Legal

Privacy notice

Controller: Flowfinds Solutions Kft. This notice covers this website and orders placed on it, under the GDPR and UK GDPR. If you are in the United States, the section United States — California residents below sets out the rights that apply to you.

What we collect

We ask for your consent before the Meta pixel loads. Your choice is stored in your browser as ff_consent (localStorage) and nothing else about it leaves your device; clearing site data resets it and you will be asked again. Declining stops the pixel entirely — the other items above are first-party and necessary to run the shop and its ads test.

Why we process it

Who processes it for us

Retention

Order records are kept as long as tax and warranty obligations require, then deleted. Server logs are retained briefly by the hosting provider per its standard schedule.

Your rights

You can request access, correction, deletion, restriction, portability, and object to legitimate-interest processing. You can also complain to your local data protection authority.

United States — California residents (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act as amended by the CPRA gives you specific rights. This section is your notice at collection.

Categories of personal information we collect, in the Act's own terms: identifiers (name, email, delivery address, IP address, the ff_vid / ff_sid / ff_ab identifiers described above, and Meta's _fbp / _fbc cookies if you accepted the pixel); commercial information (what you ordered, the amount, the payment outcome); and internet or other electronic network activity (pages viewed, scroll depth, links clicked). We collect them from you directly and from your use of this site. We use them for the purposes listed under Why we process it above, and we keep them for the periods listed under Retention.

Sensitive personal information. We do not collect it. We never receive your card number or security code.

We do not sell your personal information for money. However, the CCPA defines "sell" and "share" broadly, and if you accept the Meta pixel, that is treated as sharing personal information for cross-context behavioural advertising under the Act. We are telling you this plainly rather than hiding behind the fact that no money changes hands. If you do not accept the pixel it is never loaded and nothing is shared. We do not knowingly sell or share the personal information of anyone under 16.

Your rights. You may request to know what we have collected about you, request a copy of it, request deletion, request correction, and opt out of the sharing described above. You may also limit the use of sensitive personal information, though we hold none. We will not discriminate against you for exercising any of these rights — same prices, same products, same service.

How to opt out of sharing. Decline on the consent banner, or, if you already accepted, clear this site's data in your browser: that resets your choice and the pixel is not loaded again unless you accept. We also honour the Global Privacy Control signal where your browser sends one. You do not need an account to opt out.

How to exercise your rights. Use the Contact page. We will verify your request by matching the details you give us against what we hold — usually your order reference and the email address used for the order — and we will respond within 45 days, extendable once by a further 45 days where the request is complex. An authorised agent may act for you if you give them written permission and we can verify it. We do not charge for this.

Other US states. If you live in a state with a comparable privacy law, we extend the same rights and the same process to you rather than operating a different standard per state.

Contact

Access, deletion and other data requests go through the Contact page. Include your order reference if the request concerns an order.