Privacy policy

Last updated: 1 October 2026.

Thank you for placing your trust in me and shopping or browsing at artless. As the data controller, it is particularly important to me that you can feel confident about the security of your personal data. This notice explains in detail what data I collect, how I use it, and what rights you have in relation to it under the applicable European General Data Protection Regulation (GDPR) and Hungarian legislation.

  1. Who processes your data? (The Data Controller)

Name: Piszeczki Ilona, sole proprietor
Registered office: 6200 Kiskőrös, Petőfi S. út 23., Hungary
Registration number: 54225853
Tax number: 55530655-1-23
Email: email@artless.hu
Phone: +36 70 703 2585

  1. What data do I process, why, and for how long?

A) Purchases and order fulfilment

When you purchase a product from the online store, a contract is formed between us. To perform this contract, you must provide certain information.

Data processed: Your name, billing address, shipping address, email address, telephone number, details of the purchased product, and the payment method and date.

Purpose of processing: Processing your order, issuing an invoice, preparing your parcel, arranging delivery, and communicating with you.

Legal basis for processing: Performance of a contract (Article 6(1)(b) GDPR).

Retention period: To comply with accounting obligations, I am required to retain issued invoices and the related data for eight years in accordance with applicable legislation.

B) Contacting me by email

This applies when you email me with a question about products, sizes, or an order.

Data processed: Your name, email address, and any other information included in your message.

Purpose of processing: Answering your question and providing assistance.

Legal basis for processing: Your voluntary consent (Article 6(1)(a) GDPR), which you provide by sending your message.

Retention period: Until the purpose has been fulfilled, meaning your enquiry has been resolved, or until you request the deletion of the correspondence.

  1. How do I disclose personal data?

I do not sell your data or make it available to third parties for marketing purposes. However, to operate the online store and deliver your parcel, I use the following trusted partners (data processors):

Shopify, suppliers, and third parties providing services on my behalf, for example IT infrastructure, payment processing, data analysis, shipping, and parcel delivery. Shopify Inc. (151 O’Connor Street, Ground Floor, Ottawa, ON K2P 2L8, Canada) provides the online store’s technical infrastructure, and the data is processed on secure, encrypted servers.

Invoicing software: Számlázz.hu, operated by KBOSS.hu Kereskedelmi és Szolgáltató Korlátolt Felelősségű Társaság, 1031 Budapest, Záhony utca 7/D., Hungary. They receive the data necessary to issue electronic invoices in accordance with applicable legislation.

Logistics partner / courier service: Magyar Posta Zrt. (MPL), 1138 Budapest, Dunavirág utca 2–6., Hungary. They receive only the name, shipping address, email address, and telephone number necessary to deliver the parcel and notify you about delivery.

Personal data may also be disclosed to comply with legal obligations where required by law, an order from a competent authority, or valid legal proceedings, or to protect the Services, my rights, and the rights of my users or others.

  1. Relationship with Shopify

The Services are operated by Shopify, which collects and processes personal data relating to access to and use of the website so that the system can operate securely. Information you provide through the store is shared with Shopify.

Shopify may use the personal data it collects to maintain and improve the security of its business operations. In these circumstances, Shopify is also responsible for processing your personal data. To learn more about how Shopify uses your personal data, visit Shopify’s Consumer Privacy Policy, or use Shopify’s Privacy Portal at shopify.com to exercise certain rights.

  1. Cookies and third-party links

When you visit the online store, the system places small data files called cookies in your browser. Some of these are essential for the website’s technical operation, for example keeping products in your shopping cart. You can make your choices about cookies through the cookie banner displayed when you arrive on the website.

The website may contain links to websites operated by third parties, such as Instagram. If you follow links to websites outside my control, I recommend reading their privacy policies, as I cannot take responsibility for how external websites process your data.

  1. Children’s data

The Services are not intended for use by children, and I do not knowingly collect personal data from children. If you are the parent or guardian of a child who has provided personal data, you may request its deletion by contacting me using the contact details provided above. I am not aware of sharing or selling the personal data of anyone under the age of 16.

  1. Security and retention of your data

Please note that no digital security measure is perfect or impenetrable, and no one can guarantee “perfect security”. I recommend that you do not use insecure channels to send sensitive or confidential information.

The length of time personal data is retained depends on various factors, including whether it is needed to provide the Services, fulfil your orders, comply with legal obligations such as invoice retention requirements, or resolve disputes.

  1. Your rights and choices

As you reside in the European Economic Area (EEA), you have the following rights regarding your personal data under applicable law:

Right of access: You have the right to request access to, and a copy of, the personal data held about you.

Right to erasure: You may request the deletion of your personal data, provided that this is not prevented by other legal requirements, such as accounting obligations.

Right to rectification: You may request the correction of inaccurate or outdated personal data.

Right to data portability: In certain circumstances, you may request that I provide your personal data to you or a third party in a structured, commonly used format.

Right to object and to restrict processing: You may request that I stop or restrict the processing of your personal data for certain purposes.

Withdrawal of consent: Where processing is based on your consent, you may withdraw that consent at any time. This does not affect the lawfulness of processing carried out before withdrawal.

You will not suffer any disadvantage for exercising your rights. Before fulfilling your request, I may need to verify your identity. I will respond to all requests within the period prescribed by law, no later than 30 days.

  1. Complaints and remedies

If you have any complaints or concerns about how I process your data, please first contact me at email@artless.hu so that we can find a satisfactory solution personally and as quickly as possible.

If this does not resolve the matter, you may lodge a complaint with the supervisory authority or seek a remedy before a court:

Hungarian National Authority for Data Protection and Freedom of Information (NAIH)
Address: 1055 Budapest, Falk Miksa utca 9–11., Hungary
Postal address: 1363 Budapest, Pf. 9., Hungary
Email: ugyfelszolgalat@naih.hu
Website: www.naih.hu

  1. International data transfers

As Shopify provides the store’s technical infrastructure, your personal data may be transferred, stored, and processed outside the European Economic Area (EEA), for example on Shopify’s servers in Canada or the United States. For these transfers, the system relies in all cases on official and secure data transfer mechanisms recognised by the European Commission, such as Standard Contractual Clauses.

  1. Changes to this Privacy Policy

I may update this notice from time to time to accurately reflect changes in the operation of the online store or applicable legislation. I will always publish the revised policy on this page and update the “Last updated” date shown at the top of the page.