Privacy Policy

The data controller for personal data collected through this website and our online boutique is:

Hungarykum Kereskedelmi Korlátolt Felelősségű Társaság (Hungarykum Kft.)

• Registered office and returns address: 1073 Budapest, Dob utca 74, 1st floor, door 10, Hungary
• Company registration no.: 01-09-434612
• Tax no.: 32634686-2-42
• Registering court: Company Registry Court of the Budapest-Capital Regional Court
• Managing director: Kumi Chris Christopher
• Customer service: info@hungarykum.com
• Website: https://hungarykum.com

This policy explains what we collect, why, how long we keep it, who we share it with and what rights you have. It applies to visitors, customers and people who contact us.

Data you give us. Name, email address, delivery and billing address, phone number where provided, order contents, and the messages you send us.

Payment data. Card and payment details are entered directly with our payment providers. We receive only a confirmation, the last digits and card type — never the full card number.

Technical data. IP address, device and browser type, language, referring page, and pages viewed, collected automatically through logs and cookies.

Shopping data. Cart contents and checkout state, stored so your basket survives a page reload.

We do not knowingly collect data from children, and we do not ask for special-category data such as health information. Please do not send it to us.

• To process and deliver orders, issue invoices and handle returns — necessary for performance of our contract with you.
• To answer your messages and provide customer care — contract or our legitimate interest in supporting customers.
• To keep accounting and tax records — compliance with a legal obligation.
• To prevent fraud and secure the site — our legitimate interest in protecting the business and its customers.
• To measure and improve the site — consent where analytics cookies are used, otherwise our legitimate interest in aggregated, non-identifying statistics.
• To send marketing emails — only with your consent, or to existing customers about similar products where the law allows. You can withdraw at any time.

Strictly necessary cookies and local storage keep your cart, session and security protections working. These cannot be switched off without breaking the site.

Analytics cookies help us understand which pages are used, in aggregate.

Third-party embeds. Our Reviews page embeds videos from TikTok. When those load, TikTok may set its own cookies and receive your IP address under its own privacy policy. Our fonts are served by Google Fonts, which also receives your IP address.

You can clear or block cookies in your browser settings. Blocking necessary cookies will prevent checkout from working.

We share personal data only with providers who help us run the business:

• Shopify, our e-commerce and checkout platform, which processes orders and payments;
• payment service providers, who handle card authorisation and fraud checks;
• shipping carriers and fulfilment partners, to deliver your parcel;
• email and customer-service tools, to communicate with you;
• hosting and security providers, who operate the infrastructure;
• accountants and authorities, where the law requires it.

These act on our instructions under data-processing agreements. We never sell your personal data.

Some providers operate outside the European Economic Area. Where data is transferred, we rely on an adequacy decision or on the European Commission’s Standard Contractual Clauses together with additional safeguards, so that your data keeps an equivalent level of protection.

• Order and invoice records — for the retention period required by Hungarian accounting and tax law.
• Customer service correspondence — normally up to 3 years after the last contact.
• Marketing consent records — until you withdraw consent, plus a short record proving the withdrawal.
• Server logs and technical data — a short period for security and debugging.
• Cart data in your browser — until you clear it or it expires.

When data is no longer needed we delete it or irreversibly anonymise it.

Under the GDPR you may ask us to:

• confirm what data we hold about you and give you a copy (access);
• correct data that is wrong or incomplete (rectification);
• delete data we no longer need a lawful basis to keep (erasure);
• restrict processing while a dispute is resolved;
• receive your data in a portable, machine-readable format;
• object to processing based on our legitimate interests;
• withdraw consent at any time, without affecting past processing.

Write to us and we will respond within one month. We may need to verify your identity first. You also have the right to complain to the Hungarian data protection authority (NAIH) or to the supervisory authority in your country of residence.

Every marketing email contains an unsubscribe link that works immediately. Unsubscribing does not stop transactional messages such as order confirmations and shipping notices, which are part of fulfilling your order.

The site is served over HTTPS with a strict content security policy, clickjacking and MIME-sniffing protections, and a restrictive permissions policy. Access to customer data is limited to people who need it. No online service can be guaranteed absolutely secure, but we review our measures regularly and will notify you and the authority where a breach requires it.

We do not make decisions producing legal effects about you by automated means alone. Payment providers may run automated fraud screening on a transaction; if a payment is declined on that basis you can contact us and a person will review it.

We may update this policy as our services or the law change. The date at the top always shows the current version, and material changes will be highlighted on the site.

For any privacy question or to exercise your rights, contact us at info@hungarykum.com.

Hungarykum Kereskedelmi Korlátolt Felelősségű Társaság (Hungarykum Kft.)
1073 Budapest, Dob utca 74, 1st floor, door 10, Hungary