PARADISE 26

Privacy Policy

Privacy Policy — Paradise 26

Last Updated: October 8, 2026

1. Introduction

Paradise 26 (“Paradise 26,” “we,” “us,” or “our”) operates the website https://paradise26.shop and offers physical collector display discs through its online store (collectively, the “Services”).

Our storefront and e-commerce operations use third-party technologies and service providers, including Shopify, Lovable, and Kunaki.

This Privacy Policy explains how we collect, use, store, disclose, and otherwise process personal information when you visit our website, browse our products, place an order, contact us, or otherwise interact with our Services.

Paradise 26 is operated from Hungary and currently sells and ships products exclusively to customers in the United States.

Where applicable, we process personal information in accordance with the European Union General Data Protection Regulation (GDPR), relevant Hungarian data protection laws, and applicable United States privacy laws.

If there is a conflict between this Privacy Policy and our Terms of Service regarding the processing of personal information, this Privacy Policy governs that processing.

Please read this Privacy Policy carefully to understand our practices and your rights.

2. Information We Collect

Personal information means information that identifies, relates to, describes, or can reasonably be associated with an individual.

Depending on how you interact with our Services, we may collect or process the following categories of information.

2.1 Contact Information

2.2 Order and Transaction Information

2.3 Payment Information

Payments are processed through payment service providers made available by Shopify.

These providers may process payment card details, billing information, payment authorization data, and transaction records.

Paradise 26 does not need to receive or store complete payment card numbers to fulfill orders. We may receive limited payment-related information, such as payment status and transaction identifiers.

2.4 Account Information

If customer accounts are available and you choose to create one, information may include your account identifiers, preferences, and account-related activity.

Authentication information is processed through the relevant account service.

2.5 Device and Usage Information

When you visit our website, certain technical information may be collected automatically, including:

2.6 Communications

When you contact us, we may process your email address, message contents, order details, photographs submitted for support requests, and other information you voluntarily provide.

We ask customers not to send sensitive personal information unless it is necessary to resolve a specific issue.

3. Sources of Personal Information

We may obtain personal information:

Directly from you: when you place an order, enter checkout information, contact customer support, or otherwise provide information.

Automatically: when you browse or interact with our website, including through cookies, analytics, server logs, and similar technologies.

From service providers: including Shopify, payment processors, fulfillment providers, and technical service providers involved in operating our store.

From other parties: where permitted by law, such as when a shipping carrier provides delivery status information.

4. How We Use Personal Information

We process personal information for the following purposes.

4.1 Processing and Fulfilling Orders

We use relevant personal information to:

4.2 Operating and Improving Our Website

We use technical and usage information to operate our website, identify errors, maintain security, analyze performance, and improve the shopping experience.

4.3 Customer Communications

We may contact you regarding your order, shipping updates, payment issues, product concerns, customer service inquiries, and important changes affecting your purchase.

4.4 Marketing and Advertising

Where permitted by applicable law, we may use information to measure advertising effectiveness, understand interest in our products, and provide promotional communications.

We will obtain consent where required and provide applicable opt-out options.

If we send promotional emails, recipients will be able to unsubscribe from future marketing messages.

Unsubscribing from marketing does not prevent necessary transactional communications.

4.5 Security and Fraud Prevention

We may process information to detect suspicious transactions, prevent fraud, protect our website, investigate abuse, and maintain the security of our Services.

4.6 Legal Compliance

We may process and retain information where necessary to comply with applicable laws, accounting and tax obligations, lawful requests, and the establishment, exercise, or defense of legal claims.

5. Legal Bases for Processing Under the GDPR

Where the GDPR applies, we rely on one or more of the following legal bases.

Performance of a contract: processing information necessary to accept, produce, fulfill, deliver, and support orders.

Compliance with legal obligations: maintaining records and responding to applicable legal, tax, accounting, and regulatory requirements.

Legitimate interests: maintaining website security, preventing fraud, responding to inquiries, and improving business operations, where these interests are not overridden by individuals' rights and freedoms.

Consent: where required for non-essential cookies, certain analytics or advertising technologies, and direct marketing.

You may withdraw consent at any time where consent is the legal basis for processing. Withdrawal does not affect the lawfulness of processing performed before withdrawal.

6. Service Providers and Information Sharing

We share personal information only where reasonably necessary for legitimate business purposes or as otherwise permitted or required by law.

6.1 Shopify

Shopify provides e-commerce infrastructure, checkout functionality, order management, and related services.

Shopify and its associated service providers may process information necessary to operate our store, complete transactions, prevent fraud, and provide relevant functionality.

Shopify may also process certain personal information for its own purposes as described in its privacy documentation.

Shopify Consumer Privacy Policy:

https://privacy.shopify.com/en

6.2 Kunaki — Manufacturing and Fulfillment

We use Kunaki as a print-on-demand manufacturing and fulfillment provider.

When a qualifying order is submitted for production, we may provide Kunaki with information necessary to manufacture and deliver the purchased product, including:

Kunaki and relevant shipping providers use this information to manufacture, package, and deliver the order.

We do not intentionally provide complete payment card information to Kunaki.

6.3 Lovable — Website Technology

Our website uses technology developed or hosted through Lovable.

Depending on the technical configuration of our website, Lovable and associated infrastructure providers may process technical information, website requests, server logs, and information transmitted through relevant website functions or order-processing integrations.

We use this infrastructure to operate the website and connect the storefront with order-processing services.

6.4 Payment Service Providers

Payment providers process payment information to authorize transactions, confirm payment, manage payment-related risks, and support refunds where applicable.

Payment information may also be processed according to the relevant provider's privacy policy.

6.5 Shipping Carriers

We or our fulfillment provider may share recipient and delivery information with shipping carriers to deliver orders and provide shipment updates.

6.6 Other Service Providers

Where used, other service providers may assist with hosting, analytics, customer support, security, and marketing.

Such providers may receive information necessary to perform their services, subject to applicable contractual and legal requirements.

6.7 Legal and Business Purposes

We may disclose information where required by applicable law, valid legal process, or a lawful government request.

Information may also be disclosed where reasonably necessary to protect legal rights, investigate fraud, or address security incidents.

In the event of a business reorganization or transfer, personal information may be transferred where permitted by law and subject to applicable safeguards.

7. Cookies and Similar Technologies

Our website and its service providers may use cookies and similar technologies to operate the storefront, remember preferences, support checkout, maintain security, and understand website usage.

Depending on the technologies enabled, cookies may include:

Essential cookies: necessary for website functionality, security, checkout, and other requested services.

Analytics cookies: used to understand website traffic, usage, and performance.

Advertising cookies: where enabled, used to measure marketing effectiveness or support personalized advertising.

Non-essential cookies and similar technologies will be subject to consent or other controls where required by applicable law.

You may be able to manage cookies through your browser settings and any privacy preference tools made available on our website.

Blocking certain cookies may affect website functionality.

8. Personalized Advertising and Privacy Choices

Where enabled and legally permitted, Shopify or other service providers may support advertising measurement and personalized advertising based on online interactions.

Depending on your location and applicable law, you may have the right to opt out of certain uses, sales, or sharing of personal information for targeted advertising.

You may exercise applicable privacy choices through the controls provided by our website, by contacting us, or through relevant Shopify privacy tools.

Shopify Privacy Portal:

https://privacy.shopify.com/en

Where applicable, we recognize Global Privacy Control (GPC) signals as required by law.

More information about GPC is available at:

https://globalprivacycontrol.org/

We do not knowingly sell personal information in exchange for money. Certain advertising-related disclosures may nevertheless be considered a “sale” or “sharing” under some U.S. privacy laws, depending on the technologies enabled.

9. Data Security

We take reasonable steps to protect personal information against unauthorized access, loss, misuse, alteration, and disclosure.

Our service providers may implement their own technical and organizational security measures.

However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

Please avoid sending full payment card numbers, passwords, or other sensitive credentials through ordinary email.

10. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including:

Retention periods may vary depending on the category of information, applicable legal requirements, and the service provider involved.

When information is no longer required, we will delete, anonymize, or otherwise handle it in accordance with applicable law and our technical capabilities.

11. International Data Transfers

Paradise 26 is operated from Hungary, while our customers and certain service providers are located in the United States or other countries.

As a result, personal information may be transferred to, stored in, or processed in countries outside the individual's country of residence.

Where the GDPR requires safeguards for transfers outside the European Economic Area, we rely on applicable lawful transfer mechanisms, which may include adequacy decisions, Standard Contractual Clauses, or other legally recognized safeguards.

The safeguards used depend on the recipient, destination, and relevant processing arrangement.

12. Children's Privacy

Our Services are not directed toward children.

We do not knowingly collect personal information directly from children in circumstances prohibited by applicable law.

If you believe that a child has provided personal information to us without appropriate authorization, please contact us so that we can review the situation and take appropriate action.

We do not knowingly sell or share personal information of individuals under 16 for targeted advertising.

13. Your Privacy Rights

Depending on your location and applicable law, you may have certain rights regarding your personal information.

These may include:

Right of access: requesting confirmation of whether we process your personal information and obtaining access to that information.

Right to correction: requesting correction of inaccurate or incomplete personal information.

Right to deletion: requesting deletion of personal information where legally applicable.

Right to data portability: requesting a copy of certain personal information in a structured, commonly used, machine-readable format, where applicable.

Right to restriction: requesting that certain processing activities be restricted.

Right to object: objecting to certain processing activities, including processing based on legitimate interests or direct marketing.

Right to withdraw consent: withdrawing consent where processing is based on consent.

Right to opt out: where applicable under U.S. state privacy laws, opting out of certain targeted advertising, sale, or sharing activities.

Right to appeal: where provided by applicable law, appealing a decision concerning a privacy rights request.

These rights are subject to applicable legal conditions and exceptions.

We will not unlawfully discriminate against you for exercising applicable privacy rights.

14. Exercising Your Rights

You can submit a privacy request by contacting:

paradise26ws@gmail.com

Please describe your request and provide enough information for us to identify the relevant records.

We may need to verify your identity before fulfilling certain requests, where permitted or required by law.

We will respond within the timeframe required by applicable law.

You may also be able to exercise rights relating to Shopify's own processing activities through:

https://privacy.shopify.com/en

Where legally permitted, an authorized representative may submit a request on your behalf, subject to appropriate verification.

15. Complaints

If you have concerns about how we process personal information, please contact us first so that we can investigate and respond.

Where the GDPR applies, you may also have the right to lodge a complaint with a competent data protection supervisory authority.

In Hungary, the relevant authority is the Hungarian National Authority for Data Protection and Freedom of Information (NAIH).

Official website:

https://www.naih.hu/

Depending on your location, other data protection or consumer privacy authorities may also be available.

16. Third-Party Websites

Our website may contain links to websites or services operated by third parties.

We are not responsible for the privacy practices of independent third-party websites.

We encourage you to review their privacy policies before providing personal information.

17. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our operations, technologies, service providers, legal obligations, or privacy practices.

When changes are made, we will update the “Last Updated” date and publish the revised policy on our website.

Where required by applicable law, we will provide additional notice or obtain consent.

18. Contact Information and Data Controller

For questions, requests, or complaints relating to this Privacy Policy or the processing of your personal information, please contact:

Paradise 26

Website: https://paradise26.shop

Email: paradise26ws@gmail.com

Phone: +36 30 675 7492

Contact Address: Kapitány utca 55, 4080 Hajdúnánás, Hungary

Paradise 26 is responsible for determining the purposes and means of processing personal information for its own store operations, except where a third-party provider acts as an independent controller for its own processing activities.

The identity and legally required details of the actual operator must be accurately disclosed in accordance with applicable law.