Privacy policy

Last updated: June 4, 2026

This Privacy Policy explains how Theone d.o.o., trading as THEONE, collects, uses, stores, shares, and protects personal information when you visit our website, place an order, create an account, contact us, subscribe to marketing communications, or otherwise interact with our services.

By using our website, you acknowledge that you have read this Privacy Policy.

1. Who We Are

Trading name: THEONE
Legal business name: Theone d.o.o.
Legal form: Limited liability company (d.o.o.)
Registered address: Radovanova ulica 18, 2000 Maribor, Slovenia
Company registration number: 7356315000
VAT number: SI37180606
Website: promisetheone.com
Email: support@promisetheone.com
Telephone: +386 70 842 286

Theone d.o.o. is the data controller responsible for the personal information described in this Privacy Policy.

For privacy questions or requests, contact us at: support@promisetheone.com

2. Personal Information We Collect

We may collect the following categories of personal information.

Customer and Order Information

When you place an order, create an account, or contact us, we may collect:

full name;
email address;
telephone number;
billing address;
shipping address;
order details;
ring size;
purchase history;
account information;
customer-support communications;
return, refund, and exchange information.

Payment and Transaction Information

When you make a purchase, our payment providers may process:

payment method;
billing information;
transaction amount;
transaction date;
payment status;
payment authentication information;
fraud-prevention and risk signals.

We do not store your full payment-card number.

Website and Device Information

When you visit or use our website, we may collect:

IP address;
browser type;
device type;
operating system;
approximate location;
pages viewed;
referring website;
time spent on pages;
product views;
cart and checkout activity;
cookie identifiers;
interactions with our website.

Marketing and Communication Information

If you subscribe to marketing communications or interact with our messages, we may collect:

email address;
telephone number;
marketing preferences;
consent records;
email and message engagement information.

Information You Provide Voluntarily

You may choose to provide additional information when you:

submit a review;
send a photograph or video;
contact customer support;
participate in a survey, promotion, or campaign;
communicate with us through social media.

3. How We Use Personal Information

We may use personal information to:

operate and maintain our website;
process, manage, and fulfil orders;
process payments and refunds;
ship products and provide tracking updates;
manage returns, exchanges, complaints, and warranty requests;
respond to customer-support questions;
communicate important information about orders or accounts;
detect, investigate, and prevent fraud, abuse, unauthorised transactions, and payment disputes;
maintain business, tax, accounting, and legal records;
improve our website, products, services, and customer experience;
analyse website traffic and performance;
measure marketing effectiveness;
send marketing communications where permitted by law;
comply with legal obligations;
establish, exercise, or defend legal claims;
protect our customers, business, website, and services.

4. Legal Bases for Processing

Depending on the purpose and applicable law, we may process personal information on one or more of the following legal bases.

Performance of a Contract

We process information where necessary to:

accept and fulfil your order;
process payment;
arrange delivery;
provide customer support;
manage returns, refunds, and exchanges.

Legal Obligations

We process information where necessary to comply with legal obligations, including:

tax and accounting requirements;
consumer-protection requirements;
legal requests;
regulatory requirements.

Legitimate Interests

We may process information where necessary for our legitimate business interests, including:

preventing fraud and unauthorised transactions;
protecting our website and services;
improving our products and customer experience;
maintaining appropriate business records;
responding to disputes and legal claims;
measuring business and marketing performance.

We consider the impact on your rights before relying on legitimate interests.

Consent

We may rely on your consent for certain activities, including:

non-essential cookies;
certain marketing communications;
optional promotional content;
other processing where consent is required by law.

You may withdraw your consent at any time. Withdrawal does not affect processing that took place before consent was withdrawn.

5. How We Share Personal Information

We may share personal information with service providers that help us operate our business.

These may include:

Shopify and ecommerce platform providers;
payment processors and payment networks;
fraud-prevention and security providers;
shipping, delivery, and logistics providers;
customer-support tools;
email and SMS communication providers;
analytics providers;
advertising and marketing platforms;
website hosting and technology providers;
accounting, tax, legal, and professional advisers;
regulators, courts, government authorities, or law-enforcement authorities where required by law.

We share only the information reasonably necessary for the relevant service or purpose.

We may also share information where necessary to:

complete a transaction;
fulfil an order;
investigate fraud or unauthorised activity;
respond to a payment dispute or chargeback;
comply with a legal obligation;
protect our legal rights or the rights of others;
complete a business transfer, merger, acquisition, restructuring, or sale.

6. Shopify

Our online store is hosted by Shopify.

Shopify provides the ecommerce platform that allows us to sell our products and services. Shopify may process personal information in connection with your use of our store, checkout, account, and other Shopify-powered services.

Shopify's processing of personal information may also be governed by its own privacy notices.

7. Payment Processing

Payments are processed by secure third-party payment providers.

Payment providers may collect and process payment information, billing information, transaction details, authentication information, and fraud-prevention signals to complete purchases and protect against unauthorised transactions.

We do not store your full payment-card number.

If a payment dispute, refund request, chargeback, or fraud investigation occurs, we may share relevant order, payment, shipping, tracking, delivery, and communication records with payment providers, banks, card networks, or dispute processors.

8. Shipping and Delivery

We may share your name, delivery address, telephone number, email address, order details, and other necessary information with shipping and delivery providers so they can:

deliver your order;
provide tracking updates;
contact you about delivery;
investigate delayed, lost, or damaged parcels.

9. Cookies and Similar Technologies

We use cookies and similar technologies to:

operate our website;
remember preferences;
support cart and checkout functions;
maintain website security;
analyse website traffic;
improve our services;
measure marketing performance;
display relevant advertising where permitted.

Some cookies are strictly necessary for the website to function.

Where required by law, we ask for your consent before using non-essential cookies for analytics, personalisation, or advertising.

You can manage your cookie preferences through our cookie banner, browser settings, or any cookie-preference tools made available on our website.

10. Marketing Communications

If you subscribe to marketing communications, we may send you:

product updates;
offers and promotions;
brand news;
abandoned-cart reminders where permitted;
other marketing content.

You can unsubscribe from marketing emails at any time by using the unsubscribe link in the email.

You can opt out of SMS marketing by following the instructions in the message.

Even if you unsubscribe from marketing, we may still send important non-marketing communications about your order, delivery, refund, account, or customer-support request.

11. Fraud Prevention and Security

We may use personal information to detect, investigate, prevent, and respond to:

fraudulent orders;
unauthorised transactions;
payment abuse;
suspicious activity;
website misuse;
chargebacks and payment disputes;
security incidents.

This may involve reviewing information such as:

order history;
payment and transaction information;
billing and shipping addresses;
IP address and device information;
customer-support communications;
tracking and delivery information;
fraud-prevention signals.

We may delay, cancel, or refund an order where we reasonably believe it is fraudulent, unauthorised, high-risk, or otherwise invalid.

12. International Data Transfers

Some of our service providers may process personal information outside Slovenia or outside the European Economic Area.

Where required by law, we use appropriate safeguards for international transfers of personal information.

13. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy.

The retention period depends on factors such as:

the nature of the information;
the purpose for which it was collected;
legal, tax, and accounting requirements;
consumer-protection obligations;
fraud-prevention needs;
dispute and chargeback periods;
the need to establish, exercise, or defend legal claims.

Examples:

order, payment, tax, and accounting records may be retained for the period required by applicable law;
customer-support records may be retained for a reasonable period after the issue is resolved;
marketing information may be retained until you unsubscribe or object;
cookie information is retained according to the durations described in our cookie settings or cookie banner.

When personal information is no longer required, we will delete, anonymise, or securely dispose of it where appropriate.

14. Data Security

We use reasonable technical, organisational, and administrative measures to protect personal information against unauthorised access, loss, misuse, alteration, or disclosure.

However, no website, payment system, or online service can be guaranteed to be completely secure.

You are responsible for keeping your account details, email access, and password secure.

15. Your Privacy Rights

Depending on your location and applicable law, you may have the right to:

access personal information we hold about you;
request correction of inaccurate or incomplete information;
request deletion of certain personal information;
request restriction of certain processing;
object to certain processing;
withdraw consent where processing is based on consent;
request a copy of certain information in a portable format;
object to direct marketing;
lodge a complaint with a data-protection authority.

These rights may be subject to legal limitations or exceptions.

To make a privacy request, contact: support@promisetheone.com

We may request information reasonably necessary to confirm that the request relates to you and to protect personal information from unauthorised disclosure.

You also have the right to lodge a complaint with the competent data-protection authority, including the Information Commissioner of the Republic of Slovenia (Informacijski pooblaščenec).

16. Children's Privacy

Our website and products are not intended for children.

We do not knowingly collect personal information from children. If you believe that a child has provided us with personal information, contact us so we can review and delete it where required.

17. Sale or Sharing of Personal Information

We do not sell personal information in exchange for money.

We may share information with service providers, analytics providers, advertising platforms, and ecommerce tools to operate our website, measure performance, and market our products.

Depending on your location, certain privacy laws may define some advertising or tracking activities as "sharing" or "selling." Where required, we provide applicable choices or opt-out rights.