Privacy policy

Effective from 23 September 2026

This policy explains how we handle your personal data when you visit raveshop.com, buy from us or contact us. It is issued under the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR").

1. Controller

The controller of your personal data is:

RAVESHOP EUROPE s.r.o.
Rybná 716/24, Staré Město, 110 00 Praha 1, Czech Republic
Company ID (IČO): 06998011
Email: info@raveshop.com
Phone: +420 605 425 960

2. What data we process

• Identity and contact data: name, email address, phone number, billing and delivery address.
• Order data: what you bought, prices, delivery method, order history, returns and complaints.
• Payment data: payment method, transaction details and payment confirmation. Card details are handled by our payment providers. We never see or store your full card number.
• Account data: login details and preferences, if you create a customer account.
• Communication: what you write to us by email or through our forms.
• Device and usage data: IP address, browser, device type and how you use the website, collected through cookies and similar technologies as described in section 7.

We get this data from you directly, from your use of the website, and from the service providers listed in section 5 when they act for us.

3. Why we process it and on what legal basis

• To take and deliver your order, handle payment, withdrawals, returns and complaints, and run your customer account. Legal basis: performance of the contract, Article 6(1)(b) GDPR. We need this data to conclude and perform the contract. Without it we cannot accept your order.
• To keep accounting and tax records and meet other legal duties. Legal basis: legal obligation, Article 6(1)(c) GDPR.
• To send customers news about similar products by email after a purchase. Legal basis: our legitimate interest in direct marketing, Article 6(1)(f) GDPR. You can opt out at any time with one click in every email or by writing to us.
• To send our newsletter if you sign up without buying. Legal basis: your consent, Article 6(1)(a) GDPR. You can withdraw consent at any time.
• To keep the store secure, prevent fraud and misuse, and defend legal claims. Legal basis: our legitimate interest, Article 6(1)(f) GDPR.
• To measure how the store is used and to show you relevant ads on other platforms. Legal basis: your consent given through the cookie banner, Article 6(1)(a) GDPR.

We do not make decisions about you based solely on automated processing that have legal or similarly significant effects on you.

4. How long we keep it

• Order and contract data: for as long as needed to perform the contract and handle claims, and then for the periods required by accounting and tax law. We keep it no longer than 15 years after the contract ends.
• Your email address for news about similar products: 3 years after your last purchase, unless you opt out earlier.
• Newsletter data based on consent: until you withdraw your consent.
• Customer account: until you ask us to delete it, or until we close an account that has not been used for a long time.
• Cookies: for the period shown in the cookie banner, or until you delete them or withdraw consent.

When the retention period ends, we delete the data.

5. Who receives your data

We share personal data only with those who need it to provide our services, and only to the extent they need:

• Shopify, which hosts our online store and checkout.
• Payment providers, which process your payment.
• Our fulfilment warehouse, Fulfillment CZ s.r.o., which packs and ships orders and receives returns.
• Couriers, which deliver your parcel.
• Email and marketing service providers, which send our emails.
• Meta (Facebook and Instagram) and Google, for advertising and measurement, but only if you allow marketing cookies.
• Public authorities, where the law requires it.

6. Transfers outside the EU

Some of our providers, such as Shopify, Meta and Google, may process data outside the European Economic Area, for example in Canada or the United States. Such transfers take place only to countries the European Commission has found to provide adequate protection, or on the basis of the Commission's standard contractual clauses or another safeguard permitted by the GDPR.

7. Cookies

We use cookies that are necessary for the store to work, such as the shopping bag and checkout. We use analytics and marketing cookies only with your consent, which you give or refuse in the cookie banner. You can change your choice at any time.

8. Shopify

Our store runs on Shopify. Shopify processes personal data about your use of the store to provide and improve its services. For some features that use data from interactions with several merchants, Shopify acts as a separate controller. More information is in the Shopify Consumer Privacy Policy, and you can exercise your rights towards Shopify in the Shopify Privacy Portal.

9. Your rights

Under the GDPR you have the right to:

• access your personal data (Article 15);
• have inaccurate data corrected (Article 16);
• have your data erased (Article 17);
• restrict processing (Article 18);
• data portability (Article 20);
• object to processing based on our legitimate interest, and object to direct marketing at any time (Article 21);
• withdraw your consent at any time, without affecting processing done before the withdrawal.

To exercise your rights, write to info@raveshop.com. We may ask you to confirm your identity. We reply within one month.

You also have the right to lodge a complaint with a supervisory authority. In the Czech Republic this is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), uoou.gov.cz. You can also turn to the authority in the EU country where you live. The list is on the European Data Protection Board website.

10. Security

We have taken appropriate technical and organisational measures to protect your personal data. Only people we have authorised have access to it.

11. Children

The store is not intended for children, and we do not knowingly collect personal data from children under 16. If you believe a child has given us personal data, write to us and we will delete it.

12. Changes

We may update this policy. The current version is always published on this page with its effective date.