Updated 31 March 2026

Privacy Policy

This page explains what personal data is collected in connection with occasional private sales through Blueonion, how it is used, and how to contact the seller about privacy.

Who controls your data

Lukas Hodac
V Oudoli 328, Pisek, 39701, Czechia
Email: lukashodac@gmail.com

What we collect

  • contact details such as name, email address, phone number, and delivery address
  • account details if you choose to create an account
  • order, payment, shipping, return, and refund details
  • messages you send to us
  • technical and usage data needed to run the store and measure basic traffic
  • cookie and local storage data used for cart and storefront functionality

How we use your data

  • to communicate about an order or sale
  • to arrange payment, delivery, return, refund, or complaint handling
  • to keep basic records about transactions and messages
  • to keep the website secure and functioning

Legal bases

  • performance of a contract or steps before entering into a contract
  • compliance with legal obligations, especially accounting and tax obligations
  • legitimate interests such as fraud prevention, store security, and administration
  • consent where consent is legally required

Who we share data with

  • Supabase for authentication and database services
  • Stripe for payment processing and invoicing
  • Cloudinary for product and media hosting
  • shipping and logistics providers used to quote or deliver orders
  • email and hosting providers used to send transactional communications
  • analytics providers used for basic website measurement

We share only the data needed for the relevant service. Some providers may process data outside the EU or EEA; where that happens, appropriate safeguards should apply as required by law.

Cookies and local storage

We use cookies and similar browser storage for essential storefront functions, including cart persistence, session-related features, and checkout continuity.

The store also uses basic analytics. If you later add non-essential marketing or advertising cookies, this page should be updated and a consent flow should be added where required.

How long we keep data

  • messages and order data are kept for as long as reasonably needed to complete or document the sale
  • some records may be kept longer if required by law or needed for dispute resolution
  • cart cookies may remain in your browser for up to 1 year unless cleared earlier
  • local browser storage remains on your device until you clear it or your browser removes it

Your rights

Depending on the GDPR and applicable law, you may have the right to access, correct, delete, restrict, object to, or transfer your personal data, and to withdraw consent where processing is based on consent.

To exercise your rights, contact lukashodac@gmail.com.

Complaints

If you believe your personal data is being processed unlawfully, you may contact us first or file a complaint with the Czech Data Protection Authority (UOOU).