Test mode: payments run in Stripe test mode and no real charge is made.

Skip to content
Nailshop

Privacy policy

Last updated: 10 October 2026

Temporary draft: [bracketed] details are placeholders; the final text will be ready before the shop opens.

1. Data controller

[Cégnév Kft.], [Székhely: irányítószám, város, utca, házszám]. [Adószám: 00000000-0-00]. Contact: [ugyfelszolgalat@domain.hu].

We process data under the EU General Data Protection Regulation (GDPR) and Hungarian Act CXII of 2011. The Hungarian version of this policy is the binding one.

2. Orders and payment

Data: name, email, phone number, shipping and billing address, company name and VAT number for company purchases, and the products ordered.

Purpose and legal basis: performing the contract (GDPR Art. 6(1)(b)). Kept until the order is fulfilled and any claims expire (5 years).

Card details are handled only by Stripe; the shop never sees or stores them.

3. Invoicing

Data: the name, address, VAT number and order details shown on the invoice.

Purpose and legal basis: a legal obligation (GDPR Art. 6(1)(c), Hungarian Accounting Act C of 2000). Kept for 8 years.

4. Account and favourites

If you create an account, WorkOS handles your email address and sign-in data, and your favourites are saved to your account.

Purpose and legal basis: providing the account (GDPR Art. 6(1)(b)). Kept until you delete the account.

5. Newsletter and back-in-stock alerts

Data: your email address and, for alerts, the product you watch.

Purpose and legal basis: your consent (GDPR Art. 6(1)(a)), which you can withdraw at any time with the unsubscribe link in every email. Kept until you unsubscribe.

6. Cookies and local storage

Your cart and guest favourites stay in your browser's local storage and are not sent to us. When you sign in, a session cookie identifies you; it is strictly necessary for the service.

Analytics cookies (PostHog): switched on only after you consent, according to your choice in the cookie banner. We measure which pages you view, what you add to the cart, when you start checkout and the amount of a completed purchase, where you click (heatmaps), plus your device and browser type and approximate location (country, city). A session replay of your visit may also be recorded: it captures the page and pointer movement, with typed text (such as email addresses and passwords) masked. When you are signed in, your account ID and email address are linked to this data. The cookie is named ph_…_posthog and lasts up to 1 year.

Purpose and legal basis: improving the shop, based on your consent (GDPR Art. 6(1)(a)). You can withdraw consent any time with the “Cookie settings” link in the footer; if you reject, nothing is measured. Kept for: [the owner sets this, e.g. 12 months].

We use no advertising cookies.

7. Processors

Stripe Payments Europe Ltd. (Ireland): online payment.

WorkOS, Inc. (USA): sign-in and accounts.

Resend, Inc. (USA): sending email (order confirmations, newsletter).

Convex, Inc. (USA): storing favourites, alerts and subscriptions.

Vercel Inc. (USA): hosting and file storage.

PostHog, Inc. (USA): site analytics, only with your consent. The data is stored in the European Union (Frankfurt, Germany).

Transfers outside the European Economic Area rely on the European Commission's standard contractual clauses or the EU–US Data Privacy Framework. [The owner checks each provider's terms.]

8. Your rights

You can ask for access to your data, its correction or deletion, restriction of its processing, object to processing, and ask for your data in a portable format. We answer within 30 days.

You can complain to the Hungarian data protection authority (NAIH, 1055 Budapest, Falk Miksa utca 9–11, www.naih.hu) or go to court.