Privacy
Policy

1. Introduction

This Privacy Policy describes how we collect, use, store and protect your personal information when you visit lastcatch.eu or riverfish.rs and place an order. We are committed to protecting your privacy and handling your data in a transparent manner.

The data controller is Miroslav Todorović, operating under the name Agricultural Farm Todorović, Velika Plana, Serbia. Contact: info@lastcatch.eu

2. Data we collect

We collect only the minimum personal data necessary to process your order:

• Name and surname — to address your order
• Email address — to send order confirmations and updates
• Delivery address — to ship your order
• Phone number (optional) — for delivery coordination if needed

We do not collect or store payment card data. All payment processing is handled by Stripe, Inc. Please refer to Stripe’s Privacy Policy for details.

3. How we use your data

Your personal data is used exclusively for:

• Processing and fulfilling your order
• Communicating with you about your order (confirmation, shipping updates)
• Resolving any issues or complaints related to your purchase

We do not use your data for marketing purposes without your explicit consent, and we do not sell or share your data with third parties for commercial purposes.

4. Data sharing

We share your data only with:

• Post of Serbia / EMS — your name and delivery address, for shipping purposes only
• Stripe, Inc. — for secure payment processing
• SureCart — our order management platform

We do not share your data with any other third parties.

5. Data retention

We retain your order data for 5 years as required by applicable accounting and tax regulations. After this period, your data is securely deleted.

6. Cookies

Our website uses a minimal number of cookies:

• Essential cookies: Required for the website to function — language preferences, session data, cookie consent. These cannot be disabled.
• Stripe cookies: Set by Stripe during checkout for fraud prevention and payment processing.
• Analytics cookies: We may use Google Analytics to understand how visitors use our website. If enabled, this is disclosed in our cookie banner and you can opt out at any time.

We do not use advertising or tracking cookies for marketing purposes without your consent.

7. Your rights

Under GDPR and applicable data protection law, you have the right to:

• Access your personal data we hold
• Correct inaccurate data
• Delete your data (“right to be forgotten”)
• Object to processing
• Portability — receive your data in a portable format

To exercise any of these rights, please contact us at info@lastcatch.eu. We will respond within 30 days.

8. Security

We take reasonable technical and organizational measures to protect your personal data against unauthorized access, loss or disclosure. Our website uses HTTPS encryption for all data transmission.

9. Changes to this policy

We may update this Privacy Policy from time to time. The date at the top of this page indicates when it was last revised. Continued use of the website after changes constitutes acceptance of the updated policy.