to do so by applicable law, regulatory authority, or valid legal proceeding. This includes retaining transaction records for tax and accounting purposes required by Croatian national regulations, responding to lawful requests from public authorities, and protecting our legal rights in the case of disputes related to fraud, unauthorized access, or violation of our website terms of service.
  6. ‌Protect the Security of Our Platform and Users‌: We use your IP address, device information and account activity logs to detect, investigate and prevent fraudulent transactions, unauthorized access to user accounts, malicious hacking attempts, and other activities that may threaten the security of our website, our customers and our business operations. This processing is based on our legitimate interest in maintaining a safe, trustworthy e-commerce environment for every member of our Moda la Stella community.

4. Sharing of Your Personal Information

We do not sell, rent or trade your personal information to any third parties for their own commercial marketing purposes, under any circumstances. We only share your information with carefully selected third parties when it is strictly necessary to deliver our services to you, and all such third parties are bound by strict data protection agreements that require them to protect your personal data in line with applicable regulations, at a standard no lower than the standards we follow ourselves. The limited categories of third parties we may share your data with include:

  • ‌Payment Service Providers‌: We share only the necessary transaction information with our PCI DSS certified payment processing partners, to complete your payment securely, prevent payment fraud, and process refunds when required. These providers are not permitted to use your personal information for any other unrelated purposes.
  • ‌Logistics and Courier Partners‌: We share your shipping name, full delivery address, and contact telephone number with our trusted delivery partners, so they can fulfill the delivery of your ordered apparel to you without errors or unnecessary delays. We only share the absolute minimum information required for the courier to complete the delivery service.
  • ‌Cloud Service and Technology Providers‌: We work with reputable cloud hosting providers, website maintenance service providers, and email service providers, who help us host our www.modalastella.com website, store our encrypted customer data, send order confirmation and support emails, and maintain the normal operational functions of our e-commerce platform. All these providers are required to implement strict data security measures, and they may only access your personal data when explicitly instructed by us, for the sole purpose of providing the services they have been contracted to deliver.
  • ‌Professional Advisors‌: In very limited circumstances, we may share necessary personal information with our legal advisors, accountants and auditors, when it is required for us to comply with our legal obligations, resolve disputes, or enforce our website terms of service.
  • ‌Public Authorities and Regulators‌: We may disclose your personal information if we are compelled to do so by a valid, lawful request from a government authority, court order, or applicable law, and we will only disclose the information that is explicitly required by such request.

In the event of a potential or actual merger, acquisition, sale of all or part of our company assets, we will ensure that any resulting transfer of your personal information is governed by a confidentiality and data protection agreement that requires the new entity to continue to respect your privacy rights in line with this Privacy Policy, and we will notify all registered users via email and a prominent notice on our website if there is any material change to the way your personal data is processed.

5. Data Retention Period

We do not keep your personal information for longer than is necessary to achieve the specific purposes for which it was collected. We follow clear, proportionate data retention policies aligned with Croatian and European data protection regulations:

  • For order and transaction related data: We retain this information for the full duration required to complete your order, handle any possible post-order returns, warranties or disputes, and then for the additional period required by applicable Croatian tax, accounting and commercial laws, which is generally 10 years after the date of your transaction.
  • For user account data: We retain your account profile information for as long as you keep your account active on our website. If you choose to delete your account, we will permanently erase all your personal account data within 30 days, except for the transaction records that we are legally required to retain for regulatory compliance purposes.
  • For marketing related data (newsletter subscription records): We retain this data until you choose to unsubscribe from our marketing communications, or until you request that we delete your contact information from our marketing list.
  • For technical website usage log data: We retain this automatically collected non-identifiable or pseudonymized data for a maximum period of 12 months, after which we either anonymize it completely so that it can no longer be linked back to any individual user, or securely delete it.

After the applicable retention period expires, we will securely delete or irreversibly anonymize your personal information, to ensure that it can no longer be associated with your identity.

6. Your Rights as a Data Subject

Under the GDPR and applicable Croatian data protection legislation, you hold a comprehensive set of rights over your personal information. You can exercise all these rights at any time, free of charge, by sending a request to us via our contact email syncpu@modalastella.com, or by calling our telephone number +385 1 337 1417. We will respond to your request without undue delay, and no later than one month from the date we receive your verified request. These rights include:

  • ‌Right of Access‌: You have the right to request a copy of all the personal information we hold about you, including a confirmation of whether we are processing your data, and access to the full details of our processing activities as outlined in this Privacy Policy.
  • ‌Right to Rectification‌: If you find that any of your personal information stored in our systems is inaccurate, incomplete or out of date, you have the right to request that we correct and update that information immediately. For example, you can update your shipping address, change your contact telephone number, or adjust the payment details saved in your user account at any time.
  • ‌Right to Erasure (“Right to be Forgotten”)‌: You have the right to request that we delete your personal information, when the data is no longer necessary for the purposes for which it was originally collected, when you withdraw your consent for processing and there is no other legal ground for us to retain the data, or when you object to the processing and there are no overriding legitimate interests that justify us continuing to hold your information. This right is not absolute, and we may retain certain information if we are legally obligated to do so for regulatory compliance purposes.
  • ‌Right to Restriction of Processing‌: You have the right to request that we limit the processing of your personal information, in circumstances where you contest the accuracy of the data, the processing is unlawful but you do not want us to delete the data, we no longer need the data for our original processing purposes but you require the data to establish, exercise or defend legal claims, or you have objected to our legitimate interest based processing and we are verifying the grounds for our processing activities.
  • ‌Right to Data Portability‌: You have the right to receive all the personal data that you have provided to us, in a structured, commonly used, machine-readable format, and you have the right to request that we transfer this data directly to another data controller, where this is technically feasible.
  • ‌Right to Object‌: You have the right to object to our processing of your personal information that is based on our legitimate business interests, at any time. If you make such an objection, we will stop processing your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing is necessary for the establishment, exercise or defense of legal claims. You also have the absolute right to object to us processing your personal information for direct marketing purposes, at any time, with no conditions attached.
  • ‌Right to Withdraw Consent‌: For any processing activity that you previously gave your explicit consent to, such as receiving newsletter marketing, you have the right to withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we completed before your withdrawal.
  • ‌Right to Lodge a Complaint‌: If you believe that our processing of your personal information violates applicable data protection laws, you have the right to submit a complaint to the competent data protection authority in your country of residence, or in the Republic of Croatia, where our company is established.

Before we fulfill your rights request, we may ask you to provide a small amount of basic verification information to confirm your identity, to prevent unauthorized third parties from accessing or modifying your personal data. We will never ask you to submit unnecessary or excessive personal information for this verification process.

7. Data Security Measures

At Moda la Stella, we take the security of your personal information as seriously as we take the quality of our garments made with organic cotton, fine linen and soft merino wool. We implement a multi-layered, industry-standard set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, alteration, destruction or unlawful disclosure:

  • All data transmission between your browser and our www.modalastella.com website is protected by end-to-end 256-bit SSL encryption, so no third party can intercept and read your personal information when you submit it to our platform.
  • All our customer personal data stored on our servers is encrypted at rest, using advanced AES-256 encryption standards, so even in the unlikely event of an unauthorized access to our storage systems, the data will be unreadable and unusable.
  • We implement strict role-based access control for all our internal team members: only a very limited number of authorized staff who need to access your data to fulfill their work duties (such as our customer support team and order fulfillment team) have access to your personal information, and all access activities are logged and regularly audited.
  • We conduct regular security audits, vulnerability scans and penetration testing of our website and server infrastructure, to identify and fix any potential security weaknesses before they can be exploited.
  • We have comprehensive, tested data breach response protocols in place. In the extremely unlikely event that a personal data breach occurs that poses a high risk to your rights and freedoms, we will notify you and the relevant competent supervisory authority without undue delay, in full compliance with the requirements of the GDPR.

While we invest every reasonable effort to protect your personal information, no security system can be guaranteed to be 100% invulnerable. If you notice any unusual activity related to your user account on our website, please contact us immediately via syncpu@modalastella.com so we can take immediate action to resolve the issue.

8. Children’s Privacy

Our e-commerce platform and the products we sell at Moda la Stella are designed and intended for use by adults aged 16 years and older. We do not knowingly collect any personal information from children under the age of 16. If we become aware that we have accidentally collected personal data from a child under 16 without verifiable parental consent, we will take immediate steps to permanently delete that information from all our storage systems. If you believe that we may have collected personal information from a child under 16, please contact us right away using our provided contact details.

9. International Data Transfers

Our company is based in Žitarka, Croatia, within the European Economic Area (EEA). Most of the data processing activities we perform take place within the EEA. On the rare occasion that we need to transfer your personal data to a location outside of the EEA, we will ensure that the destination country provides an adequate level of data protection as confirmed by the European Commission, or we will put in place appropriate, legally recognized safeguards such as standard contractual clauses approved by the European Commission, to ensure that your personal information is protected to the same high standard required by European data protection regulations. You can request a copy of these appropriate safeguards by contacting us at any time.

10. Updates to This Privacy Policy

We may update this Privacy Policy from time to time, to reflect changes in our operational practices, new legal regulatory requirements, or updates to our website functions. When we make material changes to this policy, we will update the “Effective Date” listed at the top of this document, and we will post a prominent notice on the homepage of www.modalastella.com to inform all users about the changes. For registered account holders, we will also send a direct notification email to your registered email address, to make sure you are fully aware of the updates. We encourage you to review this Privacy Policy periodically whenever you visit our website, to stay informed about how we protect your personal information.

Any revised version of this Privacy Policy will take effect 30 days after the publication notice is posted on our website, unless otherwise stated in the notification of the update. Your continued use of our website and our services after the effective date of the revised policy will be deemed as your acknowledgement and agreement to the updated terms.

If you have any questions, comments or concerns about any part of this Privacy Policy, please do not hesitate to get in touch with us at syncpu@modalastella.com, or call us at +385 1 337 1417. At Moda la Stella, we are committed to building a transparent, trust-based relationship with every member of our community, just as we are committed to creating timeless, high-quality minimalist clothing that fits seamlessly into your everyday life.