Privacy policy


Effective date: 5 October 2026

1. Who we are and scope

Company ID 24547450, registered at Nové sady 988/2, 602 00 Brno – Staré Brno, Czech Republic, is the controller of personal data processed for the Storefronts covered by this Privacy Policy. Our current Storefront is Jingle Decor. This policy also applies to any additional branded website, domain, subdomain or online Storefront operated by us that displays or links to this policy.

Privacy contact: info@jingledecor.com.


2. Personal data we collect

Depending on how you use a Storefront, we may process the following categories of personal data:

  • Identity and contact information, such as name, email address, billing and delivery address, telephone number and account details if you create an account.
  • Order and transaction information, including products ordered, order value, purchase history, returns, refunds, payment status, transaction references and limited payment-method information.
  • Customer-service information, including messages, complaints, return requests and other correspondence.
  • Delivery and fulfillment information, including shipment status, tracking references and delivery events.
  • Device and usage information, including IP address, browser and device characteristics, cookie or similar identifiers, pages viewed, referral information and interactions with the Storefront.
  • Marketing preferences, newsletter subscriptions and consent or opt-out records.
  • Reviews and user-submitted content, such as review text, display name, rating, photos or videos that you choose to submit.
  • Fraud-prevention and security information reasonably required to protect transactions, customers and the Storefront.
    We do not directly store complete payment-card numbers. Payment data is handled by Shopify and the payment providers made available at checkout.


3. Sources of personal data

We collect personal data directly from you, automatically from your device when you use a Storefront, and from service providers involved in payments, fraud prevention, fulfillment, delivery, customer support, analytics and Storefront operations. We may also receive updated delivery or payment-status information from those providers.


4. Why we process personal data and our legal bases

  • Orders and contract performance: Process orders, payments, delivery, returns, refunds, accounts and customer support. Legal basis: Performance of a contract or steps requested before entering into a contract.
  • Legal compliance: Keep required accounting and tax records, comply with consumer-protection duties, respond to lawful requests and establish or defend legal claims. Legal basis: Compliance with legal obligations and, where relevant, legitimate interests in legal claims.
  • Security and fraud prevention: Protect customers, transactions and Storefronts; prevent abuse, fraud and unauthorized activity. Legal basis: Legitimate interests in operating a secure business, balanced against your rights; legal obligations where applicable.
  • Analytics and Storefront improvement: Measure traffic, understand interactions, diagnose problems and improve design and performance. Legal basis: Consent where required for non-essential cookies or similar technologies; legitimate interests where law permits processing without consent.
  • Marketing communications: Send newsletters, offers and product updates where permitted. Legal basis: Consent, or a permitted existing-customer marketing basis where applicable, always subject to an easy opt-out.
  • Reviews and user content: Publish and moderate reviews or customer-submitted content and prevent review abuse. Legal basis: Performance of the requested review service, consent where required for particular media uses, and legitimate interests in authentic Storefront content.


5. Shopify, payment providers and other recipients

Our Storefronts are hosted on Shopify. We share information with Shopify as necessary to provide the ecommerce platform and checkout. We also share necessary information with payment processors, fraud-prevention providers, fulfillment providers, warehouses, shipping carriers, customer-support providers, hosting and IT providers, analytics providers, professional advisers and public authorities where required by law.

Some providers process personal data only on our instructions as processors. Others may act as independent controllers for their own regulated or independently determined purposes, for example certain payment providers. Their own privacy notices may apply to those activities.

 

6. Fulfillment and international delivery

Because our Storefronts may sell internationally and use multiple fulfillment locations, personal data needed to prepare and deliver an order may be sent to fulfillment partners, warehouses and carriers in countries outside your country of residence. We limit those disclosures to information reasonably necessary for fulfillment, delivery, returns, fraud prevention or related support.

 

7. Cookies and analytics

Essential cookies and similar technologies are used for functions such as checkout, security, cart operation, authentication and remembering privacy choices. Non-essential cookies and similar technologies are used only in accordance with applicable consent requirements.

We currently use the following analytics services across Storefront operations where enabled:

  • Google Analytics 4 (GA4), to understand traffic sources, page visits, interactions and purchase events. Google may process online identifiers and device and usage information.
  • Microsoft Clarity, to understand Storefront interactions through usage metrics, heatmaps and session replays, including clicks, scrolling and navigation.
    Where consent is required, these technologies operate only after you consent. You can reject non-essential cookies or change your choice through the Storefront cookie controls. Withdrawing consent does not affect processing that was lawful before withdrawal. Browser settings may also block cookies, although blocking essential technologies can affect checkout or other Storefront functions.

We do not sell personal data for money. Some disclosures or analytics activities may be classified as “sale”, “sharing” or targeted advertising under certain privacy laws even without a monetary payment. Where such laws apply, we provide the opt-out rights required by law through cookie controls or another available privacy request method.

 

8. Marketing communications

If you subscribe to marketing, we may send newsletters, offers and product updates. Where applicable law allows marketing to existing customers based on a prior purchase, we may use that permitted basis subject to the required conditions. You can unsubscribe at any time using the link in a marketing email or by contacting us. Unsubscribing from marketing does not stop transactional messages about your orders, returns, security or customer service.

 

9. International data transfers

Our service providers may process personal data outside the European Economic Area or your country of residence. Where the GDPR or another law requires a transfer mechanism, we rely on an applicable adequacy decision, the European Commission Standard Contractual Clauses or another legally permitted safeguard, together with supplementary measures where required. You may contact us for information about the safeguards relevant to your personal data.

 

10. Retention

We keep personal data only for as long as reasonably necessary for the relevant purpose, including fulfillment, customer service, accounting, tax, consumer-law obligations, fraud prevention and legal claims. Retention periods vary by record type and applicable law. When data is no longer required, we delete or anonymize it unless continued retention is legally required or justified for legal claims.

 

11. Your privacy rights

Depending on your location and applicable law, you may have rights to access, correct, delete, restrict or obtain a portable copy of personal data, object to certain processing, withdraw consent and lodge a complaint with a supervisory authority. Where local law provides, you may also have rights to opt out of certain sale, sharing or targeted-advertising activities and to appeal a denied request.

To exercise a privacy right, contact info@jingledecor.com. We may need to verify your identity. Under the GDPR, we generally respond within one month, subject to any lawful extension. Exercising privacy rights will not result in unlawful discrimination.

If the GDPR applies, you may complain to your local data protection authority or to the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, Czech Republic; uoou.gov.cz.

 

12. Children

The Storefronts are intended for customers who can lawfully enter into purchase contracts. We do not knowingly seek to collect personal data from children where parental authorization is required by applicable law. If you believe a child has provided personal data unlawfully, contact us so that we can review and, where appropriate, delete it.

 

13. Security

We use reasonable technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse or alteration. No internet transmission or storage system can be guaranteed to be completely secure.

 

14. Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes in our Storefronts, service providers, processing activities or legal requirements. The current version will be published on the relevant Storefront, with additional notice where required by law.

 

15. Contact

Data controller: ID: 24547450
Registered office: Nové sady 988/2, 602 00 Brno – Staré Brno, Czech Republic
Company ID: 24547450
Commercial Register maintained by the Regional Court in Brno, file no. C 150208
Email: info@jingledecor.com