// Legal

Privacy Policy

DRAFT — working skeleton for legal review, not a published policy. Every bracket needs a real value, and this page needs sign-off from someone versed in GDPR and Czech data-protection law (Act No. 110/2019 Coll.) before publishing.

1. Who runs this site

Aleksandar Tucaković, registered at Školská 660/3, Nové Město, 110 00 Praha 1, Czech Republic, IČO 29637261, DIČ [POPUNITI: DIČ / VAT payer status], listed in the [POPUNITI: trade/commercial register entry, if applicable]. Questions about this policy go to flowerstateprague@gmail.com.

2. What we collect

Order details you give us at checkout (name, address, email, phone), account info if you create one, order history, and standard technical data (IP, browser, pages visited) via cookies. Full cookie detail below.

3. Why we collect it

To fulfill your order, process payment, answer your questions, meet accounting/tax obligations, and — only with your opt-in — send marketing emails. Legal bases: contract performance, legal obligation, and consent respectively (GDPR Art. 6(1)(b), (c), (a)).

4. Who sees it

The minimum necessary shared with: our payment processor (Direct bank transfer (Barion is installed but not yet enabled)), our courier (Zásilkovna/Packeta), and our hosting/email infrastructure. [POPUNITI: list analytics/marketing tools in use, e.g. Google Analytics, Meta Pixel — remove if none.]

5. How long we keep it

Order/invoicing data: [POPUNITI: retention period — confirm against Czech tax law, typically 10 years]. Account data: until deletion requested. Marketing consent data: until withdrawn.

6. Your rights

Access, correction, deletion, restriction, objection, portability — all standard GDPR rights, exercisable anytime by emailing flowerstateprague@gmail.com. Unresolved complaints can go to the Czech Office for Personal Data Protection (ÚOOÚ, uoou.cz).

7. Cookies

Essential cookies keep the cart, session, and age-verification working. Optional analytics/marketing cookies only load with consent. [POPUNITI: confirm cookie banner tool and full cookie list once finalized.]

8. Age data

Because our products are 18+, we log a self-declared age-confirmation cookie on entry and a checkbox at checkout. No further ID is collected or stored unless legally required.

9. Updates

This policy may change. The version live on this page is always the current one.

Draft last updated: [POPUNITI: date]. Not yet reviewed by counsel.