Welcome to Buda-Pest. We respect your privacy and are committed to protecting the personal data you share with us. This Privacy Policy explains how we collect, use, disclose and safeguard your information when you visit our website or place an order.
1. Information We Collect
1.1 Information You Provide Directly
- Account & Registration: Name, email address, password, phone number.
- Orders & Purchases: Billing/shipping address, payment information (processed securely via Stripe — we never store raw card data).
- Communications: Messages you send us through the contact form or email.
- Newsletter: Email address when you subscribe.
1.2 Information Collected Automatically
- Log Data: IP address, browser type, pages visited, time spent, referring URLs.
- Cookies & Tracking: Session cookies, preference cookies, analytics cookies (see Cookie Policy).
- Device Information: Device type, operating system, screen resolution.
1.3 Information from Third Parties
- Social Login: If you sign in via Google or Facebook, we receive your name, email, profile photo and unique social ID from those providers.
- Payment Processors: Stripe provides us with transaction status confirmations.
2. How We Use Your Information
- Process and fulfil your orders, send order confirmations and shipping updates.
- Create and manage your customer account.
- Send promotional emails and newsletters (only if you have opted in).
- Respond to enquiries and customer support requests.
- Improve our website, products and services through analytics.
- Detect and prevent fraud, abuse and security incidents.
- Comply with legal obligations.
3. Sharing Your Information
We do not sell or rent your personal data. We may share it only with:
- Service Providers: Stripe (payments), email service providers, hosting providers — all bound by confidentiality agreements.
- Legal Requirements: When required by law, court order or governmental authority.
- Business Transfers: In the event of a merger, acquisition or sale of assets, your data may be transferred as part of that transaction.
4. Data Retention
We retain your personal data for as long as your account is active or as needed to provide services. Order records are kept for 7 years to comply with financial regulations. You may request deletion of your account and associated data at any time (subject to legal retention requirements).
5. Your Rights
Depending on your location you may have the following rights:
- Access: Request a copy of the personal data we hold about you.
- Rectification: Ask us to correct inaccurate data.
- Erasure: Request deletion of your personal data.
- Portability: Receive your data in a structured, machine-readable format.
- Objection: Object to processing based on legitimate interests or direct marketing.
- Restriction: Request that we restrict processing under certain circumstances.
To exercise any of these rights, contact us at privacy{{ str_replace(['http://', 'https://'], '', config('app.url')) }}.
6. Security
We implement industry-standard security measures including SSL/TLS encryption, hashed passwords, and role-based access controls. However, no transmission over the internet is 100% secure, and we cannot guarantee absolute security.
7. Children's Privacy
Our services are not directed to children under 13. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will delete it promptly.
8. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their policies.
9. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will be revised accordingly. Continued use of our services after changes constitutes acceptance of the updated policy.
10. Contact Us
If you have questions or concerns about this Privacy Policy, please contact us: