Adatvédelmi szabályzat
Effective from 1 August 2026
This notice has been prepared in accordance with Regulation (EU) 2016/679 (GDPR) and Hungarian Act CXII of 2011 on informational self-determination and freedom of information.
1. The controller
| Name | Varga Levente, sole trader (egyéni vállalkozó) |
| Registered address | [SZÉKHELY] |
| Registration number | [SZÁM] |
| Tax number | [ADÓSZÁM] |
| info@jigglepaws.com | |
| Phone | [TELEFON] |
| Website | jigglepaws.com |
We are not required to appoint a data protection officer, as our activity does not involve regular and systematic monitoring of data subjects on a large scale, and we do not process special categories of data on a large scale.
2. What data we process, why, and on what legal basis
2.1. Fulfilling your order
Data: name, email address, phone number, shipping address, billing address, order details.
Purpose: processing and fulfilling your order, delivery, keeping in touch.
Legal basis: Article 6(1)(b) GDPR — performance of a contract.
Retention: 5 years from performance of the contract.
2.2. Invoicing
Data: name, billing address, tax number (if any), purchase details.
Purpose: meeting statutory invoicing and record-keeping obligations.
Legal basis: Article 6(1)(c) GDPR — legal obligation.
Retention: 8 years (Section 169 of Act C of 2000 on Accounting).
2.3. Newsletter
Data: name, email address, date of subscription.
Purpose: marketing communication, sending our newsletter.
Legal basis: Article 6(1)(a) GDPR — consent.
Retention: until consent is withdrawn.
Consent can be withdrawn at any time, free of charge, via the unsubscribe link at the bottom of any newsletter or by writing to info@jigglepaws.com. Withdrawal does not affect the lawfulness of processing before it.
2.4. Complaint handling
Data: name, contact details, content of the complaint, order details.
Purpose: investigating and answering the complaint.
Legal basis: Article 6(1)(c) GDPR — legal obligation.
Retention: 3 years.
2.5. Cookies and analytics
Set out in detail in our separate Cookie Policy. Strictly necessary cookies rely on legitimate interest and the applicable electronic communications rules; all other cookies (analytics, marketing) are placed only with your prior consent.
3. Who has access to your data? (processors)
We do not sell your data and do not pass it to third parties for marketing purposes. We use the following processors:
Store platform and hosting
Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland
Data processed: all data entered in the online store
Privacy policy: shopify.com/legal/privacy
Payment provider
Shopify Payments — Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland
Data processed: data required for payment
We never see or store your card details; these are handled directly by the payment provider on its own secure platform.
Delivery
[FUTÁRSZOLGÁLAT NEVE ÉS CÍME]
Data processed: name, shipping address, phone number, email address
Product sourcing and order forwarding
[BESZÁLLÍTÓ NEVE, CÍME, ORSZÁGA]
Data processed: name, shipping address, phone number, order contents
4. Transfers to third countries
Some of our providers may process data outside the European Economic Area. In such cases the transfer is based on an adequacy decision of the European Commission or, failing that, on the Commission's standard contractual clauses (SCCs) or another appropriate safeguard under Chapter V of the GDPR.
5. Your rights
Access (Article 15) — you may ask whether we process data about you and, if so, what data, for what purpose, for how long and to whom we disclose it.
Rectification (Article 16) — you may ask us to correct inaccurate data and complete incomplete data.
Erasure (Article 17) — you may ask us to delete your data where the purpose has ceased, you have withdrawn consent, or the processing is unlawful. This right does not apply to data we are legally required to retain (for example, invoicing data for 8 years).
Restriction (Article 18) — you may ask us to restrict processing, for instance while you contest the accuracy of the data.
Data portability (Article 20) — you may ask to receive data processed on the basis of a contract or consent in a structured, commonly used, machine-readable format.
Objection (Article 21) — you may object to processing based on legitimate interest. In the case of direct marketing we always give effect to the objection.
Withdrawal of consent (Article 7) — at any time, without giving reasons, where processing is based on consent.
How to exercise these rights
Write to info@jigglepaws.com or by post to [LEVELEZÉSI CÍM].
We fulfil your request within one month at the latest. This period may be extended by a further two months where the request is complex, in which case we inform you within one month of receipt. Handling requests is free of charge. Where there is doubt, we are entitled to verify your identity.
6. Remedies
Complaint to the supervisory authority
Hungarian National Authority for Data Protection and Freedom of Information (NAIH)
1055 Budapest, Falk Miksa utca 9-11. · Postal address: 1363 Budapest, Pf.: 9.
Phone: +36 (1) 391-1400 · Email: ugyfelszolgalat@naih.hu · naih.hu
Judicial remedy
Proceedings fall within the competence of the regional court (törvényszék). You may also bring the action before the court of your place of residence or stay.
7. Data security
We protect your data with appropriate technical and organisational measures against unauthorised access, alteration, disclosure, deletion or destruction, and against accidental destruction or damage. The website runs on SSL/TLS encryption.
In the event of a personal data breach we notify NAIH without undue delay and no later than 72 hours, and — where the breach is likely to result in a high risk to your rights — we inform you as well.
8. Automated decision-making
We do not carry out automated decision-making or profiling that produces legal effects concerning you or similarly significantly affects you.
9. Minors
The services of this website are available to persons aged 16 and over. We do not knowingly collect data from anyone younger. If we become aware of such data, we delete it without delay.
10. Changes to this notice
We reserve the right to amend this notice. Amendments take effect upon publication on the website.
Last updated: 1 August 2026