Privacy Policy

1. Information We Collect

When you visit our website or place an order, we may collect the following information:

• Personal identification: Full name, email address, phone number
• Delivery information: Shipping address, billing address
• Payment information: Credit/debit card details (processed securely by Shopify Payments — we do not store card numbers)
• Technical data: IP address, browser type, device information, pages visited, time spent on site
• Communications: Emails and messages you send to our support team

2. How We Use Your Data

We use your personal data for the following purposes:

• Order fulfillment: Processing and shipping your orders, sending tracking updates
• Customer service: Responding to enquiries, handling returns and complaints
• Legal compliance: Complying with tax, accounting, and legal obligations
• Marketing: Sending promotional emails (only with your explicit consent; you may opt out at any time)
• Website improvement: Analysing usage patterns to improve our website and services

3. Legal Basis for Processing (GDPR)

We process your personal data on the following legal bases:

• Contract performance: Processing necessary to fulfill your order
• Legal obligation: Compliance with applicable laws and regulations
• Consent: Marketing communications (you can withdraw consent at any time)
• Legitimate interests: Fraud prevention, website security, and business analytics

4. Data Sharing

We do not sell your personal data. We may share your data with trusted third parties only as necessary:

• Shopify: Our e-commerce platform processes orders and payments
• Payment processors: Stripe, PayPal, and other payment gateways for secure transaction processing
• Shipping carriers: Your name and address are shared with carriers to deliver your order
• Legal authorities: When required by law or court order

5. Your Rights (GDPR)

As a data subject, you have the following rights:

• Right of access: Request a copy of the personal data we hold about you
• Right to rectification: Request correction of inaccurate personal data
• Right to erasure: Request deletion of your personal data ("right to be forgotten")
• Right to portability: Receive your data in a portable format
• Right to object: Object to processing for direct marketing purposes
• Right to withdraw consent: Withdraw consent for marketing at any time

To exercise any of these rights, contact us at support@buneria.com. We will respond within 30 days.

6. Cookies

Our website uses cookies to improve your browsing experience. These include essential cookies (required for the site to function), functional cookies (remembering your preferences), and analytics cookies (understanding how visitors use our site). You can control cookies through your browser settings.

7. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes described in this policy. Order data is retained for 7 years to comply with Hungarian tax law. You may request deletion of your data at any time, subject to our legal obligations.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. All data is transmitted using SSL encryption.

9. Contact & Complaints

For any privacy-related questions, contact our Data Protection contact at support@buneria.com. If you are not satisfied with our response, you have the right to lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH) at www.naih.hu.