Effective date: 21 August 2025

1.1 Controller: Pavlo Khudiakov, Sole Proprietor (IČO: 23343249), Czech Republic
1.2 Contact: hello@1058.design

2.1 Identity & contact data: name, email, phone number, shipping details.
2.2 Order & payment data: products ordered, totals; payment tokens via Stripe (we do not see full card numbers).
2.3 Technical/log data: IP address, device/browser, basic event logs.
2.4 Support/content: messages you send us.
2.5 Cookies/analytics: only with consent for non-essential cookies.

3.1 Fulfil orders, provide service & support — contract performance (GDPR Art. 6(1)(b)).
3.2 Legal and tax compliance — legal obligation (Art. 6(1)(c)).
3.3 Fraud prevention, security, record-keeping — legitimate interests (Art. 6(1)(f)).
3.4 Analytics/marketing cookies and newsletters (if any) — consent (Art. 6(1)(a)); you may withdraw consent at any time.

4.1 Strictly necessary cookies operate the Site (no consent required).
4.2 Analytics/marketing cookies load only if you consent.
4.3 You can manage or withdraw consent at any time via the Site’s cookie controls.

5.1 We share data with processors and partners strictly as needed:
Hosting/website: Webflow (site operations)
Payments: Stripe (payment processing, anti‑fraud)
Carriers: UPS/DHL/Zásilkovna/DPD/PPL (shipping & delivery)
Email/CRM tools: order updates and support communications
5.2 We do not sell your personal data.

6.1 Where providers are located outside the EEA, we use EU Standard Contractual Clauses (2021/914) and additional safeguards where required.

7.1 Orders, invoices, accounting: kept up to 10 years (statutory).
7.2 Support communications: up to 3 years after resolution.
7.3 Cookie/analytics data: per your consent settings, or shorter upon withdrawal of consent.

8.1 You may request access, rectification, erasure, restriction, portability, and object to certain processing.
8.2 You may withdraw consent at any time (does not affect prior lawful processing).
8.3 To exercise rights, email hello@1058.design. We respond within 1 month (extendable by up to 2 months for complex requests; we will inform you).

9.1 You can complain to the Czech Office for Personal Data Protection (ÚOOÚ) — https://uoou.gov.cz/ — posta@uoou.gov.cz.
9.2 You may also complain to your local EU supervisory authority.

10.1 We implement technical and organisational measures appropriate to risk (encryption in transit, access controls, least‑privilege, vendor due diligence).

11.1 The Site and products are intended for adults. We do not knowingly collect data from children.

12.1 We may update this Policy; we will post the new version with a new effective date.

13.1 For questions, returns or support, please contact: hello@1058.design