Privacy Policy

1. Who Is Responsible for Your Data?

The controller responsible for the processing described in this policy is:

For privacy questions or requests concerning your personal data, contact hello@oddtee.com.

2. Personal Data We Process

Depending on how you use our services, we process the following categories of information:

• Contact details: name, email address, telephone number, billing address, and delivery address.
• Order information: products, sizes, colours, quantities, prices, discounts, order status, delivery details, returns, and refunds.
• Payment information: transaction references, payment status, payment method, and limited payment details supplied by the payment provider.
• Account information: account identifiers, securely stored login credentials, saved addresses, and order history.
• Communications: enquiries, complaint details, correspondence, and attachments you send us.
• Marketing preferences: subscription status, consent records, unsubscribe requests, and preferences you provide.
• Review information: rating, review text, display name, submission date, and information used to check whether a purchase occurred.
• Technical information: IP address, browser and device information, access times, security logs, and information needed to operate the website.
• Consent information: cookie choices and records showing when and how consent was given or withdrawn.

Optional tracking may involve additional information only as described in the relevant notice and subject to any required consent.

Please do not include unnecessary sensitive information in reviews, messages, or attachments.

3. Where Your Data Comes From

We receive information directly from you when you use the website or communicate with us.

We also receive information from payment providers, production and fulfilment partners, and delivery services where necessary to process payments, fulfil orders, provide tracking, or resolve delivery issues.

Some technical information is collected automatically when your browser connects to the website.

If you provide another person’s delivery details, please ensure that you are entitled to do so and make this policy available to them.

4. Why We Process Your Data

Orders, payments, and delivery

We use the information necessary to accept and fulfil orders, process payments, arrange production and delivery, and communicate about your purchase.

Legal basis: performance of a contract or steps taken at your request before entering into a contract — Article 6(1)(b) GDPR.

Customer accounts

Where account functionality is available, we use account information to provide and maintain the account and its requested features.

Legal basis: performance of the account service agreement — Article 6(1)(b) GDPR.

Invoicing and statutory records

We process billing and transaction information to issue invoices and comply with accounting, tax, and other recordkeeping obligations.

Legal basis: compliance with legal obligations — Article 6(1)(c) GDPR.

Enquiries, returns, and complaints

We process communications to answer questions, handle returns, resolve complaints, and provide legally required remedies.

Legal basis: Article 6(1)(b) GDPR for contractual enquiries and requests; Article 6(1)(c) GDPR for statutory duties; or Article 6(1)(f) GDPR for other legitimate correspondence and the protection of legal claims.

Security and fraud prevention

We use relevant technical and transaction information to protect the website, investigate abuse, prevent fraud, and maintain reliable services.

Legal basis: legitimate interests — Article 6(1)(f) GDPR. These interests are protecting customers, preventing unauthorised use, and safeguarding our business.

Where accessing or storing information on your device requires consent, we obtain it separately.

Newsletters and promotional emails

We use subscription details to send marketing communications where you have consented.

Legal basis: consent — Article 6(1)(a) GDPR.

Voluntary product reviews

Where reviews are enabled, we process submissions to publish genuine feedback, check purchase information where applicable, and moderate unlawful or irrelevant content.

Legal basis: legitimate interests — Article 6(1)(f) GDPR. Our interests are helping customers assess products and maintaining trustworthy feedback.

5. Information Required for Purchases

Certain information is necessary to process your order, including your contact details, delivery address, and information required for payment and invoicing.

If you do not provide required information, we may be unable to complete your purchase or deliver the goods.

Optional fields are identified where applicable. Marketing consent is not required to purchase, and refusal of optional tracking must not prevent checkout.

6. Service Providers and Other Recipients

We share personal data only where necessary for the purposes described in this policy.

Hosting

We use Hostinger to host the website and store website data.

Store software

Our website uses WordPress and WooCommerce to manage products, accounts, orders, and related functions. Using this software does not itself mean that all store data is sent to its developers. External data sharing depends on the connected services and extensions used.

Payments

We use WooPayments, which operates with Stripe’s payment-processing infrastructure. Relevant identity, contact, transaction, device, and payment information is processed to complete payments, prevent fraud, and meet payment-provider obligations.

Our store does not store your full payment-card number or security code. We may receive limited details, such as a transaction reference, payment status, card brand, or last four digits.

Payment providers may act as independent controllers for some of their activities.

Further information: Automattic Privacy Policy and Stripe Privacy Policy.

Email marketing

We use Klaviyo for newsletter subscriptions and marketing communications. Depending on the configured integration, information processed may include contact details, subscription and consent records, customer information, and order events.

Production, fulfilment, and delivery

Production and fulfilment partners receive the details necessary to produce, package, and dispatch orders.

Couriers and postal services receive the information required for delivery, such as the recipient’s name, address, and relevant contact details.

These disclosures are limited to what is necessary for fulfilment, delivery, and related support.

Accounting and professional services

Where necessary, we share information with invoicing providers, accountants, legal advisers, and other professional service providers.

Public authorities

We disclose information to authorities or courts where required by law or necessary to establish, exercise, or defend legal claims.

Service providers acting on our behalf are subject to appropriate contractual requirements. Some recipients process information independently under their own legal obligations.

7. Newsletters and Marketing Preferences

You can unsubscribe from marketing emails at any time using the unsubscribe link or by contacting hello@oddtee.com.

Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

We may retain a limited suppression record to ensure that an unsubscribed address is not accidentally added back to marketing communications.

Necessary order, payment, delivery, and customer-service messages are separate from marketing subscriptions.

8. Cookies and Similar Technologies

The website uses technologies necessary for functions such as the cart, checkout, security, and account access.

Optional analytics or advertising technologies requiring consent must remain inactive until you consent. You must be able to refuse optional technologies and subsequently change your choice.

Our cookie information must identify the technologies actually used, including their providers, purposes, and storage periods.

Cookie notice and preference controls:

Browser settings can also be used to manage cookies. Blocking necessary cookies may affect some website functions.

9. Reviews and External Websites

If you submit a product review, the information identified as public in the review form may be displayed on the website. Your email address should not be displayed as part of the public review.

Do not include sensitive information or another person’s personal details in a review.

If you follow a link to an external website, that website processes information under its own privacy notice.

10. International Data Transfers

Some providers may process personal data outside the European Economic Area.

Where GDPR applies, transfers must be supported by an appropriate legal mechanism, such as:

• A European Commission adequacy decision, including an applicable framework where the recipient is covered; or
• Appropriate safeguards, such as the European Commission’s Standard Contractual Clauses, with additional measures where required.

Contact hello@oddtee.com to request information about the safeguards applicable to your data and how to obtain a copy.

11. How Long We Keep Information

Retention depends on the purpose and applicable legal requirements.

• Invoices and accounting records: generally at least eight years where required under Hungarian accounting law.
• Formal consumer complaint records and responses: three years where required by Hungarian consumer-protection rules.
• Order and legal-claim records: for the period needed to fulfil the contract and establish, exercise, or defend claims, taking account of applicable limitation periods and any ongoing dispute.
• Customer accounts: while the account is maintained, subject to deletion requests and any separate retention requirements for orders or invoices.
• Marketing subscriptions: until withdrawal of consent or earlier deletion under our retention policy.
• Consent and unsubscribe evidence: limited records retained as necessary to demonstrate compliance and respect your preferences.
• Public reviews: while publication remains justified, subject to applicable rights and moderation decisions.

Deleting an account does not require us to delete records that must be retained for legal obligations. Restricted archival records are not used for unrelated marketing.

12. Your Data Protection Rights

Depending on the circumstances, you may:

• Request access to your personal data and a copy;
• Request correction of inaccurate or incomplete information;
• Request erasure where the legal conditions are met;
• Request restriction of processing;
• Object to processing based on legitimate interests;
• Object at any time to processing for direct marketing, including related profiling;
• Request portability of qualifying data processed automatically on the basis of consent or contract;
• Withdraw consent at any time.

These rights are subject to their legal conditions. For example, a deletion request does not override a statutory accounting-retention obligation.

Send requests to hello@oddtee.com. We may request proportionate additional information where necessary to verify your identity.

We normally respond within one month. Where legally permitted, this may be extended by two further months because of the complexity or number of requests. We will inform you of an extension and its reasons within the first month.

Requests are normally free of charge, subject to the limited exceptions allowed by law.

13. Automated Decisions and Profiling

Payment providers may use their own fraud-prevention systems as described in their privacy notices. Contact us if you need help understanding a payment or order problem.

14. Data Security

We apply technical and organisational measures appropriate to the risks of the processing.

Access should be limited to authorised people and providers who need information for their work. Security arrangements must be reviewed as the website and connected services change.

No system can guarantee absolute security. If you suspect misuse of your account or personal data, contact hello@oddtee.com promptly.

15. Complaints

You may contact us about a privacy concern, but you do not have to contact us before exercising your right to complain to a supervisory authority.

You may lodge a complaint with the authority in the country of your habitual residence, place of work, or the alleged infringement.

You also retain the right to seek a judicial remedy.

16. Changes to This Policy

We may update this policy to reflect changes in our services, processing activities, or legal obligations.

The latest version will be published on this page with its update date. Where required, we will provide further notice or obtain consent before introducing new processing.

17. Contact

oddtee — HETZMANN Kft.
Email: hello@oddtee.com
Phone: +36 30 556 0270
Address: 2921 Komárom, Nefelejcs utca 11., Hungary