Privacy Policy

Introduction

EcoShop is committed to protecting your personal data. This policy explains how we collect, use, and protect your personal information when you use our webshop.

Data Controller

• Company: EcoShop
• Address: Budapest, Hungary
• Email: info@ecoshop.hu
• Phone: +36 1 234 5678

Types of data collected

We process the following personal data during the operation of the webshop:

• Contact data: name, email address, phone number, billing and shipping address
• Order data: ordered products, quantities, prices, order status
• Technical data: IP address, browser type, device information, visit timestamps
• Payment data: handled through Stripe's secure tokenization (we do not store your card details)

Legal basis

We process your personal data on the following legal bases:

• Consent: newsletter subscription, cookie preferences
• Contract performance: order processing, shipping, invoicing
• Legitimate interest: webshop security, fraud prevention
• Legal obligation: invoicing and tax records

Data retention

We store your personal data only for as long as necessary. Order data is retained for 5 years as required by law. Newsletter subscriber data is kept until you unsubscribe.

Data sharing

We only share your personal data with third parties for order fulfillment (shipping partner), payment processing (Stripe), or when required by law. We never sell your personal data.

Cookies

Our webshop uses cookies. For detailed information, please see our Cookie Policy.

Your rights

Under the GDPR, you have the following rights:

• Right of access: you can view the personal data we hold about you
• Right to rectification: you can request correction of inaccurate data
• Right to erasure: you can request deletion of your personal data
• Right to data portability: you can request your data in a portable format
• Right to object: you can object to the processing of your data

Data breach

In the event of a data breach, we will notify the authorities and affected users within 72 hours.

Billing and shipping data

The billing and shipping information provided during checkout (name, address, phone number) is processed for order fulfillment and invoicing obligations. This data is retained for the period required by law (5 years).

Payment data (Stripe tokenization)

Payments are processed through Stripe's secure payment service. We do not store bank card details on our servers. Stripe uses a tokenization process that creates a secure token from your card details. Stripe complies with the highest level of PCI DSS security standards.

Order history

Your order history is stored in your account so you can track order status, download invoices, and easily reorder previous purchases. This data is retained for the period required by law.

User account data

Data provided during registration (name, email address, password – encrypted) is processed to operate your account. You can update your information in account settings at any time, or request deletion of your account and all associated data.

Newsletter subscription

Newsletter subscription is voluntary. We use your email address to send newsletters and include an unsubscribe link in every email. We store your subscription date and email address until you unsubscribe.

Contact

For privacy-related questions, please contact us at: info@ecoshop.hu