Privacy & cookies

What information we collect, why, and what your rights are.

Last updated: October 2026

1. Who we are

This website is operated by UDITA s.r.o., a company registered in the Czech Republic (Company ID 19482841, Ruzeny Svobodove, Znojmo). We are the controller of the personal data collected on this site, and we follow the EU General Data Protection Regulation (GDPR).

2. What we collect

Account and order details: name, email, phone, shipping and billing address, and the products you ordered.
Messages: what you write to us or to a seller.
Technical data: IP address, browser and device type, and cookies (see section 7).
Sellers: business details, contact details and bank details for payouts.

Card details are entered directly with Stripe, our payment provider. We never see or store your card number.

3. Why we use it, and on what legal basis

To process your order, payment and delivery (performance of a contract)
To provide customer service and help when something goes wrong (contract and legitimate interest)
To prevent fraud and keep the site secure (legitimate interest)
To meet legal obligations, such as accounting (legal obligation)
To improve the site (legitimate interest)
To send updates and offers – only if you agreed (consent)

4. Who we share it with

The seller you bought from receives what they need to send your order: name, address, phone and order details.
Service providers working for us: payments (Stripe), website hosting, email delivery, site analytics, and invoicing software that sellers connect.
Authorities, where the law requires it.

We do not sell your personal data.

5. International transfers

Some of our service providers are located outside your country. Where data is transferred outside the UK or the European Economic Area, we use appropriate safeguards such as adequacy decisions or standard contractual clauses.

6. How long we keep it

For as long as your account is active, and after that only as long as the law requires (for example, accounting records).

7. Cookies

We use essential cookies to make the site work – for example to remember your basket and keep you signed in. With your consent, we also use cookies to measure how the site is used (for example Google Analytics). You can change your choice at any time, and you can block or delete cookies in your browser settings, although parts of the site may then not work properly.

8. Your rights

You can ask to access, correct or delete your data, to restrict or object to its use, and to receive it in a portable format. Where we rely on consent, you can withdraw it at any time. You can unsubscribe from emails using the link at the bottom of every email. You also have the right to complain to the Czech Office for Personal Data Protection (uoou.gov.cz) or the data protection authority in your country.

9. Security

The site is encrypted (HTTPS), and access to personal data is limited to people who need it for their work.

10. Changes and contact

We update this policy from time to time; the current version is always here. Questions or requests about privacy: info@thekoshershop.eu.