Legal

Data Deletion Instructions

You can request the deletion of your Kostava Creative account and all personal data associated with it at any time. This includes data we received from third parties such as Google and Facebook when you signed in with those services.

How to request deletion

  1. Send an email to info@kostavacreative.com from the email address registered on your account.
  2. Use the subject line: Data Deletion Request.
  3. Optionally, tell us which services you signed in with (Google, Facebook, or email/password) so we can speed up the process.
  4. We will confirm receipt within 7 days and complete deletion within 30 days.

What gets deleted

  • Your account profile (name, email, profile picture).
  • Authentication tokens and OAuth provider identifiers (Google, Facebook).
  • Shopping cart, wishlist, and saved preferences.
  • Newsletter subscriptions.
  • Support conversations associated with your account.

What we are required to keep

Some records must be retained to comply with legal obligations, primarily tax and accounting law. These are anonymised where possible and kept only as long as required:

  • Order invoices and payment records — up to 7 years.
  • Audit logs of security-relevant actions (sign-in, permission changes) — up to 1 year.

Revoking app access from Facebook or Google

You can also revoke Kostava Creative's access to your Google or Facebook account directly at any time. This stops us from receiving any further data from those providers, but does not delete the data we already hold — for that, follow the request process above.

Questions?

For more information about how we handle your data, see our Privacy Policy.