Privacy policy
Last updated: 11 November 2026
We keep this simple: we only use your data to sell you a cat bowl, deliver it, and look after you afterwards.
Who is responsible (the controller)
Badr Gemeay, sole trader (egyéni vállalkozó), József krt. 73, 1085 Budapest, Hungary. Email: hello@matchacatbowl.com. Write to this address for any privacy question or request.
What we collect and why
| What | Why | Legal basis (GDPR) | How long |
|---|---|---|---|
| Name, email, phone, delivery address, order details | To take, ship and support your order (phone: for the carrier) | Contract (Art. 6(1)(b)) | 8 years after the order, for accounting and tax records; support emails 3 years |
| Payment data (handled by Stripe; we only see the card type, last 4 digits and country) | Payment, fraud prevention, refunds | Contract; legal obligation (Art. 6(1)(c)) | 8 years |
| Your email and order number | One email asking for a review, 10 days after delivery | Legitimate interest (Art. 6(1)(f)) — you can object any time | Sent once only |
| Your review, first name and country | Showing your review on our site | Consent (Art. 6(1)(a)) — you choose to send it | Until you ask us to remove it |
| Withdrawal requests | To handle your withdrawal and refund | Legal obligation | 8 years |
| Analytics and ad cookies | To count visits and measure our ads | Consent (Art. 6(1)(a)) via the cookie banner | See the cookie policy |
We never sell your data. We don’t make automated decisions about you.
Who we share it with
- Our fulfilment partner in China — receives your name, delivery address, phone number and the items you ordered, so it can pack and ship your parcel. China does not have an EU “adequacy decision”, so we protect this transfer with the European Commission’s Standard Contractual Clauses (Art. 46 GDPR). Ask us for a copy.
- Carriers and postal services — the same delivery data, to bring you the parcel and handle customs.
- Stripe (Stripe Payments Europe Ltd., Ireland) — processes your payment.
- Resend (USA) — sends our emails (order confirmation, tracking, review request).
- Vercel (USA) — hosts our website.
- Supabase — stores our order database (on servers in the EU).
- Google (Google Analytics 4), Meta (Facebook/Instagram Pixel), TikTok (TikTok Pixel) — only if you say yes in the cookie banner.
- Our accountant and the tax authority — order records, where the law requires.
Transfers to the USA are covered by the EU–US Data Privacy Framework where the company is certified, and otherwise by Standard Contractual Clauses.
Your rights
You can ask us to see, correct, delete or limit the use of your data, to get a copy of it (portability), and to object to its use based on legitimate interest. You can withdraw consent any time — for cookies, use “Cookie settings” at the bottom of every page. We answer within one month. Just email hello@matchacatbowl.com.
You can also complain to a data protection authority. In Hungary that is the Hungarian National Authority for Data Protection and Freedom of Information (NAIH), 1055 Budapest, Falk Miksa utca 9–11, naih.hu. You may also contact the authority in the EU country where you live.
Security
Our site uses HTTPS. Only we can access the order database, protected by a password and strict access rules. Card details never touch our servers.
Changes
If we change this policy, we update the date at the top. Big changes will be shown clearly on the site.
Contact: hello@matchacatbowl.com