Privacy Policy

This policy explains how OK SHPK (NIPT M52717404A), which runs the online store okMed.al, processes the personal data of visitors and customers.

Who we are

• Data controller: OK SHPK, NIPT M52717404A
• Address: Rruga Asim Vokshi, Tirana, Albania
• Privacy contact: [email protected] · +355 69 600 1100

What data we collect

• When you place an order: your name, phone, email (if you provide it), delivery address and city, delivery and payment method, your notes and the products ordered.
• When you ask for a product you can't find: your name, phone and the product description.
• When you contact us on WhatsApp, by phone or email: the information you send us.
• When you browse the site: general statistics (e.g. number of visits, pages viewed, device type). Our internal statistics are stored as aggregated daily counts; we do not store your IP address or a profile of you.

Why we use it

• To process and deliver your order and to contact you about it (legal basis: performance of a contract).
• To email you the order confirmation, when you ask for it (legal basis: performance of a contract).
• To meet legal obligations, such as invoicing and accounting (legal basis: legal obligation).
• To understand how the site is used and improve it (legal basis: your consent, given in the cookie banner).
• For the Google purchase review, only if you accept the invitation after your order (legal basis: your consent).

Who we share it with

We do not sell your data. We share it only with the providers that help us deliver the service:

• Our management system (ERP), where orders are recorded.
• The courier delivering your order (name, phone, address).
• Brevo, to send the order confirmation email.
• Google Analytics, only after you accept analytics cookies.
• Google Customer Reviews, only if you accept the review invitation after your order (your email and the expected delivery date).
• WhatsApp (Meta), when you choose to contact us or order through it.
• The card payment provider (POK), once that payment method is available. Card details are processed only by the payment provider; okMed.al never sees or stores them.

Some of these providers (e.g. Google, Meta, Brevo) may process data outside Albania, with the safeguards required by law.

Cookies and browser storage

• okm_consent (necessary, 6 months): stores your choice in the cookie banner.
• webcatalog_cart (necessary, in your browser): keeps the products in your cart. It is not sent to us until you place the order.
• okv, okf, oks, oka (analytics, only with consent; 30 minutes to 1 year): count visits and the visit source (e.g. Google or Facebook) for our statistics.
• Google Analytics (analytics, only with consent).

You can change your choice at any time from "Cookie settings" at the bottom of the page.

How long we keep it

• Order data: as long as needed for the order and warranty, and for the period required by tax and accounting law.
• Product requests: until the request is handled, then deleted or anonymised.
• Statistics: kept only as aggregated counts, with no personal data.

Your rights

You have the right to access your data, to have it corrected or deleted, to restrict its processing, to receive it in a portable form, and to object to its processing. You can withdraw your consent to analytics cookies at any time. For any request, write to [email protected]; we will reply within 30 days.

If you believe your data is not being processed properly, you can complain to the Information and Data Protection Commissioner (idp.al).

Security

The site uses an encrypted connection (HTTPS). Access to order data is limited to the staff who handle orders.

Changes to this policy

When we change this policy, the new version is published on this page.

Meta Pixel (ads on Facebook and Instagram)

Only if you click "Accept all" in the cookie banner, the site loads the Meta Pixel (Meta Platforms). It sends Meta the pages you open, the products you view or add to the cart, the start of checkout and the purchase value, together with identifiers of your browser. We do not send Meta your name, phone, email or address.

We use it to measure and improve our ads on Facebook and Instagram (legal basis: your consent). Meta may process this data outside Albania.

• _fbp (marketing, only with consent, 3 months): identifies the browser for the Meta Pixel.
• _fbc (marketing, only with consent, 3 months): set when you arrive from an ad on Facebook or Instagram.

You can withdraw your consent at any time via "Cookie settings" at the bottom of the page.