Privacy Policy
HRK Shop — https://hrkshop.com
Effective date: 7th September 2025
1. Introduction
HRK Shop (“we”, “us”, “our”) respects your privacy. This Privacy Policy explains how we collect, use, share, and protect your personal data when you use our online shop, in compliance with the EU General Data Protection Regulation (GDPR), relevant EU export regulations, and widely recognized international privacy standards, including core US privacy principles.
2. Who Controls Your Data
HRK Shop is based in the European Union and acts as the data controller for processing personal data collected via the website.
3. Data We Collect
- Identity & Contact: name, billing and shipping address, email, phone.
- Order & Billing: purchased products, order history, invoice data. Payment card data is processed by our payment provider(s) and not stored by us.
- Technical: IP address, device/browser data, pages viewed, and cookie identifiers for functionality, analytics, and fraud prevention.
We collect only what is necessary to process and deliver your order, issue invoices, comply with customs, tax, and export rules, and provide support.
4. How We Use Your Data
- Process orders, payments, invoicing, and customer support.
- Ship and deliver orders, including required data sharing with carriers and customs authorities.
- Comply with legal, tax, accounting, and export obligations.
- Send emails about order status, delivery, and order exceptions.
- Send occasional updates and offers; you may opt out at any time (see Marketing & Emails).
Our lawful bases under GDPR include contract performance, legal obligation, and legitimate interests. Where required, we rely on consent (e.g., for certain cookies/marketing).
6. Data Retention
We keep personal data only as long as necessary for the purposes above and to meet legal, tax, and accounting requirements. When no longer needed, data is deleted or anonymized.
7. Your Rights
Subject to law, you may:
- Access, correct, or update your data.
- Request deletion of your data.
- Object to or restrict certain processing.
- Request data portability.
- Withdraw consent (where processing is based on consent).
To exercise rights, submit a request via our Contact page. Customers can request deletion of their data there.
8. Marketing & Emails
We send transactional emails about orders, delivery, and exceptions. We may also send occasional updates about current offers or products. You can opt out of marketing emails at any time using the unsubscribe link or by contacting us; transactional messages will still be sent as needed.
9. Data Security
We use appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. No method of transmission or storage is completely secure.
10. International Data Transfers
Your data may be processed within the EU and, where necessary for delivery or compliance, outside the EU. When transfers occur, we use appropriate safeguards consistent with EU data-protection law.
12. US Privacy Notice (Summary)
- We do not sell or “share” personal information as defined by applicable US state privacy laws.
- US residents may request access or deletion of personal information via our Contact page. We will not discriminate for exercising these rights.
13. Changes to This Policy
We may update this Privacy Policy to reflect changes in law or our practices. Material changes will be posted on this page with an updated effective date.
14. Contact
Questions or requests regarding this Policy: use our Contact page.