Privacy Policy

This Privacy Policy explains how Muscle Beach doo, registered at Milutina Milankovića 9dj, Novi Beograd, Serbia (PIB 109738199, MB 21233625), collects, uses, shares, and protects personal data when you visit this website, create an account, place an order, or otherwise contact us. For any privacy question, you can reach us at recepcija@musclebeach.co.rs or 060 051 3151.

This policy is written to help you understand our practices in plain language. It is a description of our current data practices and does not itself create additional rights beyond those available to you under applicable law.

We collect personal data in three main ways: information you give us directly, information generated when you place an order, and information collected automatically as you browse the website.

This may include your name, email address, phone number, delivery and billing address, account credentials, and any information you choose to include in a contact form, customer support message, or order note (for example, details of a question, complaint, or return request).

When you place an order we, and our payment and fulfillment service providers, process information such as the products purchased, order value, shipping details, and payment confirmation status. Full card numbers are handled directly by our payment processor and its acquiring bank; we do not store complete card numbers on our own systems.

When you use our contact form, email us, or call us, we collect the details you provide (such as your name, email, phone number, and the content of your message) so that we can respond to questions, complaints, return requests, and other support enquiries, and so we can keep a record of that correspondence.

Like most websites, we automatically collect some technical information when you browse our store, including your IP address, browser and device type, pages viewed, referring website, and approximate location derived from your IP address, together with information stored in cookies and similar technologies described in Section 8 below.

We process personal data for the following purposes, relying on the legal bases indicated:

Where we rely on your consent (for example, for marketing emails), you can withdraw that consent at any time using the unsubscribe link in the email or by contacting us directly.

We use cookies set by our e-commerce platform, Shopify, that are strictly necessary for the website to function, for example, to keep items in your cart, remember your session, support secure checkout, and help detect fraud. These essential cookies cannot be switched off without affecting core functionality.

We also use Shopify's built-in checkout and analytics tools to understand how our store is used and to keep checkout secure. If we add any additional analytics, advertising, or personalization cookies in the future, we will update this section accordingly.

We use Shopify Inc. to host our online store, power checkout, and provide core commerce infrastructure. Shopify processes personal data on our behalf as our service provider (data processor) for these functions, under its own merchant terms and data processing agreement, and may also act as an independent controller for certain purposes disclosed in Shopify's own consumer privacy policy.

We also rely on the following categories of service provider, each of which only receives the personal data necessary to perform its function:

• Payment processing: Card payments are processed through CorvusPay, via Raiffeisen Bank, which handles your card details directly and securely.
• Delivery and logistics: We work with trusted courier partner(s) to deliver orders to you.
• Email and transactional communications: We use Shopify's built-in tools for order-related and transactional email.
• Analytics: We use Shopify's built-in analytics to understand how our store is used.

We share personal data only with the service providers described above, to the extent necessary for them to perform their function, and with public authorities where we are required to do so by law (for example, tax authorities or law enforcement requests). We do not sell your personal data.

Because our store runs on Shopify's global infrastructure, some personal data may be transferred to and processed in countries outside the Republic of Serbia, including the United States, Canada, and other countries where Shopify or its sub-processors operate. Shopify maintains contractual and technical safeguards for these transfers, as described in Shopify's own privacy and data processing documentation.

We keep order and invoicing records for as long as required by applicable Serbian tax and accounting legislation. We keep customer support and complaint correspondence for as long as reasonably necessary to resolve the matter and to demonstrate compliance with consumer protection obligations. Where you have created an account, we retain your account data until you ask us to delete it, subject to any legal retention obligations. Marketing data is retained until you unsubscribe or object, after which we suppress further use of your details for marketing purposes.

We rely on Shopify's PCI-DSS compliant, encrypted checkout and hosting infrastructure, and we limit access to personal data to personnel who need it to do their job. No method of transmission or storage is completely secure, but we take reasonable technical and organizational measures to protect your data against unauthorized access, loss, or misuse.

Subject to applicable law, you may have the right to:

• Ask us to confirm what personal data we hold about you and receive a copy of it;
• Ask us to correct inaccurate or incomplete personal data;
• Ask us to delete your personal data, subject to any legal obligation we have to keep it;
• Object to, or ask us to restrict, certain processing of your data;
• Withdraw consent at any time where processing is based on consent, such as marketing emails; and
• Lodge a complaint with the competent Serbian data protection authority (the Commissioner for Information of Public Importance and Personal Data Protection).

To exercise any of the rights above, or if you have any other question about how we handle your personal data, please contact us at recepcija@musclebeach.co.rs or 060 051 3151. We will respond within the timeframe required by applicable law and may need to verify your identity before actioning your request.

Our website and Products are intended for adults and are not directed at children. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

Our website may contain links to third-party websites, including social media platforms. We are not responsible for the privacy practices of those third parties, and we encourage you to review their privacy policies before providing them with personal data.

We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. Material changes will be reflected by an updated "last updated" date at the top of this page, and where appropriate we will provide additional notice.

Muscle Beach doo welcomes questions, complaints, return requests, and privacy requests at any time. Please reach us at recepcija@musclebeach.co.rs, 060 051 3151, by post at Milutina Milankovića 9dj, Novi Beograd, Serbia, or via our Contact page. See also our Terms & Conditions and Returns & Refund Policy.

This Privacy Policy was last updated on 16 July 2026.