Who we are
Havermoor is a trading name of NEXFLOW DIGITAL S.R.L., a company registered in Romania.
| Registered name | NEXFLOW DIGITAL S.R.L. |
|---|---|
| Tax identification (CUI) | 54427176 |
| VAT number | RO54427176 |
| Trade register | J2026022740009 |
| Registered office | Str. 22 Decembrie 1989 nr. 22, Bl. 22, Sc. 5, Et. 1, Ap. 4, Mun. Târgu Jiu 210215, Gorj, Romania |
| Contact | hello@havermoor.com |
We are the data controller for the personal data described below.
The short version
We sell printed goods and a few digital downloads through Etsy. Printed items are made to order and posted by a print provider, so your delivery address is passed to them in order to fulfil your order. We do not run advertising pixels, we do not use third-party analytics that identify you, and we do not sell or share personal data with anyone for marketing. Our internal publishing software connects to Pinterest using our own account only.
What we collect, and why
| Data | Why | Legal basis | Kept for |
|---|---|---|---|
| Order details from Etsy: name, delivery address, order contents, and anything you type into an optional personalisation field | To supply what you bought, to have a printed item made and posted to you, to produce a personalised item if you asked for one, and to answer questions about your order | Performance of a contract (Art. 6(1)(b) GDPR), and legal obligation for tax records (Art. 6(1)(c)) | As required by Romanian accounting law |
| Messages you send us | To reply to you | Legitimate interest in answering customers (Art. 6(1)(f)) | 2 years |
| A Pinterest OAuth access token for our own Pinterest business account | So our software can publish our product images to our own boards and read public trend data | Legitimate interest in operating our shop (Art. 6(1)(f)) | Until we revoke it |
Our Pinterest integration
We operate a private application built on the Pinterest API. It is used by us alone, to post our own products to our own Pinterest account.
- It authenticates through Pinterest's standard OAuth flow. We never ask for or store anyone's Pinterest password or session cookies.
- The access token is stored locally on our own machine and is not shared with any third party.
- It does not sign up other users, and it does not read, collect or store any other Pinterest user's personal data.
- You can revoke our access at any time from Pinterest account settings. We delete the stored token when it is revoked or no longer needed.
Who else processes your data
- Etsy operates the shop and handles payment. Etsy is a controller in its own right for the data you give it. See Etsy's privacy policy for their practices.
- Printify receives your name, delivery address and any personalisation text so that a printed item can be made and posted to you. Printify passes those details to the print provider that produces your particular item. Printify is a United States company; the providers that print our European listings are inside the European Union.
- Zoho hosts our email, in the European Union.
- Cloudflare serves this website.
We do not use advertising pixels, and we do not add customers to a marketing list without a separate, explicit opt-in.
Where your data is held
Our email and website are served from within the European Union or the United Kingdom. Etsy, Pinterest and Printify are United States companies and process data under their own published safeguards. The print providers that produce our European listings are located inside the European Union; listings that ship from the United States say so on the listing itself, and are printed there.
Your rights
Under the GDPR you may request access to your data, correction, erasure, restriction of processing, portability, and you may object to processing based on legitimate interests. Write to hello@havermoor.com and we will respond within one month. If you are not satisfied you may complain to the Romanian supervisory authority, ANSPDCP (dataprotection.ro), or to the authority where you live.
Cookies
This website sets no cookies and runs no analytics.
Children
Our products are not directed at children and we do not knowingly collect data from anyone under 16.
Changes
If we change this policy we will update the date at the top of this page.