Privacy Policy
Last Updated: July 2026
At Viridara, we believe that respecting your privacy is just as important as creating garments with care. This Privacy Policy explains how we collect, use, store and protect your personal information when you visit www.viridaraofficial.com, create an account, place an order or otherwise interact with us.
This Privacy Policy has been prepared in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and applicable Romanian legislation.
1. Data Controller
The data controller responsible for processing your personal data is:
HOT DROP SRL
Trading as Viridara
Registered Office: SC HOT DROP SRL
Trade Register Number: J4/973/2024
VAT Number: 50215103
Email: atelier@viridaraofficial.com
Telephone: +40 740 130 592
Email: atelier@viridaraofficial.com
Telephone: +40 740 130 592
Throughout this Policy, references to "Viridara", "we", "our" or "us" refer to HOT DROP SRL.
2. What Personal Data We Collect
Depending on how you interact with our Website, we may collect the following categories of personal data:
Information you provide directly
- Name
- Billing and shipping address
- Email address
- Telephone number
- Account information (if you create an account)
- Order history
- Communications with our customer service team
Payment Information
Payments are securely processed through authorised payment providers.
Viridara does not store or have access to your complete payment card details.
Information collected automatically
When you browse our Website, certain technical information may be collected automatically, including:
- IP address
- Browser type
- Device information
- Operating system
- Language preferences
- Pages visited
- Date and time of access
- Website interactions
Some of this information is collected through cookies and similar technologies. Please refer to our Cookie Policy for further information.
3. Why We Collect Your Data
We only collect personal data that is necessary to operate our Website and provide our services.
Your information may be used to:
- process and deliver your orders;
- communicate with you regarding your purchase;
- respond to enquiries and customer service requests;
- manage your customer account;
- process returns and refunds;
- improve our Website, products and services;
- detect fraudulent or unlawful activity;
- comply with legal and accounting obligations;
- send marketing communications where you have given your consent.
We will never sell your personal data to third parties.
4. Legal Basis for Processing
Under the GDPR, we process your personal data only where we have a lawful basis to do so.
Depending on the circumstances, processing is based on:
- the performance of a contract (such as fulfilling your order);
- compliance with legal obligations;
- our legitimate interests, provided these do not override your rights and freedoms;
- your consent, where required, for example when subscribing to marketing communications or accepting certain cookies.
Where processing is based on your consent, you may withdraw that consent at any time.
5. Third-Party Service Providers
To operate our business, we share certain personal data with carefully selected service providers who process information on our behalf and only where necessary.
These may include:
- Shopify, which hosts and operates our online store;
- NETOPIA Payments, for secure payment processing;
- payment providers such as Apple Pay, Google Pay, Visa and Mastercard, where applicable;
- courier and logistics partners responsible for delivering your order;
- IT, website hosting and security providers;
- accounting and legal service providers where required by law.
Each provider processes personal data in accordance with its own privacy obligations and applicable data protection legislation.
6. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected.
Certain information may be retained for longer periods where required by applicable laws relating to accounting, taxation, fraud prevention or legal claims.
Once your data is no longer required, it will be securely deleted or anonymised.
7. Your Rights
Under the GDPR, you have the right to:
- access your personal data;
- request correction of inaccurate information;
- request deletion of your personal data ("right to be forgotten");
- request restriction of processing;
- object to certain types of processing;
- receive your personal data in a portable format where applicable;
- withdraw consent at any time where processing is based on consent;
- lodge a complaint with your local data protection authority.
We will respond to requests concerning your personal data within the timeframes required by applicable law.
8. Contact
If you have any questions regarding this Privacy Policy or wish to exercise your rights under the GDPR, please contact us.
Viridara
HOT DROP SRL
Email: atelier@viridaraofficial.com
Phone: +40 740 130 592
If you believe that your personal data has not been handled in accordance with applicable law, you also have the right to lodge a complaint with the competent supervisory authority.