Privacy Policy

Effective: September 7, 2026 — Please read this policy carefully before accepting it. This document is based on a template — legal review is recommended.

1. Data Controller Information

2. Scope and Purpose of Processed Personal and Business Data

2.1 Registration and creation of a business customer account

The webshop is exclusively available to registered business customers (typically companies, sole proprietors). During registration, we request the following data:

• Company name
• Tax number
• Company registration number
• Registered office / mailing address
• Contact person's name
• Email address
• Phone number

Purpose of data processing: identification of the business customer, verification of their legal status, account activation, establishment of business relationship.
Legal basis: GDPR Article 6 (1) b) (preparation and performance of a contract).

2.2 Order processing and delivery

Processed data: company name, delivery address, contact person's name, phone number, email address, order details.
Purpose: order fulfillment, organization of delivery, customer relationship.
Legal basis: GDPR Article 6 (1) b) (performance of a contract).

2.3 Invoicing

Processed data: company name, registered office/billing address, tax number, company registration number, ordered products and price.
Purpose: issuing VAT-liable invoices, fulfilling retention obligations under accounting law.
Legal basis: GDPR Article 6 (1) c) (legal obligation).
Retention period: 8 years.

2.4 Customer Service

Processed data: name, email address, content of message.
Purpose: handling incoming inquiries, providing responses.
Legal basis: GDPR Article 6 (1) f) (legitimate interest).

2.5 Cookie Management

Detailed information is contained in the Cookie Policy.

3. Data Processors

The data controller uses the following data processors:

• Shopify International Limited (Dublin, Ireland) — webshop platform, hosting
• Shipping partners — to the extent necessary for order fulfillment (company name, delivery address, phone)
• Accountant / invoicing system — for fulfilling accounting obligations

4. Rights of the Data Subject

Based on the current GDPR regulation, the data subject can exercise the following rights:

• Right of access — information about processed data can be requested
• Right to rectification — inaccurate data can be corrected
• Right to erasure — data can be erased under certain conditions
• Right to restriction of processing
• Right to data portability
• Right to object — against data processing based on legitimate interest

Requests to exercise rights should be sent to info@repeatclean.hu.

5. Right to Lodge a Complaint

If you believe that the data processing violates the provisions of the GDPR, you may lodge a complaint with the National Authority for Data Protection and Freedom of Information (NAIH):

Website: www.naih.hu
Postal address: 1363 Budapest, Pf. 9.
Email: ugyfelszolgalat@naih.hu

6. Modification of the Policy

The data controller reserves the right to change this policy. We will notify you of changes via the website.