Privacy policy

Privacy policy

Last updated: October 15, 2026

Who is responsible

EACO Adria d.o.o., trading as TRiBUTE8, Zumberacka 21, 44000 Sisak, Croatia, is the controller of personal information processed for this online shop. For privacy questions, requests or complaints, contact hello@tribute8.com.

Information we collect and why

We receive information directly from you when you place an order, open an account, contact us or make a privacy or return request. This includes your name, contact details, delivery and billing addresses, order history, account information and correspondence. Payment providers process payment credentials and provide transaction and payment confirmation information. We also receive technical and usage information through Shopify and cookies, such as IP address, browser and device identifiers and interactions with the shop. Information may also come from our payment, delivery and other service providers where needed for these purposes.

We use this information to take and fulfil orders, process payment, arrange delivery and returns, provide customer support and account services, keep required business records, prevent fraud, protect the shop and resolve claims. Where enabled and permitted, we use information for analytics, personalised advertising and marketing. We do not require optional marketing consent as a condition of buying.

Legal bases and your choices

For processing governed by the GDPR, our bases are Article 6(1)(b) for requested steps before purchase and performance of a contract; Article 6(1)(c) for tax, accounting and other legal obligations; Article 6(1)(f) for legitimate interests in secure operation, fraud prevention, customer support and defending claims, balanced against your rights; and Article 6(1)(a) where we request consent, including optional tracking and marketing where required.

Required order details are necessary to process and deliver a purchase. Without them we may be unable to fulfil your order. Browsing this shop is not consent to optional tracking or marketing. Use the cookie preferences displayed on the website to manage optional cookies and similar technologies. You may withdraw consent at any time without affecting prior lawful processing. You may object at any time to direct marketing and, on grounds relating to your situation, to processing based on legitimate interests. Marketing emails include an unsubscribe option; unsubscribing does not stop necessary order or service messages.

Who receives information

We share information as necessary with Shopify as our commerce platform, payment providers, shipping and fulfilment providers, IT and customer support providers, professional advisers, and authorities where legally required. Where enabled and permitted, advertising and analytics partners receive information through Shopify and related features, subject to applicable consent and opt-out requirements. We may disclose information where necessary to protect legal rights or in a business transfer subject to applicable law.

Shopify also processes information about your use of this and other shops for its own purposes in connection with certain enhanced services. For those activities, Shopify is responsible for its processing and rights requests. See the Shopify Consumer Privacy Policy and Shopify Privacy Portal.

International processing

Shopify and other providers may process information outside your country, including in Canada and the United States. For transfers from the EEA or UK, we rely on applicable adequacy decisions or appropriate safeguards such as the European Commission standard contractual clauses or applicable UK equivalents. Contact us for information about relevant safeguards and how to obtain a copy. Information held abroad may be accessible to authorities under the laws of those countries.

Retention and security

We use appropriate measures to protect information, but no system offers absolute security. We retain order and accounting records for applicable statutory retention periods and claim limitation periods; account information while needed to provide the account and meet legal obligations; support correspondence while needed to resolve enquiries and related claims; and consent records while needed to honour and demonstrate your choices. We then delete or anonymise information unless further retention is required by law.

Your privacy rights

Depending on applicable law, you may request access, correction, deletion, restriction, portability or information about processing, and object to certain processing. Where processing is based on consent, you may withdraw it. These rights are subject to statutory conditions and exceptions. Contact hello@tribute8.com. We may need proportionate information to verify your identity or an authorised representative. We do not discriminate against you for exercising privacy rights.

For GDPR requests, we normally respond within one month. If a lawful extension is necessary due to complexity or the number of requests, we explain this within that month. You may complain to the Croatian supervisory authority AZOP, or the supervisory authority where you live, work or believe an infringement occurred.

United States privacy choices

Where applicable state law gives you these rights, you may opt out of sale or sharing of personal information or targeted advertising through our data sharing opt-out page. Shopify processes Global Privacy Control signals as an opt-out where applicable, for the browser and device sending the signal and, where it can associate the signal with an account, for that account. Other browser Do Not Track signals may not be recognised. Contact us to exercise applicable access, correction, deletion, portability, appeal or authorised-agent rights. If we deny a request, you may appeal by replying to our response. We do not knowingly sell or share information of children under 16.

Canada

EACO Adria d.o.o. is accountable for personal information under its control. Contact hello@tribute8.com for the person responsible for privacy, access and correction requests, consent questions or complaints. Where Canadian law requires consent, we obtain meaningful consent for the stated purposes. You may withdraw consent subject to legal or contractual restrictions, which we will explain. Optional marketing choices are separate from a purchase. Your applicable federal and provincial privacy rights remain unaffected.

Children, other websites and updates

This shop is not directed to children. If a child has provided information, a parent or guardian can contact us to request appropriate action. Links to other websites are subject to those sites' own privacy practices. We update this policy when our practices or legal obligations change, update the date above and provide additional notice where required.