Privacy Policy

Last updated: 7 October 2026

1. Who controls your data?

This Privacy Policy explains how Token processes personal data when you visit the store, place an order, contact us, or otherwise use the website.

The data controller is:

Name: Szigeti Bánk, individual entrepreneur
Trading name: Token
Business address: 2013 Pomáz, Margitliget út 11C, Hungary
Email: bankszigeti@tokenhungary.com
Business registration number: 62915140
Tax number: 92446249-1-33

For privacy questions or requests concerning your personal data, contact bankszigeti@tokenhungary.com

2. Personal data we collect

Depending on how you use the store, we may process:

• Name.

• Billing and delivery address.

• Email address.

• Telephone number, if you provide one.

• Order details and purchased products.

• Payment and transaction details.

• Return, refund, complaint, and customer-service information.

• Messages and attachments you send to us.

• IP address, browser, device, and technical information.

• Website usage information, including pages visited and interactions with the store.

• Cookie and similar technology data, according to your cookie settings and choices.

We do not receive or store your full card number. Payments are processed by the applicable payment provider.

3. How we receive personal data

We may receive personal data:

• Directly from you when you place an order or contact us.

• Automatically through Shopify and similar technologies when you use the store.

• From payment providers, shipping providers, fulfillment providers, and other service providers involved in your order.

• From fraud-prevention, security, analytics, or technical-service providers where applicable.

4. Why we process personal data

We process personal data for the following purposes:

Processing orders

To accept and process orders, take payment, arrange fulfillment and delivery, send order updates, issue invoices, handle returns and refunds, and provide customer support.

Operating the store

To operate, secure, maintain, troubleshoot, and improve the website and its features.

Customer communication

To respond to questions, complaints, return requests, refund requests, and other messages.

Fraud and security

To verify transactions, prevent fraud, protect the store, investigate misuse, and protect customers and our business.

Legal obligations

To comply with tax, accounting, invoicing, consumer-protection, legal, and regulatory obligations, and to respond to lawful requests from authorities.

Marketing

We may send marketing emails only where we have a lawful basis to do so, such as your consent or another legally permitted basis. You can unsubscribe from marketing emails at any time by using the unsubscribe link or contacting us at bankszigeti@tokenhungary.com

Order confirmations, delivery notifications, refund messages, and other service-related communications may still be sent when necessary to complete or manage your order.

5. Legal bases for processing

Depending on the purpose, we process personal data under one or more of these legal bases:

• Contract: to process and fulfill your order and provide related services.

• Legal obligation: to comply with tax, accounting, invoicing, and other legal requirements.

• Legitimate interests: to secure, operate, improve, and administer the store, prevent fraud, and handle disputes.

• Consent: where consent is required, including certain marketing or optional cookie activities.

Where processing is based on consent, you may withdraw consent at any time. Withdrawal does not affect processing carried out before withdrawal.

6. Who receives personal data?

We may disclose relevant personal data to service providers that help us operate the store, including:

• Shopify, which hosts and supports the online store.

• Payment providers used at checkout.

• CJdropshipping or another fulfillment provider used to process and ship orders.

• Shipping carriers and tracking providers.

• Billingo or another invoicing provider used to issue invoices.

• Website hosting, technical-support, security, fraud-prevention, and analytics providers.

• Professional advisers, accountants, lawyers, authorities, or courts where necessary.

We provide service providers only with the information reasonably necessary for their function. For example, CJdropshipping may receive the customer’s name, delivery address, contact details, order details, and product information to fulfill and ship the order.

7. Shopify

The store is hosted and powered by Shopify. Shopify processes personal data in connection with hosting, checkout, store operation, security, and related services.

Information submitted through the store may be processed by Shopify and its service providers in countries outside Hungary or the European Economic Area. Shopify’s privacy information is available at:

https://www.shopify.com/legal/privacy

8. International transfers

Some service providers may process personal data outside Hungary or the European Economic Area. Where required, we use legally recognised safeguards for international transfers, such as an adequacy decision or Standard Contractual Clauses.

Because CJdropshipping may process order and delivery information outside the European Economic Area, personal data may be transferred internationally when necessary to fulfill an order. Do not place an order if you do not agree to the processing necessary to fulfill and deliver it.

9. Cookies and similar technologies

The store uses cookies and similar technologies to:

• Make the website function.

• Remember shopping-cart and store preferences.

• Maintain security.

• Understand store usage.

• Measure performance.

• Support marketing or advertising where enabled and legally permitted.

Some cookies are necessary for the store to operate. Optional analytics and marketing cookies will be used only as permitted by applicable law and, where required, after consent.

You can manage cookie settings through the cookie banner or your browser settings. Blocking certain cookies may affect store functionality.

10. Data retention

We keep personal data only for as long as reasonably necessary for the purposes described in this policy, including to:

• Complete orders and provide customer support.

• Handle returns, refunds, complaints, and disputes.

• Comply with tax, accounting, invoicing, and other legal obligations.

• Prevent fraud and protect the store.

• Establish, exercise, or defend legal claims.

Different types of data may be retained for different periods. When personal data is no longer needed, it will be deleted or anonymised where reasonably possible.

11. Your data-protection rights

Subject to applicable law, you may have the right to:

• Request access to your personal data.

• Request correction of inaccurate or incomplete data.

• Request deletion of data where there is no lawful reason to retain it.

• Request restriction of processing in certain circumstances.

• Object to processing based on legitimate interests.

• Request data portability where applicable.

• Withdraw consent where processing is based on consent.

• Object to direct marketing at any time.

To exercise your rights, email bankszigeti@tokenhungary.com. Please describe your request clearly. We may need to verify your identity before completing the request.

These rights are not absolute. Some requests may be limited where we must retain or process information to comply with a legal obligation, complete a contract, prevent fraud, or establish or defend legal claims.

12. Complaints

If you believe your personal data has been processed unlawfully, contact us first at:

bankszigeti@tokenhungary.com

You may also submit a complaint to the Hungarian data-protection supervisory authority:

Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH)
Website: https://www.naih.hu

You may also contact the data-protection supervisory authority in the EU country where you live or work, or where you believe the alleged infringement occurred.

13. Children’s data

The store is not directed at children. We do not knowingly collect personal data from children for the purpose of independent purchases. If a parent or legal guardian believes that a child has provided personal data, contact bankszigeti@tokenhungary.com

14. Data security

We use reasonable technical and organisational measures to protect personal data. However, no online transmission or storage system can be guaranteed to be completely secure.

15. Third-party websites

The store may contain links to websites or services operated by third parties. Their privacy practices are governed by their own policies. We are not responsible for the privacy practices of third-party websites that we do not control.

16. Changes to this policy

We may update this Privacy Policy to reflect changes in our business, services, legal obligations, or data-processing practices. The updated version will be published on this page with a revised “Last updated” date.

17. Contact

For questions, privacy requests, or complaints about personal-data processing, contact:

Token
Szigeti Bánk, individual entrepreneur
2013 Pomáz, Margitliget út 11C, Hungary
Email: bankszigeti@tokenhungary.com
Business registration number: 62915140
Tax number: 92446249-1-33