Privacy policy
Last updated 18 September 2026
CLAVAKIT (“we”) is the data controller for this store. Contact: hello@clavakit.store. This policy explains what we collect, why, and your rights under the GDPR.
What we collect and why
| Data | Purpose | Legal basis | Kept for |
|---|---|---|---|
| Name, address, email, phone, order contents | Fulfil and deliver your order, customer service, returns | Contract | 10 years (accounting law) |
| Payment confirmation (never full card numbers) | Take payment, prevent fraud | Contract, legitimate interest | 10 years |
| Email address (newsletter) | Send offers you asked for | Consent — withdraw any time via the unsubscribe link | Until you unsubscribe |
| Analytics data (pages viewed, device, approximate location) | Understand what works on the site | Consent (cookie banner) | 14 months |
| Marketing pixel data | Measure and target advertising | Consent (cookie banner) | Per provider, max 13 months |
| Contact form messages | Answer you | Legitimate interest | 2 years |
Cookies
Essential cookies run the cart, checkout and security; they need no consent. Analytics cookies (Google Analytics 4, IP anonymised) and marketing cookies (Meta Pixel, TikTok Pixel) are set only after you accept them in the banner, and you can change your choice at any time via “Cookie settings” in the footer. Rejecting them changes nothing about how the shop works.
Who receives your data
Our e-commerce platform (Shopify International Ltd, Ireland), payment providers, our fulfilment partner and carriers (name and delivery address only), our email provider, and — only with consent — Google, Meta and TikTok. Some providers process data outside the EU under the EU Standard Contractual Clauses or an adequacy decision.
Your rights
Access, rectification, erasure, restriction, portability, objection, and withdrawal of consent — email hello@clavakit.store and we act within 30 days. You may complain to the Slovak Data Protection Office (Úrad na ochranu osobných údajov SR) or your local authority.
Security
Checkout is encrypted (TLS). Access to order data is limited to people who need it to serve you.
Children
The store is intended for adults. We do not knowingly collect data from children under 16.
Changes
We update this page when our processing changes; the date at the top tells you when.