Privacy Policy
This policy explains what personal data we collect, why we collect it, and what rights you have under the General Data Protection Regulation.
Who is responsible
The controller of your personal data is [Legal entity name], registration number [IČO], registered at [Street, building], [Postal code] Prague, Czechia. For any question about your data, write to hello@khrn.com.
What we collect and why
- Order data: name, delivery and billing address, email, phone, items ordered. Used to perform the contract with you.
- Payment data: handled by our payment provider. We receive confirmation of payment and the last digits of the card. We never see or store full card numbers.
- Account data, if you create an account: email, password hash, order history. Used to perform the contract.
- Newsletter data: email address and the date of consent. Used on the basis of your consent, which you may withdraw at any time.
- Usage data: pages visited and actions taken on the site, collected through analytics once you accept analytics cookies. Used on the basis of your consent to improve the shop.
How long we keep it
Order and invoice records are kept for as long as accounting and tax law in Czechia requires. Newsletter data is kept until you unsubscribe. Analytics data is kept for the retention period set in the analytics tool. Account data is kept until you ask us to delete the account.
Who we share it with
We share data only with processors who help us run the shop: our payment provider, our carriers, our email and hosting providers, and our analytics provider. Each of them acts on our instructions under a data processing agreement. We do not sell personal data.
Where a provider stores data outside the European Economic Area, the transfer is covered by an adequacy decision or by standard contractual clauses.
Your rights
You may ask for access to your data, correction, erasure, restriction of processing, or a copy in a portable format. You may object to processing based on our legitimate interests, and withdraw consent at any time without affecting processing that already happened.
Write to hello@khrn.com and we reply within one month. If you believe we handle your data unlawfully, you may complain to the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů).