Privacy Policy

PRIVACY AND COOKIES POLICY

1. General Information

This Privacy Policy sets out the rules for processing personal data of users of the online store available at www.hypevenom.com (hereinafter: the "Store").

We make special efforts to protect the privacy of users and the processed personal data in accordance with applicable law, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council ("GDPR").

The Store uses appropriate technical and organizational measures, including SSL encryption, to ensure data security.


2. Personal Data Controller

The controller of personal data is:

HYPEVENOM LIMITED
a company registered under the laws of Hong Kong SAR
registration number: 78915157
address: 367–375 Queen's Road Central, Unit 1603, Sheung Wan, Hong Kong Island, Hong Kong SAR
e-mail address: support@hypevenom.com

The Controller is responsible for processing personal data in accordance with the GDPR.


3. Data Processors

In connection with the operation of the Store, personal data may be transferred to third parties processing data on behalf of the Controller, in particular:

  • HYPE VENOM COMPANY sp. z o.o. (Poland) –
    as a data processor in the scope of:

    • handling selected payments (e.g., Przelewy24, PayU),

    • handling returns and logistics in Poland,

  • payment operators (Stripe, PayPal, Przelewy24, PayU),

  • courier and logistics companies,

  • IT service providers (including Shopify),

  • entities providing accounting and legal services.

These entities process data solely on the basis of processing agreements and in accordance with the Controller's instructions.


4. Legal Basis for Data Processing

Personal data is processed in accordance with the GDPR, in particular on the basis of:

  • Art. 6(1)(b) GDPR – performance of a contract or taking steps prior to entering into a contract,

  • Art. 6(1)(c) GDPR – compliance with legal obligations,

  • Art. 6(1)(f) GDPR – legitimate interest of the Controller,

  • Art. 6(1)(a) GDPR – consent (e.g., newsletter).


5. Scope and Purposes of Data Processing

Personal data may be processed for the following purposes:

Purpose Scope of data Legal basis Retention period
order fulfillment and sales contract first name, last name, address, e-mail, telephone, payment details Art. 6(1)(b) GDPR until the expiry of the limitation period for claims
customer account management e-mail address Art. 6(1)(b) GDPR until account deletion
handling inquiries contact details Art. 6(1)(f) GDPR until the end of correspondence
newsletter e-mail address Art. 6(1)(a) GDPR until withdrawal of consent
complaints and claims identification and contact details Art. 6(1)(f) GDPR until the limitation of claims
accounting and tax obligations data required by law Art. 6(1)(c) GDPR in accordance with regulations

6. Voluntary Provision of Data

Providing personal data is voluntary, but necessary to conclude a contract, fulfill an order, or use selected functions of the Store.


7. Data Transfer Outside the EU / EEA

Personal data may be transferred outside the European Union, in particular to Hong Kong SAR, in connection with the Controller's registered office and the use of IT service providers.

Data transfer takes place in accordance with the GDPR, using appropriate safeguards, including standard contractual clauses.


8. Rights of Data Subjects

Every person has the right to:

  • access to data (Art. 15 GDPR),

  • rectification of data (Art. 16 GDPR),

  • erasure of data (Art. 17 GDPR),

  • restriction of processing (Art. 18 GDPR),

  • data portability (Art. 20 GDPR),

  • object to processing (Art. 21 GDPR),

  • withdraw consent at any time.

Requests should be sent to: support@hypevenom.com


9. Supervisory Authority

The data subject has the right to lodge a complaint with the competent supervisory authority.
In Poland, this is the President of the Personal Data Protection Office.


10. Cookies

The Store uses cookies for the purpose of:

  • proper functioning of the website,

  • adapting content to the user,

  • maintaining statistics,

  • marketing activities.

The user can independently manage cookies through browser settings.

The Store may use third-party cookies, in particular from Google and providers of analytical and marketing tools.


11. Changes to the Privacy Policy

The Controller reserves the right to change this Privacy Policy in the event of legal or organizational changes. The current version is always available on the Store's website.