Privacy Policy

Last updated: 26 September 2025

SmokeyDoo operates this store and website, including all related information, content, features, tools, products, and services, to provide you, the customer, with a personalised shopping experience (the "Services"). SmokeyDoo uses Shopify to power the Services provided to you.

This Privacy Policy explains how we collect, use, and disclose your personal data when you visit, use, make a purchase or other transaction through the Services, or otherwise communicate with us. In the event of any inconsistency between our Terms of Service and this Privacy Policy, this Privacy Policy shall prevail with respect to the collection, processing, and disclosure of your personal data.

Please read this Privacy Policy carefully. By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and disclosure of your information as described herein.

Personal Data We Collect or Process

When we refer to "personal data", we mean information that identifies you or another individual, or information that can reasonably be linked to you. Personal data does not include information that has been anonymised or de-identified so that it can no longer reasonably be associated with you.

Depending on how you interact with the Services, where you live, and as permitted or required by applicable law, we may collect or process the following categories of personal data, including inferences derived from such data:

• Contact information, including your name, billing address, delivery address, telephone number, and email address.

• Financial information, including credit and debit card details, payment card information, financial account details, transaction information, payment method, payment confirmations, and other payment-related information.

• Account information, including your username, password, security questions, preferences, and account settings.

• Transaction information, including products you view, add to your basket, save to your wishlist, purchase, return, exchange, or cancel, as well as your previous transactions.

• Communications with us, including any information you provide when contacting our customer support team or otherwise communicating with us.

• Device information, including information about your device, browser, network connection, IP address, and other unique identifiers.

• Usage information, including information about how and when you access, browse, and interact with the Services.

Sources of Personal Data

We may collect personal data from the following sources:

• Directly from you, for example when you create an account, use the Services, communicate with us, or otherwise provide your personal data.

• Automatically through the Services, including information collected from your device when you use our products or services, visit our website, or through cookies and similar technologies.

• From our service providers, where they process personal data on our behalf or provide technology and services that support our operations.

• From our business partners or other third parties.

How We Use Your Personal Data

Depending on how you interact with us and the Services, we may use your personal data for the following purposes:

Providing, Personalising and Improving the Services

We use your personal data to provide the Services, including fulfilling our contract with you, processing payments, fulfilling orders, remembering your preferences and interests, sending account-related notifications, processing purchases, returns, exchanges and other transactions, maintaining your account, arranging shipping, facilitating returns, enabling customer reviews, and providing a personalised shopping experience, including recommending products based on your previous purchases and browsing activity. We may also use your personal data to improve and enhance our Services.

Marketing and Advertising

We may use your personal data for marketing and promotional purposes, including sending marketing communications by email, SMS, or post, and displaying personalised advertisements for products or services on our Services or third-party websites, based on your previous purchases, basket contents, and other interactions with our Services.

Security and Fraud Prevention

We use your personal data to verify your account, facilitate secure payments, detect, investigate, and prevent fraudulent, unlawful, or harmful activities, protect public safety, and maintain the security of our Services.

If you create an account, you are responsible for keeping your login credentials secure. We strongly recommend that you do not share your username, password, or any other access credentials with anyone.

Communicating with You

We use your personal data to provide customer support, respond to your enquiries, deliver our Services efficiently, and maintain our business relationship with you.

Legal Compliance

We may process your personal data to comply with applicable laws, respond to lawful requests from courts or public authorities, participate in legal proceedings, protect our legal rights, and enforce our Terms of Service and other applicable policies.

How We Disclose Personal Data

In certain circumstances, we may disclose your personal data to third parties for legitimate purposes in accordance with this Privacy Policy. These circumstances may include:

• Shopify, service providers, and other third parties that perform services on our behalf, such as IT management, payment processing, data analytics, customer support, cloud storage, order fulfilment, and shipping.

• Business and marketing partners who help us provide marketing services and personalised advertising. For example, we use Shopify to support personalised advertising through third-party services based on your activity across different merchants and websites. These partners will process your personal data in accordance with their own privacy policies. Depending on your location, you may have the right to instruct us not to share your information or use it for personalised advertising based on your activity across different merchants and websites.

• Third parties you authorise, instruct us to share information with, or otherwise consent to, for example in connection with product delivery, social media widgets, or login integrations.

• Our affiliated companies and other entities within our corporate group.

• Business transactions, such as mergers, acquisitions, financing, or insolvency proceedings, as well as where required to comply with applicable laws, respond to lawful requests from public authorities, enforce our Terms of Service, or protect our rights, our Services, and the rights and safety of our users or others.

Relationship with Shopify

Our Services are hosted by Shopify, which collects and processes personal data relating to your access to and use of the Services in order to provide and improve its services.

Information you provide through our Services may be transferred to and shared with Shopify and third parties located in countries outside your country of residence where necessary to provide and improve the Services.

To help us protect, develop, and improve our business, we also use certain enhanced Shopify features that combine information collected through your interactions with our store, other merchants, and Shopify itself.

For these purposes, Shopify may process personal data collected through your interactions with our store, other merchants, and Shopify. In such cases, Shopify acts as the data controller for this processing and is responsible for responding to requests relating to your rights regarding the use of your personal data.

To learn more about how Shopify processes personal data and your available privacy rights, please refer to the Shopify Consumer Privacy Policy and the Shopify Privacy Portal.

Third-Party Websites and Links

The Services may contain links to websites or online platforms operated by third parties.

If you follow a link to a website that is not operated or controlled by us, you should review that website's privacy policy, security practices, and terms of use.

We are not responsible for the privacy, security, accuracy, completeness, or reliability of any third-party websites or services.

Information you choose to share on public or semi-public platforms, including third-party social media platforms, may also be visible to other users of those platforms or the Services without restriction.

The inclusion of links to third-party websites does not imply our endorsement of those websites or their operators unless expressly stated.

Children's Data

The Services are not intended for use by children, and we do not knowingly collect personal data from children below the legal age of majority in your jurisdiction.

If you are a parent or legal guardian and believe that your child has provided us with personal data, please contact us using the details provided below so that we can delete the information.

As of the effective date of this Privacy Policy, we do not knowingly sell or share (as those terms may be defined under applicable law) the personal data of individuals under the age of 16.

Security and Retention of Your Data

Please be aware that no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We recommend that you do not send sensitive or confidential information through unsecured communication channels.

We retain personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, including maintaining your account, providing the Services, complying with legal obligations, resolving disputes, and enforcing our agreements and policies.

Your Rights and Choices

Depending on where you live, you may have some or all of the following rights regarding your personal data. These rights are not absolute and may only apply in certain circumstances. We may decline your request where permitted by applicable law.

Right of Access

You may have the right to request access to the personal data we hold about you.

Right to Erasure

You may have the right to request that we delete your personal data.

Right to Rectification

You may have the right to request that we correct inaccurate or incomplete personal data we hold about you.

Right to Data Portability

In certain circumstances, and subject to applicable legal exceptions, you may request a copy of your personal data and ask us to transfer it to another organisation.

Managing Marketing Communications

We may send you promotional emails. You can unsubscribe at any time by clicking the unsubscribe link included in our marketing emails.

Please note that even if you opt out of receiving marketing communications, we may still send you non-promotional messages relating to your account, purchases, or orders.

If you are located in the United Kingdom or the European Economic Area (EEA), and subject to applicable legal limitations, you may also have the following rights:

Right to Object and Restrict Processing

You may object to or request the restriction of the processing of your personal data in certain circumstances.

Right to Withdraw Consent

Where we process your personal data based on your consent, you have the right to withdraw that consent at any time.

Withdrawal of your consent does not affect the lawfulness of any processing carried out before the consent was withdrawn.

You may exercise any of these rights through the options made available within the Services or by contacting us using the details provided below.

To learn more about how Shopify processes your personal data and your privacy rights relating to data processed by Shopify, please visit:

https://privacy.shopify.com/en

We will not discriminate against you for exercising your privacy rights.

Before processing your request, we may need to verify your identity where required or permitted by applicable law.

You may also appoint an authorised representative to submit a request on your behalf. Before accepting such a request, we may require proof of authorisation and may ask you to verify your identity directly with us.

We will respond to your request within the timeframes required by applicable law.

Complaints

If you have any concerns or complaints regarding the way we process your personal data, please contact us using the details below.

Depending on your location, you may also have the right to lodge a complaint with your local data protection authority or appeal our decision where permitted by law.

International Transfers

Your personal data may be transferred to, stored, and processed in countries outside your country of residence.

Where we transfer personal data outside the European Economic Area (EEA) or the United Kingdom, we rely on recognised transfer mechanisms, including the European Commission's Standard Contractual Clauses or equivalent safeguards approved under UK data protection law, unless the destination country has been recognised as providing an adequate level of data protection.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business practices, operational requirements, legal obligations, or regulatory developments.

Any updated version will be published on this page together with a revised Last updated date and, where required by applicable law, appropriate notice will be provided.

Contact

If you have any questions about this Privacy Policy, our privacy practices, or if you wish to exercise your privacy rights, please contact us at:

Email: info@smokeydoo.cz

For the purposes of applicable data protection legislation, SmokeyDoo acts as the data controller of your personal data.