Privacy Policy.

Controller: BonVulux s.r.o. · Sídliště U Nového nádraží 686, 418 01 Bílina – Teplické Předměstí, Czech Republic · IČO 06378811 · VAT CZ06378811

1. Who we are

BonVulux s.r.o. (“we”, “us”) is the controller of personal data processed through this website and our orders. You can reach us at info@bonvulux.com or at the registered office above.

2. What we collect and why

• Order data — name, billing and delivery address, email, phone, order contents and payment reference: to fulfil the contract, deliver your order and issue tax documents.
• Communication data — email or Messenger content: to answer enquiries and support orders (our legitimate interest in serving customers).
• Account data — if you create an account: login credentials and address book, to simplify future orders.
• Technical data — server logs and, where consented, analytics cookies: to keep the site secure and understand usage. See the cookie notice shown on first visit.

3. Legal bases

We process personal data on the bases of: performance of a contract (orders and delivery); compliance with legal obligations (accounting and tax records); our legitimate interests (customer support, site security and improvement); and your consent where applicable (marketing cookies, newsletter). Consent can be withdrawn at any time.

4. Who receives the data

Data is shared only with processors necessary to deliver our services: payment providers, shipping carriers, hosting and email providers, and our e-commerce platform (WordPress/WooCommerce). We do not sell personal data. Some processors may be located outside the EU; where so, transfers rely on adequacy decisions or appropriate safeguards.

5. How long we keep it

Order and accounting records are kept for the period required by Czech law (typically 10 years). Communication records are kept while needed to resolve the matter and for a limited period afterwards. Newsletter data until you unsubscribe.

6. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict and port your personal data, to object to processing based on legitimate interests, and to lodge a complaint with the Czech Office for Personal Data Protection (ÚOOÚ). To exercise any right, email info@bonvulux.com; we respond without undue delay and in any case within one month.

7. Security

We use HTTPS, access controls and minimised retention to protect your data. Full card details are handled by the payment provider and are not stored on our servers.

8. Children

Our store is not directed to children under 15 and we do not knowingly collect their data.

9. Changes

We may update this policy; the current version is always published on this page.