Free shipping over €40 🕷️
Home / Legal information

Privacy Policy

How we handle your personal data in the Jump & Hide store, under the EU General Data Protection Regulation (GDPR).

Last updated: 7 September 2026

1. Controller

Company
BGFOX Kft.
Registered office
Aranyhomok u. 58, 6044 Kecskemét, Hungary
Customer service and returns address
Klapka utca 10/B, 6000 Kecskemét, Hungary
EU VAT number
HU32404805
Company registration number
03 09 137820
Registry court
Registry Court of the Kecskemét Tribunal, Hungary
Represented by
Attila Szvorény, Managing Director
Phone
+36 30 599 8362
Website
https://jumpandhide.com

We are not required to appoint a data protection officer and have not done so. For any privacy question, write to [email protected].

2. What we process, why, and on what legal basis

Fulfilling your order. Data: name, email, phone number, shipping and billing address, order contents and total. Legal basis: performance of a contract (Art. 6(1)(b) GDPR). Retention: 5 years from performance; 8 years for invoicing data under Hungarian accounting law.

Payment. Data: transaction ID, amount, status. Card details are handled directly by Stripe and we have no access to them. Legal basis: performance of a contract. Retention: 8 years.

Your account. Data: name, email, hashed password, saved addresses, order history. Legal basis: contract and consent. Retention: until you delete the account.

Contacting us. Data: name, email and the content of your message. Legal basis: our legitimate interest in answering enquiries (Art. 6(1)(f)). Retention: 1 year after the matter is closed, 5 years for complaints.

Newsletter. Data: email address and the time you subscribed. Legal basis: your consent (Art. 6(1)(a)), which you can withdraw at any time free of charge via the unsubscribe link or by writing to us. Retention: until you withdraw consent.

Product reviews. Data: display name, rating, review text. Legal basis: your consent. Retention: until you withdraw consent.

Running and securing the site. Data: IP address, browser and device data, request logs. Legal basis: our legitimate interest in operating the service securely and preventing abuse. Retention: 30 days at most.

3. Cookies

Strictly necessary cookies remember your cart, your login, the country and language you chose, and your cookie choice. The store does not work without them, so no consent is required under the law.

Analytics and marketing cookies are not used at present. If we introduce them, they will only be set with your prior consent and this policy will be updated.

You can delete or block cookies in your browser settings; blocking the strictly necessary ones makes checkout unavailable.

4. Who has access to your data

We do not sell your data and do not share it with third parties for marketing. We use the following processors to run the service:

Hetzner Online GmbH (Germany)
server hosting
Cloudflare, Inc. (USA)
content delivery, attack protection
Stripe Payments Europe, Ltd. (Ireland)
card payment processing
Resend, Inc. (USA)
sending transactional email
Courier company
name, address and phone number needed for delivery
Accounting and invoicing provider
statutory accounting obligations

Transfers to the United States take place under the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.

We may disclose data where required by law or a competent authority.

5. Your rights

  • Access — ask what data we hold about you and get a copy.
  • Rectification — have inaccurate data corrected.
  • Erasure — have your data deleted where it is no longer needed or you withdraw consent. Accounting records must be kept for their statutory period.
  • Restriction — ask us to store but not otherwise use your data.
  • Portability — receive the data you gave us in a machine-readable format, or have it sent to another controller.
  • Objection — object to processing based on legitimate interests.
  • Withdrawing consent — at any time, without affecting the lawfulness of processing before withdrawal.

Send your request to [email protected]. We answer within 30 days.

6. Complaints

If you believe our processing is unlawful, you may complain to our supervisory authority or to the authority in your own EU country:

Authority
Hungarian National Authority for Data Protection and Freedom of Information (NAIH)
Address
Falk Miksa utca 9–11, 1055 Budapest, Hungary
Phone
+36 1 391 1400
Web
naih.hu

You may also bring the matter before the competent court.

7. Security

The store is served over an encrypted (HTTPS) connection. Data is stored on access-restricted servers inside the European Union, and passwords only as one-way hashes. We keep our systems patched and limit access to what each task requires.

8. Changes

We may update this policy. The current version is always on this page, with the date shown in the header. We notify registered users by email of material changes.