Privacy notice

Privacy Notice & Data Protection Policy

Effective Date: August 20, 2026 | Website: flirtyfluffers.com

1. Data Controller Information

This Privacy Notice explains how Flirty Fluffers Media Group Kft. collects, processes, and protects your personal data when you visit and purchase from flirtyfluffers.com, in compliance with the General Data Protection Regulation (EU 2016/679 - GDPR) and Hungarian Act CXII of 2011 on Informational Self-Determination and Freedom of Information.

Company Name: Flirty Fluffers Media Group Kft.

Registered Office: Ádám Jenő sétány 18., 2310 Szigetszentmiklós, Hungary

Company Registration Number (Cg.): 13-09-235561 (Pest County Court of Registration)

Tax Identification Number (Adószám): 32619786-2-13

EU VAT Number: HU32619786

Email Contact: privacy@flirtyfluffers.com / support@flirtyfluffers.com

2. Personal Data We Collect and Legal Bases

We process personal data only when there is an explicit lawful basis under Article 6 of the GDPR:

Purpose	Data Processed	Legal Basis (GDPR)	Retention Period
Order Processing & Fulfillment	Name, delivery & billing address, email, phone number, purchased items.	Art. 6(1)(b) Contract performance	5 years (statutory civil claims limitation).
Invoicing & Statutory Accounting	Customer name, billing address, tax ID (if company), invoice records.	Art. 6(1)(c) Legal obligation (Hungarian Accounting Act)	8 years in compliance with tax/accounting law.
Customer Account	Name, login credentials (hashed passwords), address book, wishlist, order history.	Art. 6(1)(b) Provision of account service	Until account termination or 2 years of inactivity.
Customer Support	Name, email, order reference, message correspondence.	Art. 6(1)(f) Legitimate interest	2 years from ticket closure.
Newsletter & Marketing	Email address, name, consent timestamp.	Art. 6(1)(a) Consent	Until consent is revoked (unsubscribed).

3. Payment Processing

All digital payments are processed through certified, PCI-DSS compliant third-party payment gateways. Flirty Fluffers Media Group Kft. never captures, stores, or accesses your complete payment card details or CVV security codes. All payment processing occurs securely within the service providers' encrypted environments.

4. Data Processors and Third Parties

We work with vetted Data Processors under formal Data Processing Agreements to fulfill online store operations:

Hosting & E-commerce Infrastructure: nopCommerce application hosting servers located inside the European Union (EEA).
Shipping & Logistics Partners: Courier and parcel services (e.g., GLS, DPD, DHL, national postal operators) for order delivery to Germany, Austria, Netherlands, Slovakia, Croatia, Hungary, and other destinations.
Electronic Invoicing: Certified automated billing providers for issuing tax invoices.
Email Dispatch: Transactional order confirmation and newsletter delivery systems.

5. Cookies and Technical Storage

Our store uses essential and optional cookies:

Strictly Necessary Cookies: Essential for shopping cart persistence, user session authentication, CSRF tokens, and security.
Functional Cookies: Store preferences such as currency (EUR, HUF) and display language (EN, DE, HU).
Analytical / Performance Cookies: Measure traffic and usability anonymously (subject to user consent).

You can modify your cookie settings anytime via your browser settings or our cookie consent manager.

6. Your Rights Under the GDPR

Under EU Data Protection Law, you have the following enforceable rights:

Right of Access (Art. 15): Request a copy of the personal data we hold about you.
Right to Rectification (Art. 16): Correct inaccurate or incomplete details.
Right to Erasure (Art. 17): Request deletion of your data when retention is no longer legally mandated.
Right to Restriction of Processing (Art. 18): Restrict the processing of your data under specific conditions.
Right to Data Portability (Art. 20): Receive your personal data in a structured, machine-readable format.
Right to Object (Art. 21): Object to processing based on our legitimate interest.
Right to Withdraw Consent (Art. 7(3)): Unsubscribe from marketing communications at any time.

To exercise your rights, email us at privacy@flirtyfluffers.com. We will process and respond to your request within 30 days.

7. Supervisory Authority and Complaints

If you believe our data processing practices violate your rights, you have the right to lodge a complaint with your local data protection authority or the lead supervisory authority in Hungary:

Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH)

Address: 1055 Budapest, Falk Miksa utca 9-11., Hungary

Postal Address: 1363 Budapest, Pf. 9.

Phone: +36 1 391 1400

Email: ugyfelszolgalat@naih.hu | Web: www.naih.hu