Privacy policy

Mistique Collective Kft.

Last updated: November 2025
Data Controller: Mistique Collective Kft.
Company registration number: 01-09-442397
Tax number: 32783199-1-41
Registered office: 1023 Budapest, Lajos utca 11–15., Hungary
Email: kata@mistiquecollective.com

1. Introduction

This Privacy Policy describes how we collect, use, store, and protect your personal information when you visit, browse, or make a purchase on our website (the “Services”). Mistique Collective Kft. is the data controller under the EU General Data Protection Regulation (GDPR).

By using our Services, you acknowledge that you have read this Privacy Policy and understood how your personal data is processed.

2. Personal Data We Collect

We only collect data that is necessary for the functioning of our online store, fulfilling your order, or providing marketing communications you opted into.

a) Data you provide directly

  • Name

  • Shipping and billing address

  • Email address

  • Phone number

  • Order details (products purchased, order number, delivery info)

  • Inquiry messages sent to our support email

  • Newsletter subscription email (only if you actively subscribe)

b) Payment information

We do not store or access your card or bank details. Payments are processed securely by Shopify Payments (Stripe), which is fully PCI-DSS compliant.

c) Automatically collected data

When browsing our website, we may automatically collect:

  • IP address

  • Browser type

  • Device type

  • Pages viewed

  • Time spent on site

  • General location (city-level, anonymised)

  • Cookies (see Section 10)

d) Cookies, analytics and ad tracking

We may use:

  • Google Analytics

  • Google Ads remarketing

  • Meta (Facebook/Instagram) Pixel

  • TikTok Pixel

These tools may track:

  • Pages visited

  • Items added to cart

  • Purchase value

  • Click behaviour

If a tool is not yet active, it does not collect any data.

3. Purposes and Legal Basis for Processing

Under GDPR, processing must rely on a valid legal basis. Mistique Collective processes your data under the following:

a) To fulfil your order

  • Processing payments

  • Delivering your package (Foxpost)

  • Sending order confirmation emails
    Legal basis: Art. 6(1)(b) – contract performance

b) Legal obligations

  • Issuing invoices via Számlázz.hu

  • Keeping accounting records
    Legal basis: Art. 6(1)(c) – legal obligation

c) Customer service

Responding to emails and requests.
Legal basis: Art. 6(1)(b)/(f)

d) Marketing communications and newsletters

Only if you opt in voluntarily.
Legal basis: Art. 6(1)(a) – consent

e) Advertising and analytics (retargeting)

Improving website performance and showing you relevant ads (Google Ads / Meta / TikTok).
Legal basis: Art. 6(1)(a) consent
(Consent is collected through cookie banners before any tracking runs.)

f) Security & fraud prevention

Securing payments, monitoring suspicious activities.
Legal basis: Art. 6(1)(f) – legitimate interest

4. Who We Share Your Data With

We only share personal data with trusted service providers that make our business function:

a) Shopify (store hosting)

Processes browsing data, transaction data, device data.

b) Shopify Payments (Stripe)

Processes payment information.

c) Számlázz.hu (billing provider)

Processes invoicing data according to Hungarian accounting laws.

d) Foxpost (delivery provider)

Receives your name, phone number, and shipping address (parcel locker only).

e) Email & communication services

  • Shopify Email

  • Google Workspace (email hosting)

f) Advertising platforms as anonymous users

  • Google (Analytics, Ads)

  • Meta (Instagram/Facebook)

  • TikTok Ads

We do not sell or rent your personal data.

5. International Transfers

Shopify, Google, Meta, TikTok and Stripe may transfer data outside the EU (primarily to the USA).

These transfers rely on:

  • EU Standard Contractual Clauses (SCCs)

  • Additional security measures as required by GDPR

6. Data Retention

We keep information only as long as necessary:

  • Order data: 5 years (civil law requirement)

  • Invoice data: 8 years (Hungarian accounting law)

  • Newsletter database: until you unsubscribe

  • Customer service messages: 2 years

  • Analytics data: based on tool-specific retention (Google Analytics default 14 months)

7. Your Data Protection Rights (EU/GDPR)

You have the right to:

  • Access your data

  • Request correction

  • Request deletion (“right to be forgotten”)

  • Withdraw consent at any time

  • Object to marketing

  • Restrict processing

  • Receive your data in a portable format

  • Lodge a complaint with the Hungarian Data Protection Authority (NAIH)

To request any of these:
📩 kata@mistiquecollective.com

8. Children

Our Services are not intended for individuals under 16 years of age, and we do not knowingly collect their data.

9. Automated Decision-Making

We do not engage in automated decision-making that has legal or significant effects on you.
(If retargeting ads will be used, they will only operate with cookie consent.)

10. Cookies

We use cookies to:

  • Operate the website

  • Enable cart and checkout

  • Improve performance

  • Run analytics and advertising (once enabled)

A detailed cookie list appears in Shopify’s cookie banner.

You may disable non-essential cookies anytime via your browser or cookie settings panel.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be published with an updated "Last Updated" date.

12. Contact

Mistique Collective Kft.
1023 Budapest, Lajos utca 11–15., Hungary
📩 kata@mistiquecollective.com