Privacy policy


Effective date: January 20, 2026

CozyPhoto4u (registered address: Gerle utca 93, Szeged, 6727, Hungary; email: cozyphoto2u@gmail.com; hereinafter referred to as the “Data Controller”, “we”, “us”) operates this website and online store (the “Website”, “Services”).

This Privacy Policy explains how we collect, use, store, and disclose personal data in accordance with:

  • Regulation (EU) 2016/679 (GDPR)
  • UK GDPR
  • Applicable non-EU data protection laws (including CCPA/CPRA where applicable)

The Website is operated using the Shopify platform. In certain cases, Shopify acts as an independent data controller.


1. Personal Data We Process

Depending on how you use the Services, we may process the following categories of personal data:

  • Contact details: name, billing and shipping address, email address, phone number
  • Payment information: payment method and transaction details
    (we do not store credit card details; payments are processed by certified payment service providers)
  • Account information: username, encrypted password, preferences
  • Order information: purchased products, cart contents, order history
  • Communication data: messages sent to customer support
  • Technical data: IP address, browser type, device information, cookies and similar technologies

2. Purposes and Legal Bases of Processing

Purpose of processing Categories of data Legal basis
Order processing, invoicing Contact and order data Performance of a contract (GDPR Art. 6(1)(b))
Customer communication and support Contact data Contract performance / Legitimate interest
Compliance with legal obligations Invoicing and accounting data Legal obligation (Art. 6(1)(c))
Marketing communications (newsletter) Email address Consent (Art. 6(1)(a))
Website security and fraud prevention Technical data Legitimate interest (Art. 6(1)(f))
Website analytics and improvement Technical data Consent / Legitimate interest

Our legitimate interests include ensuring the secure, lawful, and efficient operation of the Website and preventing fraud or misuse. These interests do not override the fundamental rights and freedoms of data subjects.

3. Cookies

The Website uses cookies and similar technologies.
Non-essential cookies are used only with your prior consent.

Detailed information about cookies and your choices is available in our separate Cookie Policy.

4. Data Sharing and Data Processors

We may share personal data with trusted third parties, including:

  • Shopify Inc. – e-commerce platform and hosting provider
  • Payment service providers – secure payment processing
  • Shipping and fulfillment partners – order delivery
  • Accounting, legal, and IT service providers – compliance and system operation

Some service providers may process personal data outside the European Economic Area (EEA).
In such cases, data transfers are safeguarded by:

  • European Commission Standard Contractual Clauses (SCCs), or
  • other lawful data transfer mechanisms recognized by applicable law.

5. Data Retention Periods

We retain personal data only for as long as necessary for the purposes described above:

  • Invoicing and accounting data: 8 years (legal obligation)
  • Order and customer data: 5 years
  • Marketing data: until consent is withdrawn
  • Technical and analytics data: up to 26 months

6. Your Rights

Under the GDPR and other applicable data protection laws, you have the right to:

  • access your personal data
  • request rectification of inaccurate or incomplete data
  • request erasure (“right to be forgotten”)
  • request restriction of processing
  • data portability
  • object to processing based on legitimate interest
  • withdraw consent at any time (without affecting prior lawful processing)

You may exercise your rights by contacting us at: cozyphoto2u@gmail.com

7. Complaints and Legal Remedies

If you believe your personal data has been processed unlawfully, you have the right to:

  • lodge a complaint with a supervisory authority, and/or
  • seek judicial remedy before a competent court.

In Hungary, the competent supervisory authority is:

National Authority for Data Protection and Freedom of Information (NAIH)
Address: 1055 Budapest, Falk Miksa utca 9–11, Hungary
Website: https://www.naih.hu

8. Automated Decision-Making

We do not use automated decision-making or profiling within the meaning of Article 22 GDPR.

9. Data Security

We apply appropriate technical and organizational security measures to protect personal data against unauthorized access, alteration, disclosure, or destruction.

10. Children’s Data

The Services are not intended for individuals under the age of 16.
We do not knowingly collect or process personal data of children under 16 years of age.

11. International Users (Non-EU)

If you access the Website from outside the European Union, your personal data may be processed in the EU.
We ensure that such processing is protected by appropriate safeguards in accordance with applicable data protection laws.

Where required by law (e.g. United States – California), users may have additional rights regarding their personal data, including the right to opt out of certain data uses. Requests may be submitted using the contact details below.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect legal, technical, or operational changes.
The updated version will be published on the Website and will take effect upon publication.

13. Contact Details

Data Controller: CozyPhoto4u
Address: Gerle utca 93, Szeged, 6727, Hungary
Email: cozyphoto2u@gmail.com