Last updated: 21 October 2026
Galerie Sac à Dos is operated by Polycontext Kft, a company registered in Hungary. This privacy policy explains how we collect, use, store and protect your personal data when you visit our website or place an order. It applies to all visitors and customers in the United Kingdom.
Who We Are
The data controller is:
Polycontext Kft
Dózsa György utca 11, Újlengyel, Pest, 2724, Hungary
Company number: 13-09-243800
VAT number: HU32299333
Email: contact@galeriesacados.com
We process your data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
What Personal Data We Collect and Why
| Data | Purpose | Legal basis (UK GDPR) | Retention |
|---|---|---|---|
| Name, email, postal address, phone number | Fulfilling your order, delivering your purchase, contacting you about your order | Performance of a contract (Article 6(1)(b)) | 8 years from the order date (Hungarian tax and accounting law) |
| Payment information (card type, last four digits, transaction ID) | Processing your payment through Stripe. We do not store your full card number. | Performance of a contract (Article 6(1)(b)) | 8 years (tax records) |
| Invoicing and tax records | Complying with Hungarian tax and accounting obligations | Legal obligation (Article 6(1)(c)) | 8 years |
| Account information (email, password hash, order history) | Maintaining your customer account, if you choose to create one | Performance of a contract (Article 6(1)(b)) | Until you delete your account, or 3 years after your last order if the account is inactive |
| Email address and marketing preferences | Sending you news and offers by email, only with your consent | Consent (Article 6(1)(a)) | Until you withdraw your consent |
| IP address, browser type, pages visited, referring URL | Website analytics (Google Analytics 4), security and fraud prevention | Consent for analytics cookies, legitimate interest for security (Article 6(1)(f)) | Analytics data: 14 months. Server logs: 90 days. |
| Contact form messages | Responding to your enquiry | Legitimate interest (Article 6(1)(f)) | 2 years |
| Cookies and similar technologies | Essential site functionality, analytics, consent preferences. See our cookie policy. | Essential cookies: legitimate interest. Non-essential cookies: consent. | See the cookie policy for durations per cookie. |
Who We Share Your Data With
We share your personal data only where necessary to fulfil your order or run our website:
- Stripe Inc. processes your payments. It acts as an independent controller for payment data.
- Shipping carriers receive your name and delivery address to deliver your order.
- Google LLC (Google Analytics 4) receives anonymised browsing data, with your consent.
- Cloudflare Inc. provides content delivery and security for our website.
We do not sell your personal data to anyone.
International Data Transfers
Your data is stored on a server located in Hungary (within the European Union). Hungary holds an adequacy finding from the United Kingdom, so transfers of your data to our server are covered.
Some of our service providers are based in the United States (Stripe, Google, Cloudflare). Transfers to these providers are protected by Standard Contractual Clauses (SCCs) and, where applicable, the UK International Data Transfer Agreement (IDTA).
Your Rights
Under the UK GDPR, you have the right to:
- Access your personal data and receive a copy of it
- Rectify inaccurate or incomplete data
- Erase your data (“right to be forgotten”), where there is no legal obligation to keep it
- Restrict processing in certain circumstances
- Data portability for data you provided to us, in a structured, commonly used format
- Object to processing based on legitimate interest
- Withdraw consent at any time, without affecting the lawfulness of processing before withdrawal
To exercise any of these rights, email us at contact@galeriesacados.com. We will respond within one month.
Complaints
If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
Information Commissioner’s Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Website: ico.org.uk
You may also contact the Hungarian data protection authority (NAIH) at naih.hu.
Cookies
We use cookies on our website. For full details on which cookies we use, their purpose and how to manage your preferences, please see our cookie policy.
Changes to This Policy
We may update this privacy policy from time to time. The “last updated” date at the top of this page shows when it was last revised. We encourage you to review this page periodically.
Contact
If you have questions about this privacy policy or your personal data, contact us at:
Email: contact@galeriesacados.com
Address: Polycontext Kft, Dózsa György utca 11, Újlengyel, Pest, 2724, Hungary