The data controller is LAJF23 s.r.o., with its registered office at Pěčín 6, 517 57 Pěčín, Czech Republic, Company ID No. 09649930, VAT ID No. CZ09649930, registered in the Commercial Register maintained by the Regional Court in Hradec Králové, Section C, Insert 48509. For any questions regarding the protection of personal data, contact us at hello@hiddengiraffe.cz.
We collect only what we need to run the shop, deliver your order, and communicate with you.
Orders: your name, email, phone and delivery address. Stored to fulfil the contract and to satisfy Czech accounting law.
Newsletter: your email address and your locale, plus the date you confirmed your subscription. Collected only if you opt in.
Analytics: aggregate pageviews and a small set of UI events. We never store your IP address or use cookies for analytics. Visitors are identified by a daily-rotating salted hash that becomes unlinkable after 24 hours.
Order data: contract performance — GDPR Art. 6(1)(b). Newsletter: your consent — GDPR Art. 6(1)(a). You may withdraw consent at any time using the unsubscribe link in every email. Analytics: our legitimate interest in understanding site usage — GDPR Art. 6(1)(f). The data is pseudonymised at collection. Accounting: legal obligation — GDPR Art. 6(1)(c) read with §31 zákona o účetnictví.
Orders: 10 years from the end of the accounting period, as required by Czech accounting law. Your personal fields (name, email, phone, address) are anonymised on request after the order has been fulfilled; the invoice line items, totals and order number are retained.
Newsletter subscribers: until you unsubscribe. Pending (unconfirmed) signups are deleted after 30 days.
Analytics: pageviews and events are retained for 12 months and then deleted.
Campaign send logs: 12 months from the send date.
We use trusted service providers to operate our online store and fulfil orders. Depending on the services used, personal data may be shared only to the extent necessary with:
Where these providers act as processors, they process personal data on our instructions and under appropriate contractual safeguards. We do not sell personal data.
We do not use tracking or analytics cookies on this website. Stripe’s hosted checkout page may set its own cookies, which are governed by Stripe’s privacy and cookie notices.
Under the GDPR, you have the right to access your personal data, correct inaccurate data, request erasure or restriction of processing, receive your data in a portable format, and object to processing where applicable. You also have the right to lodge a complaint with the Czech supervisory authority, the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), at www.uoou.gov.cz.
To exercise any of these rights, contact us at hello@hiddengiraffe.cz. We will respond without undue delay and no later than within one month, as required by Article 12(3) of the GDPR.
For any questions about privacy or the protection of your personal data, contact us at hello@hiddengiraffe.cz.