Privacy policy

Last updated: 2026.10.10.

The purpose of this Privacy Notice is to explain how SILÚ (Farsang Renáta EV., registered office: 2011 Budakalász, Napsugár utca 3., Hungary, tax number: 92187070-2-33, hereinafter: "Data Controller") processes the personal data provided while using the siluyoga.com website (hereinafter: "Website") and when placing orders in the online store, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and Act CXII of 2011 on the Right of Informational Self-Determination and Freedom of Information (Infotv.).

1. Data Controller's Details

  • Name: Farsang Renáta EV.
  • Registered office: 2011 Budakalász, Napsugár utca 3., Hungary
  • Tax number: 92187070-2-33
  • Email: hello@siluyoga.com

2. Scope, Purpose, and Legal Basis of Data Processed

  • Registration / customer account: name, email, password, address, phone number - legal basis: performance of a contract (GDPR Art. 6(1)(b)) - retained until the account is deleted.
  • Order and payment: name, shipping and billing address, email, phone number, ordered products, payment data - legal basis: performance of a contract (GDPR Art. 6(1)(b)). Card details are processed by the payment service provider; the Data Controller does not see or store them.
  • Delivery (parcel locker, pickup point or home delivery): name, phone number, email, delivery address or the selected pickup point, parcel data - legal basis: performance of a contract (GDPR Art. 6(1)(b)) - retained until the delivery, return and warranty period has ended.
  • Invoicing and accounting: name, billing address, invoice data - legal basis: legal obligation (GDPR Art. 6(1)(c), Act C of 2000 on Accounting, Act CXXVII of 2007 on Value Added Tax) - retained for 8 years.
  • Newsletter, marketing: name, email - legal basis: consent (GDPR Art. 6(1)(a)) - retained until consent is withdrawn.
  • Contact requests: name, email, content of the message - legal basis: legitimate interest (GDPR Art. 6(1)(f)) - retained for 1 year from closing the matter.
  • Website operation, security, statistics (cookies): IP address, browser and device data - legal basis: legitimate interest / consent - see the Cookie Notice.

3. Data Processors and Recipients

The following service providers process personal data on behalf of the Data Controller (data processors):

  • Shopify International Limited (The Sidings, 4th Floor, Grand Canal Quay, Dublin D02 E7K8, Ireland) and its parent company Shopify Inc. (151 O'Connor Street, Ground Floor, Ottawa, ON, K2P 2L8, Canada) - providers of the platform used to operate the Website and run the online store. For certain services, Shopify may also process data as an independent data controller, as described in the Shopify Privacy Policy.
  • webwise Hungary Kft. (PickupBird / Digiloop) (4032 Debrecen, Füredi út 98., Hungary, company registration number: 09-09-004726) - the application used to select a parcel locker or pickup point in the cart. It receives the selected pickup point and the order data needed for delivery. Privacy notice: digiloop.hu.
  • KBOSS.hu Kft. (Számlázz.hu) (1031 Budapest, Záhony utca 7., Hungary, company registration number: 01-09-303201) - invoicing system used to issue invoices.
  • Accountant - to fulfil accounting and tax obligations.

The following recipients process data as independent data controllers:

  • Foxpost Zrt. (FOXPOST, Packeta Group) (3300 Eger, Maklári út 119., Hungary, company registration number: 10-10-020309) - delivery of parcels. Recipient data: name, phone number, email, delivery address or selected pickup point, parcel data. Privacy notice: foxpost.hu.
  • Payment service providers: Shopify Payments (provided by Shopify International Limited together with its payment processing partners) for bank card payments, including Apple Pay and Google Pay if you choose them - processing of payment data.
  • National Tax and Customs Administration (NAV) - invoice data, as required by law.

Some of these providers process data outside the European Economic Area (e.g. Shopify Inc. in Canada, and payment partners in the United States). Your data is transferred to third countries only on legal grounds providing appropriate safeguards under the GDPR, such as the European Commission's adequacy decision regarding Canada, Shopify's Binding Corporate Rules, or the European Commission's Standard Contractual Clauses.

4. Your Rights

You have the right to access, rectify, erase, restrict the processing of, port your data, object to its processing, and withdraw your consent at any time. You may exercise your rights at hello@siluyoga.com.

5. Remedies

You may lodge a complaint with the National Authority for Data Protection and Freedom of Information (NAIH): 1055 Budapest, Falk Miksa utca 9-11., Hungary, ugyfelszolgalat@naih.hu, www.naih.hu - or with the competent court in your place of residence.

6. Data Security

The Data Controller ensures the security of personal data using the technical and organizational measures provided by the Shopify platform and its service providers.

7. Amendments

The Data Controller reserves the right to amend this notice; visitors will be informed of any amendments on the Website.