Privacy policy

PRIVACY POLICY

Last updated: August 20, 2026

OPT onDemand s.r.o. operates this store and website;, including all related information, content, features, tools, products, and services, with the aim of providing you, our customers, with a tailored shopping experience (together, the "Services"). We operate our e-shop on the Shopify platform. This Privacy Policy describes how we collect, use, and disclose your personal data when you visit, use, or make a purchase or other transaction through the Services, or otherwise communicate with us.

If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy governs with respect to the collection, processing, and disclosure of your personal data. Please read this Privacy Policy carefully.

1. Who is the controller of your personal data

OPT onDemand s.r.o., Company ID IČO 45312966, with its registered office at (U Pruhonu 13a, Prague 170 00, Czechia and it's production in Hrbovicka 107, Chlumec - Hrbovice 403 39), Czech Republic (hereinafter "we," "us," or the "Store"), is, for the purposes of applicable data protection laws, including the General Data Protection Regulation (GDPR), the controller of your personal data.

2. Personal data we collect or process

When we use the term "personal data," we mean information that identifies you or another person, or that can reasonably be linked to you. Personal data does not include information that is collected anonymously or that has been de-identified so that it can no longer be identified or reasonably linked to you. Depending on how you interact with the Services, we may collect or process the following categories of personal data:

• Contact details – name, address, billing and shipping address, phone number, and email address.

• Financial information – payment card details, payment method, payment confirmations, and other payment-related data (payments are processed exclusively by the payment gateway; we do not store card numbers).

• Account data – username, password, preferences, and settings.

• Transaction information – items viewed, added to cart, purchased, returned, or claimed, and order history.

• Communications with us – content of messages exchanged with customer support.

• Device information – device type, browser, IP address, and other identifiers.

• Usage and cookie information – how and when you interact with the Services (see the Cookies section below).

3. Sources of personal data

• Directly from you – when creating an account, placing an order, or communicating with us.

• Automatically through the Services – from your device and through cookies and similar technologies.

• From our service providers – e.g., Shopify, the payment gateway, carriers.

• From our partners or other third parties – e.g., analytics and advertising providers (Google, Meta).

4. How and why we use your personal data

We process personal data only on the basis of a specific legal ground under the GDPR. Overview of the main purposes and the corresponding legal bases:

Purpose of processing	Legal basis
Order processing, performance of the purchase agreement, delivery, claims, customer support	Performance of a contract (Art. 6(1)(b) GDPR)
Managing and maintaining your customer account	Performance of a contract / legitimate interest (Art. 6(1)(b), (f))
Personalizing offers and product recommendations (profiling based on purchase history and website behavior)	Legitimate interest (Art. 6(1)(f)) – you may object at any time
Marketing emails and SMS (newsletters, promotional offers)	Consent (Art. 6(1)(a)) – given by checking a box during ordering/registration, revocable at any time
Targeted advertising (e.g., Meta/Facebook Pixel) and traffic analytics (Google Analytics)	Consent to cookies (Art. 6(1)(a)) – see the Cookies section
Security, fraud prevention, protection of the Services	Legitimate interest (Art. 6(1)(f)) and compliance with legal obligations
Accounting and tax records	Compliance with a legal obligation (Art. 6(1)(c)) – Accounting Act, VAT Act
Resolving disputes, asserting or defending legal claims	Legitimate interest / compliance with a legal obligation (Art. 6(1)(c), (f))

Where processing is based on your consent, you have the right to withdraw it free of charge at any time (this does not affect the lawfulness of processing carried out before its withdrawal). Where processing is based on our legitimate interest, you have the right to object at any time – see the "Your Rights and Choices" section.

5. Cookies and similar technologies

Our e-shop uses cookies and similar technologies to ensure the website functions properly, to measure traffic, and to display relevant advertising. Specifically, we use:

• Necessary cookies – required for the e-shop to function (e.g., shopping cart, login). These are not subject to consent.

• Analytics cookies (Google Analytics) – help us evaluate website traffic and behavior.

• Marketing cookies (Meta/Facebook Pixel) – enable us to display targeted advertising on social media.

• Email tool cookies – used to evaluate the effectiveness of newsletters and email campaigns.

Necessary cookies are stored automatically. Analytics and marketing cookies are stored only after you give your consent via the cookie banner on your first visit to the website. You can change or withdraw your consent at any time in the cookie settings (the "Cookie Settings" link in the website footer) [add link to cookie banner]. We retain cookies for a maximum of 24 months, after which they are automatically deleted or consent must be renewed.

6. Profiling and automated processing

Based on your purchases and behavior on the website, we may create personalized product recommendations and display targeted advertising (e.g., via Meta Pixel). This constitutes profiling within the meaning of Art. 4(4) GDPR. These activities do not lead to decisions that produce legal effects or similarly significantly affect you without human involvement (i.e., we do not carry out automated decision-making within the meaning of Art. 22 GDPR, such as automatically approving/rejecting orders based on a profile). You may object at any time, free of charge, to profiling carried out on the basis of legitimate interest.

7. How we disclose personal data

Under certain circumstances, we may disclose your personal data to third parties for legitimate purposes in accordance with this Policy:

• To Shopify and other processors who perform services for us (payment gateway, shipping and logistics, cloud storage, customer support).

• To analytics and advertising providers – Google (Google Analytics) and Meta (Facebook/Instagram Pixel) – based on your cookie consent.

• To the email tool provider for sending newsletters and transactional emails.

• If you instruct or request us to do so, or otherwise consent to the disclosure of data to a third party.

• In connection with a business transaction (e.g., a merger), to comply with legal obligations, or to protect our rights and the rights of our customers.

We have entered into data processing agreements under Art. 28 GDPR with all processors who process personal data on our behalf.

8. Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal data about your access to and use of the Services in order to provide and improve the Services. Information you provide to the Services will be transferred to and shared with Shopify and third parties, which may be located in countries other than your country of residence. In addition, we may use certain enhanced Shopify features, which involve data from your interactions with our store, with other merchants, and with Shopify. In these circumstances, Shopify is responsible for the processing of your personal data, including responding to your requests to exercise your rights to that extent. More information can be found in Shopify’s Consumer Privacy Policy (shopify.com/legal/privacy/app-users) and on the Shopify Privacy Portal (privacy.shopify.com/en).

9. Third-party websites and links

The Services may contain links to websites or platforms operated by third parties. If you visit these sites, please review their own privacy policies – we are not responsible for their content or their data processing practices.

10. Protection of children

Our Services are not intended for individuals under the age of 16. A person under the age of 16 may use our Services only with the consent of a parent or legal guardian. If we discover that we have collected the personal data of a child under 16 without such consent, we will delete that data. If you are a parent or legal guardian and believe that your child has provided us with personal data without your consent, please contact us using the details below.

11. Security and retention period of personal data

We have implemented reasonable technical and organizational measures to protect your personal data. However, no security measures are perfect or impenetrable, and we cannot guarantee "perfect security."

We retain personal data only for as long as is reasonably necessary to fulfill the purpose for which it was collected:

• Order data and accounting/tax records – 10 years from the end of the relevant tax period (under the Accounting Act and the VAT Act).

• Customer account data – for the duration of the account’s existence and for a further 3 years from the last activity, after which it is deleted or anonymized.

• Data processed on the basis of marketing consent – until consent is withdrawn, but no longer than 3 years from the last interaction.

• Cookies – depending on type, for a maximum of 24 months (see the Cookies section).

• Data related to resolving claims or disputes – for the duration of the applicable statute of limitations.

12. Your rights and choices

In accordance with the GDPR, you have the following rights with respect to your personal data:

• The right to access / obtain information about the personal data we hold about you.

• The right to erasure of personal data.

• The right to rectification of inaccurate personal data.

• The right to data portability to another third party.

• The right to restrict processing under certain circumstances.

• The right to object to processing based on legitimate interest, including profiling and direct marketing – at any time and free of charge.

• The right to withdraw consent to processing at any time, without affecting the lawfulness of processing carried out prior to its withdrawal.

• The right to manage communication preferences – you may unsubscribe from marketing emails at any time via the link in the email; we will continue to send you non-promotional emails (e.g., about order status).

We will not discriminate against you for exercising these rights. Before processing your request, we may verify your identity as required by law. We will respond to your request without undue delay, and no later than within 30 days.

13. International transfers of personal data

We may transfer, store, and process your personal data outside the country in which you live. Where we transfer personal data outside the European Economic Area or the United Kingdom to countries not recognized by the European Commission as providing an adequate level of protection, we rely on recognized transfer mechanisms, in particular the European Commission’s standard contractual clauses.

14. Complaints

If you wish to file a complaint about how we process your personal data, please contact us using the details below. You also have the right to lodge a complaint with a supervisory authority – in the Czech Republic, this is the Office for Personal Data Protection (www.uoou.cz). A list of supervisory authorities across the EEA can be found on the website of the European Data Protection Board (edpb.europa.eu).

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time, including in connection with changes to our practices or for operational, legal, or regulatory reasons. We will post the revised policy on this website, update the "Last updated" date, and, where required by law, notify you of the change.