Privacy policy

Data controller

Data we process

Depending on how you use the services, we process your name, email, phone number, billing and delivery address, account identifiers, order history and status, selected payment method without full payment card details, support communications, photos you upload, and reviews. We may also process technical device, network, service usage, cookie, and diagnostic data.

Purposes and legal bases

We use data to create and manage accounts and to process orders, payments, delivery, claims, and support as necessary to perform a contract. We meet accounting, tax, and consumer obligations under law. Service security, fraud prevention, legal claims, and essential operational diagnostics rely on legitimate interests. Marketing and optional analytics or advertising technologies rely on consent where required.

Mobile app permissions

The mobile app does not request access to the camera, photo library, location, contacts, or microphone. Image uploads remain available only when using the web storefront outside the app.

Recipients and data transfers

We disclose data only as necessary to providers of hosting and infrastructure, ecommerce and databases, payments, shipping, email and customer support, Apple and Google sign-in, Sentry diagnostics, and, after consent, Google, Meta, or Reddit analytics and advertising services. Some providers may process data outside the EEA. Where this occurs, we use appropriate safeguards such as adequacy decisions or standard contractual clauses.

Retention

We retain data only as long as needed for the stated purposes. Account and order data is kept during the relationship and afterward for applicable accounting, tax, warranty, or limitation periods. Support communications and diagnostic records are kept as needed to resolve the request and protect the service. Data based on consent is processed until consent is withdrawn unless another legal basis applies.

Your rights

Subject to the GDPR, you may request access, correction, erasure, restriction, or portability of your data. You may object to processing based on legitimate interests and withdraw consent at any time without affecting prior lawful processing. We may be unable to erase some data immediately where law requires retention or it is needed to protect legal claims.

Cookies, analytics, and the mobile app

The website and its content shown in the mobile app use essential technologies for sign-in, cart, security, and proper operation. The public website uses optional analytics and advertising technologies according to cookie settings and consent. The mobile app does not load those web analytics or advertising technologies. We may process limited diagnostic data to operate the service and resolve errors.

Security

We use appropriate technical and organisational measures, including encrypted transport, access controls, secure storage of the mobile session, error monitoring, and backups. No system can be considered absolutely secure. If you identify a security issue, contact [email protected].

Children

The services are not intended for children who cannot independently enter into a purchase contract or give valid data processing consent under applicable law. If you believe a child provided data without required parental or guardian consent, contact us.

Contact and complaints

For questions or requests about personal data, contact [email protected]. We will respond without undue delay and within the period required by the GDPR. If you believe we process data unlawfully, you may lodge a complaint with the Czech Data Protection Authority.