Privacy policy

PRIVACY POLICY

Last updated: February 12, 2026

1. Introduction

Convoy Vibe is operated by Ezüsthajó Kft., a company registered in Hungary, with its registered office at:

7634 Pécs, Szentlőrinci út 15., Hungary

For the purposes of Regulation (EU) 2016/679 (General Data Protection Regulation – “GDPR”) and other applicable data protection laws, Ezüsthajó Kft. is the data controller of your personal data.

This Privacy Policy describes how we collect, use, disclose, and protect your personal data when you visit, use, or make a purchase through our online store and related services (the “Services”).

If there is a conflict between this Privacy Policy and our Terms and Conditions, this Privacy Policy governs with respect to the processing of personal data.

2. Personal Data We Collect

We may collect and process the following categories of personal data:

2.1 Information You Provide Directly

Name
Billing address
Shipping address
Email address
Phone number
Account login details (if account is created)
Payment-related information (processed via secure payment providers)
Order details
Communications with us (e.g., customer support requests)

2.2 Information Collected Automatically

When you visit our website, we may automatically collect:

IP address
Browser type and version
Device information
Operating system
Referrer URL
Pages visited and time spent
Interaction data

This information is collected through cookies and similar technologies (see our Cookie Policy).

2.3 Information from Third Parties

We may receive personal data from:

Payment service providers
Shipping and logistics providers
Shopify (our hosting platform)
Marketing and analytics partners

3. Legal Basis for Processing (GDPR)

Where GDPR applies, we process your personal data on the following legal bases:

Performance of a contract (Art. 6(1)(b) GDPR) – to process orders, payments, shipping and returns
Legal obligation (Art. 6(1)(c) GDPR) – accounting, tax and regulatory compliance
Legitimate interests (Art. 6(1)(f) GDPR) – fraud prevention, IT security, business operations
Consent (Art. 6(1)(a) GDPR) – for marketing communications and certain cookies

Where processing is based on consent, you may withdraw consent at any time.

4. How We Use Your Personal Data

We use personal data to:

Process and fulfill orders
Provide customer support
Manage returns and refunds
Process payments
Deliver products
Maintain your account
Send transactional emails (order confirmations, shipping updates)
Prevent fraud and ensure security
Improve our Services
Send marketing communications (where consent has been given)

5. Sharing of Personal Data

We may share your personal data with:

5.1 Service Providers

Shopify (hosting platform)
Payment processors
Shipping providers
IT service providers
Marketing and analytics providers

These providers process personal data on our behalf under data processing agreements.

5.2 Legal Obligations

We may disclose personal data where required by law, court order, or governmental authority.

5.3 Business Transfers

In the event of merger, acquisition, or restructuring, personal data may be transferred in accordance with applicable law.

We do not sell your personal data.

6. Shopify

Our online store is hosted by Shopify Inc.

Shopify processes personal data as a data processor on our behalf and may also process certain data as an independent controller in accordance with its own Privacy Policy:

https://www.shopify.com/legal/privacy

Shopify may transfer personal data internationally in accordance with GDPR-compliant safeguards.

7. International Transfers

Your personal data may be transferred outside the European Economic Area (EEA).

Where such transfers occur, we ensure appropriate safeguards are in place, including:

European Commission Standard Contractual Clauses; or
Transfers to countries with an adequacy decision.

8. Data Retention

We retain personal data only as long as necessary for:

Contract performance
Legal compliance (e.g., tax and accounting obligations)
Dispute resolution
Enforcement of agreements

When personal data is no longer necessary, it is securely deleted or anonymized.

9. Your Rights (GDPR)

If you are located in the European Union, you have the following rights:

Right of access
Right to rectification
Right to erasure
Right to restriction of processing
Right to data portability
Right to object
Right to withdraw consent
Right to lodge a complaint with a supervisory authority

In Hungary, the competent supervisory authority is:

National Authority for Data Protection and Freedom of Information (NAIH)
https://naih.hu

To exercise your rights, contact us at:

info@convoy.eu

We may verify your identity before responding.

10. Marketing Communications

If you subscribe to marketing communications, we may send promotional emails.

You may unsubscribe at any time using the unsubscribe link in the email or by contacting us.

Transactional emails related to orders cannot be unsubscribed from while an order is active.

11. Children’s Data

Our Services are not intended for individuals under 18 years of age.

We do not knowingly collect personal data from minors.

If you believe a minor has provided personal data, please contact us.

12. Data Security

We implement appropriate technical and organizational measures to protect personal data.

However, no online system can guarantee absolute security.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

The updated version will be published on our website with a revised “Last updated” date.

Material changes will be communicated where required by law.

14. Contact Information

Ezüsthajó Kft.
7634 Pécs, Szentlőrinci út 15.
Hungary

Email: info@convoy.eu

For purposes of applicable data protection laws, Ezüsthajó Kft. is the data controller of your personal data.