Privacy policy

1. INTRODUCTORY PROVISIONS

1.1. These are the Privacy Policy of Chavdarov Advisory s.r.o., a company established in the Czech Republic, with its registered office at Šaldova 219/1, Karlín, 186 00 Prague 8, Czech Republic, ID No.: 089 22 594, registered in the Commercial Register maintained by the Municipal Court in Prague, file no.: C 327593 (hereinafter also referred to as "Chavdarov Advisory s.r.o." or "we," "us," or "our"). In this Privacy Policy, we refer to all our products, services, websites, and applications collectively as "cottonbundle Services."

1.2. We respect the need for privacy and the protection of personal information, including personal data. For the purposes of this Privacy Policy, personal data means all information relating to an identified or identifiable natural person, where an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.

1.3. We always process personal data in accordance with this Privacy Policy and applicable legal regulations, such as Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC ("GDPR").

1.4. Please read this Privacy Policy carefully to understand how we collect, process, and protect personal data when you use cottonbundle Services, and what your rights are in this regard. By using cottonbundle Services and/or providing us with any personal data, you agree to be bound by this Privacy Policy and guarantee that all personal data you provide to us is accurate and that you are authorized to provide such personal data.

1.5. For the purposes of this Privacy Policy, and unless the context requires otherwise, we are considered the controller of personal data.

2. CATEGORIES OF PERSONAL DATA

2.1. We collect, process, and protect in particular the following categories of personal data:

a) Personal Data:

  • Identification details (e.g., name, surname, gender, username);
  • Contact details (e.g., email address, phone number);
  • Delivery data (e.g., delivery address);
  • Order details (e.g., purchased products);
  • Payment information;
  • IP address;
  • Other personal data that you share with us.

When using cottonbundle Services, we may ask you to provide the above personal data, which may be used to contact or identify you. We may also use personal data to contact you via newsletters, marketing or promotional materials, or to provide other information that might interest you. You can refuse to receive any or all such communications by using the unsubscribe link or by contacting us at info@cottonbundle.com.

b) Tracking Data and Cookies:

  • We use cookies and similar tracking technologies to monitor activities related to cottonbundle Services. For more information, see Section 6.

3. PURPOSES OF PROCESSING PERSONAL DATA

3.1. We process personal data for the following purposes:

a) Fulfilling and complying with our contractual and legal obligations, such as providing cottonbundle Services agreed upon between you and us;

b) Marketing activities related to cottonbundle Services;

c) Providing access to cottonbundle Services;

d) Monitoring the use of cottonbundle Services;

e) Detecting, preventing, and addressing technical issues;

f) Improving cottonbundle Services;

g) Conducting market research;

h) Protecting our legitimate interests.

4. RETENTION AND TRANSFER OF PERSONAL DATA

4.1. Personal data will be retained and processed only for as long as necessary for the purposes specified in this Privacy Policy and only to the extent necessary to fulfill our legal obligations, resolve disputes, exercise our rights, and protect our interests. Personal data will be processed, in particular, for the following periods:

a) Personal data under Article 3.1 (a) will be processed for the duration of our contractual and legal obligations;

b) Personal data under Article 3.1 (b) will be processed until you refuse the use of personal data for marketing activities (e.g., opt out of receiving newsletters or other marketing communications);

c) Personal data under Articles 3.1 (c), (d), and (e) will be processed as long as you use cottonbundle Services;

d) Personal data under Articles 3.1 (f) and (g) will be processed for the duration of our legitimate interest or until you object to such processing;

e) Personal data under Article 3.1 (h) will be processed for the duration of our legitimate interest.

4.2. Please note that we may retain usage data for internal analysis purposes. Usage data is generally retained for a shorter period unless it is used to enhance security, improve functionality, or fulfill legal obligations.

4.3. Personal data may be transferred to (and stored on) computers located outside your state, province, country, or other governmental jurisdiction where data protection laws may differ from those in your jurisdiction. All data is stored to meet our legal obligations under Article 6 GDPR for the purposes of the data controller’s legitimate interests and to fulfill contracts for all our customers, regardless of location. By agreeing to this Privacy Policy and submitting your personal data, you consent to such transfer.

4.4. We will take all reasonably necessary steps to ensure that your data is treated securely and in accordance with this Privacy Policy, and no transfer of personal data will take place to an organization or country unless adequate controls are in place to protect personal data.

5. DISCLOSURE OF PERSONAL DATA

5.1. Personal data may be disclosed to third parties primarily in connection with:

a) Business Transactions:

  • Personal data may be disclosed to any third party acquiring our business, assets, or shares or with whom we merge or undergo restructuring. We will inform such third parties of the need to process personal data in accordance with this Privacy Policy.

b) Disclosure for Law Enforcement Purposes:

  • Under certain circumstances, we may be required by law or in response to public authority requests (e.g., court or government agency) to disclose personal data.

c) Legal Requirements:

  • Personal data may be disclosed if we believe in good faith that such disclosure is necessary to: (i) comply with a legal obligation; (ii) protect and/or defend our rights or property; (iii) prevent or investigate potential unlawful conduct in connection with cottonbundle Services; (iv) protect the safety of users of cottonbundle Services or the public; (v) protect against legal liability.

5.2. By clicking the ["I agree"] button during registration as a user of the cottonbundle Services or by simply using the cottonbundle Services, you consent to our sharing of personal data with third parties, which include:

a) Our affiliated partners; 

b) Providers of logistics and delivery services: Direct Parcel Distribution CZ, s. r. o. (DPD), General Logistics Systems Czech Republic s.r.o. (GLS), GEBRÜDER WEISS spol. s r.o. (Gebrüder Weiss), Zásilkovna s.r.o.; 

c) Providers of customer support services: Gorgias Inc.; 

d) Providers of email marketing and review collection: Klaviyo, Inc.; 

e) Providers of invoicing services: Fakturoid s.r.o.; 

f) Providers of payment services: Shopify Payments; 

g) Providers of online marketing and advertising services: Google LLC (Google Ads, Google Analytics), Meta Platforms, Inc. (Facebook, Instagram), Seznam.cz, a.s., Microsoft Corporation (Microsoft Ads); 

h) Providers of affiliate marketing programs: eHUB s.r.o.; 

i) Providers of price comparison and CSS (Comparison Shopping Services) services, including satisfaction surveys: BIANO s.r.o., FAVI a.s., Heureka Group a.s.


5.3. E-commerce Platform Provider: Shopify. This store is hosted by Shopify. Shopify collects and processes your personal data when you visit and make purchases on our store, including to provide services based on your interactions with other merchants and with Shopify.

Shopify processes your data to provide Enhanced Services that enable us to: (i) provide you with a more customized experience, (ii) serve you more relevant ads, and (iii) understand how you interact with our store and our ads.

Information about your activity on our store will be shared with Shopify and other third parties that may be located in other countries, in order to provide services to you, including Enhanced Services that incorporate data from your interactions with other merchants and with Shopify.


6. TRACKING, COOKIES, AND IP ADDRESSES

6.1. Cookies are small files containing data, which may include an anonymous unique identifier. Cookies are sent to your browser from a website and stored on your device. Tracking technologies such as beacons, tags, and scripts are also used to collect and track information and to improve and analyze cottonbundle Services. Cookies allow us to recognize whether you are returning to our website from the same device, record some of your stored parameters, and verify whether you belong to a particular user category targeted by certain communications. We may use the following types of cookies:

a) Session cookies to operate cottonbundle Services;

b) Preference cookies to remember your preferences and various settings; or

c) Security cookies for security purposes.

6.2. You can instruct your browser to refuse cookies, except for technical cookies or similar files, or to notify you when a cookie is being sent.

6.3. When you first visit our website, we will ask for your consent to the use of cookies.

6.4. With your consent, we may also use Google Analytics and similar services that collect third-party cookies. Google Analytics is a web analytics service provided by Google that tracks and reports website traffic. Additionally, we use Google Tag Manager, a tag management system created by Google to manage JavaScript and HTML tags used for tracking and analytics on websites. Information about your use of cottonbundle Services (including your IP address) generated by cookies will be transmitted to and stored by Google on servers in the United States and other countries. Google uses this information to evaluate your use of cottonbundle Services, compile reports on activity for cottonbundle Services operators, and provide other services relating to website activity and internet usage. Google may also transfer this information to third parties where required by law or where such third parties process the information on Google's behalf. By using our cottonbundle Services, you consent to the processing of your data by Google in the manner and for the purposes set out above and further detailed in Google’s Privacy Policy, available at: https://policies.google.com/privacy.

6.5. Cottonbundle Services and communications generated during the use of cottonbundle Services, such as promotional emails, may also contain electronic images known as "web beacons." Web beacons typically work in conjunction with cookies, and we may use them in the same way as we use cookies (see above).

7. DIRECT MARKETING

7.1. By clicking ["Agree"] during registration as a user of cottonbundle Services or by simply using cottonbundle Services, or by clicking ["Agree"] when subscribing to our newsletters or other marketing communications, surveys, etc., you consent to our use of your electronic contact details, which may originate from your current or past use of cottonbundle Services, or to allow selected third parties to use these details, to contact you electronically (e.g., via email) with marketing information about cottonbundle Services.

7.2. You can opt out of marketing communications by deactivating this feature using the unsubscribe link provided in every email or other communication you receive, or by sending an email request to info@cottonbundle.com, stating that you wish to unsubscribe from marketing communications.

8. SECURITY

8.1. We are committed to securely storing all personal data. Therefore, we have implemented appropriate physical, technical, and organizational measures and plans to protect and secure personal data (which does not exempt you from taking appropriate steps to secure your data, especially during transmission). Our goal is to eliminate any unauthorized or unlawful processing of personal data, as well as any accidental, unauthorized, or unlawful access to, use, transmission, processing, copying, transfer, alteration, loss, or destruction of personal data.

8.2. If we have provided (or you have chosen) a password that allows you to access certain parts of cottonbundle Services, you are responsible for ensuring that this password is strong and kept confidential. We ask you not to share your password with unauthorized persons.

8.3. Unfortunately, the transmission of information over the internet is not entirely secure. While we will do our best to protect personal data, we cannot guarantee the security of data transmitted to us. Any such transmission is at your own risk. Once we have received personal data, we will implement strict procedures and security measures to protect it and prevent unauthorized access.

8.4. To maintain the highest standards of personal data protection, all information you provide is stored on secure servers behind firewalls. We restrict access to personal data to employees, contractors, and agents who need such data to operate, develop, or improve cottonbundle Services.

8.5. Certain parts of cottonbundle Services that collect personal data also use SSL (Secure Sockets Layer) encryption or other types of encryption. All customer data is backed up in a data center located in the European Union, enabling rapid recovery in the event of a disaster or similar event. Whenever possible, we ensure pseudonymization or anonymization of all personal or related data (except for names and email addresses).

9. YOUR RIGHTS

9.1. In accordance with the rules and conditions established by GDPR, you have or may have the following rights concerning your personal data:

a) Right to Access: You can request confirmation as to whether personal data concerning you is being processed, and if so, obtain additional information about such processing.

b) Right to Erasure ("Right to be Forgotten"): You have the right to request that we delete personal data concerning you without undue delay, and we are obliged to delete such data without undue delay if all relevant conditions under GDPR are met. Please note that the deletion of your personal data may result in our inability to provide our services.

c) Right to Rectification: You have the right to request the correction of inaccurate or incomplete personal data concerning you without undue delay.

d) Right to Object: For reasons related to your specific situation, you may object at any time to the processing of personal data.

e) Right to Restrict Processing: You can request that we restrict the processing of your personal data.

f) Right to Data Portability: You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format, and you have the right to transfer this data to another controller without hindrance.

g) Right to Withdraw Consent: If processing is based on consent, you may withdraw your consent at any time. Such withdrawal does not affect the lawfulness of processing based on your consent before its withdrawal.

9.2. If you believe your personal data has been processed unlawfully, contact us at info@cottonbundle.com, and we will resolve the issue. You also have the right to file a complaint with the appropriate supervisory authority. A list of competent authorities in the European Union is available at: https://digital-strategy.ec.europa.eu/en/library/list-personal-data-protection-competent-authorities. In the Czech Republic, the relevant supervisory authority is the Office for Personal Data Protection. For more information, visit https://www.uoou.cz/en/.

9.3. Please note that we respond to all queries within 30 days. Any requested changes may take up to five (5) business days after verifying your identity and the legitimacy of the request.

10. SURVEYS AND TESTIMONIALS

10.1. From time to time, we may request information through surveys. Participation in these surveys is voluntary, and you can choose whether to participate and share the requested information. The requested information may include contact details (such as name and email address) and organizational information (organization name, job position). Contact details will be used to share results if participants choose to receive them. Survey information will be used for research, monitoring, or improving user experiences and satisfaction with cottonbundle Services.

10.2. From time to time, we may also publish various texts on our website, such as testimonials, quotes, case studies, white papers, etc., which may contain personal data. We must obtain your consent to publish your name along with such text. If you wish to update or remove any text containing your personal data, contact us at info@cottonbundle.com.

11. FINAL PROVISIONS

11.1. Cottonbundle Services may, from time to time, contain links to websites of our partner networks, advertisers, and affiliates. If you click on a link to any of these websites, please note that these websites have their own privacy policies, and we are not responsible for these policies. Before submitting any personal data to these websites, please review their privacy policies.

11.2. Cottonbundle Services are not intended for persons under 15 years of age. To the best of our knowledge, we do not collect personal data from persons under 15 years old. If you are a parent or guardian and are aware that your child has provided us with personal data, please contact us. If we discover that we have collected personal data from children without parental consent, we will take steps to remove such data from our servers.

11.3. We reserve the right to change, amend, supplement, or otherwise modify this Privacy Policy at any time and for any reason. Any new version of this Privacy Policy will replace the previous version as of the effective date of the new version.

11.4. If you have any questions regarding this Privacy Policy or our personal data protection practices, please contact us here or via email at info@cottonbundle.com.


This Privacy Policy is effective from 12.062025.



You can review our previous Privacy Policy here.