PRIVACY POLICY

Equine Essence Online Store

Essence Capital Kft. (hereinafter referred to as the "Data Controller") is committed to protecting the personal data of its customers.

The purpose of this Privacy Policy is to explain what personal data we collect and process in connection with the operation of the Equine Essence online store, the fulfilment of orders, the delivery of products, and communication with customers.

Personal data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation, hereinafter referred to as the "GDPR") and applicable Hungarian legislation.

1. Details of the Data Controller

Company Name: Essence Capital Kft.

Online Store Name: Equine Essence

Registered Office: 2040 Budaörs, Harkály utca 26., Hungary

Company Registration Number: 13-09-247355

Tax Number: 33058407-2-13

Website: https://www.equineessence.eu/

Email Address: info@equineessence.eu

Telephone Number: +36 70 708 0198

The Data Controller is responsible for ensuring the lawful processing of personal data collected and processed during the operation of the online store.

2. Categories of Personal Data Processed

When customers use the online store, make purchases, or contact us, we may process the following categories of personal data:

  • Customer's full name

  • Billing name and address

  • Shipping name and address

  • Email address

  • Telephone number

  • Order details

  • Purchased products and order history

  • Information necessary for payment processing and invoicing

  • Information voluntarily provided when contacting us

  • Technical data associated with website operation, such as IP addresses and cookie identifiers

We process only the personal data necessary for the specified purposes.

3. Sources of Personal Data

Personal data is primarily collected directly from customers.

This may occur through:

  • Placing an order through the online store

  • Submitting a contact form

  • Contacting us by email or telephone

  • Creating a customer account, where this feature is available

  • Technical data generated when using the website

Providing the personal data necessary to process an order is a requirement for entering into and fulfilling a purchase agreement.

4. Purposes and Legal Bases of Data Processing

4.1. Order Processing and Fulfilment

Purpose: To process and confirm purchases, arrange product delivery, and communicate with customers.

Legal basis: Article 6(1)(b) of the GDPR – performance of a contract.

4.2. Invoicing and Accounting

Purpose: To issue invoices, maintain accounting records, and comply with applicable legal obligations.

Legal basis: Article 6(1)(c) of the GDPR – compliance with a legal obligation.

4.3. Customer Enquiries and Customer Support

Purpose: To respond to customer questions, enquiries, and complaints.

Legal basis: Depending on the nature of the enquiry, performance of a contract, compliance with a legal obligation, or legitimate interests (Article 6(1)(b), (c), or (f) of the GDPR).

4.4. Website Operation

Purpose: To ensure the secure and proper functioning of the website.

Legal basis: The legitimate interests of the Data Controller in relation to necessary technical data processing (Article 6(1)(f) of the GDPR).

4.5. Analytics and Marketing-Related Data Processing

If the online store uses analytics or marketing cookies, their use is subject to the visitor's prior consent where required by applicable law.

Details of such data processing activities, including the possibility of modifying or withdrawing consent, must be provided separately on the website.

5. Retention Period of Personal Data

The Data Controller retains personal data only for as long as necessary to fulfil the specified purposes or for the periods required by applicable legislation.

Order Data: For the period necessary to fulfil the contract, handle related claims, and comply with legal obligations.

Accounting Documents: For at least 8 years in accordance with applicable Hungarian accounting legislation.

Customer Support Enquiries: For the period necessary to handle the enquiry and any related legal claims.

Consumer Complaints: For the period specified by applicable consumer protection legislation.

Consent-Based Data Processing: Until consent is withdrawn or the specified processing purpose ceases to exist, subject to any applicable legal obligations.

Following the expiry of the applicable retention period, the Data Controller deletes or anonymises personal data where there is no longer a lawful basis for its continued processing.

6. Data Processors and Data Transfers

The Data Controller may use external service providers to operate the online store and fulfil customer orders.

Data processors and other recipients may access personal data only to the extent necessary to perform their respective services.

E-commerce Platform and Hosting Services

Webnode AG – responsible for providing the technical infrastructure and operation of the online store.

Shipping and Delivery Service Providers

  • Magyar Posta (Hungarian Post)

  • GLS

These providers are responsible for delivering ordered products to customers.

Payment Service Providers

  • Stripe

  • GLS

  • Magyar Posta

These providers facilitate the processing and completion of payment transactions, as applicable.

Invoicing Service Provider

Számlázz.hu

Responsible for supporting the issuance and management of invoices.

Website Analytics

Google Analytics – only if this service is actively used by the online store.

The Data Controller does not sell personal data.

If personal data is transferred outside the European Economic Area (EEA), the Data Controller ensures that appropriate safeguards required by the GDPR are implemented and provides information about the applicable international data transfer mechanism.

7. Customers' Data Protection Rights

Under the GDPR, individuals have the following rights, subject to the applicable legal conditions:

7.1. Right of Access

Customers may request information about the personal data processed by the Data Controller concerning them.

7.2. Right to Rectification

Customers may request the correction of inaccurate personal data or the completion of incomplete personal data.

7.3. Right to Erasure

Customers may request the deletion of their personal data where the conditions set out in the GDPR are met.

7.4. Right to Restriction of Processing

Customers may request the restriction of the processing of their personal data in certain circumstances.

7.5. Right to Object

Customers have the right to object to the processing of their personal data where such processing is based on legitimate interests.

7.6. Right to Data Portability

Where the applicable legal conditions are met, customers may request to receive their personal data in a structured, commonly used, and machine-readable format.

7.7. Right to Withdraw Consent

Where personal data is processed on the basis of consent, customers have the right to withdraw their consent at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Requests concerning the exercise of the above rights may be submitted to:

info@equineessence.eu

The Data Controller will respond to such requests without undue delay and, as a general rule, within one month of receiving the request.

8. Right to Lodge a Complaint

If a customer believes that the processing of their personal data violates applicable data protection legislation, they have the right to lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information.

Hungarian National Authority for Data Protection and Freedom of Information (NAIH)

Address: 1055 Budapest, Falk Miksa utca 9–11., Hungary

Postal Address: 1363 Budapest, P.O. Box 9, Hungary

Email: ugyfelszolgalat@naih.hu

Website: https://www.naih.hu

Individuals also have the right to seek a judicial remedy before a competent court.

9. Security of Personal Data

The Data Controller implements appropriate technical and organisational measures to ensure the security of personal data.

Such protective measures may include:

  • Restricting access to personal data

  • Using password-protected user accounts

  • Maintaining secure website connections

  • Performing regular software updates

  • Implementing measures to prevent unauthorised access

  • Enforcing data protection requirements in relation to data processors

The Data Controller takes reasonable steps to protect personal data against loss, unauthorised access, alteration, and unlawful disclosure.

10. Use of Cookies

The online store may use cookies that are necessary for the proper functioning of the website.

If the website also uses statistical, analytical, or marketing cookies, visitors will be provided with separate information about their use and, where required, will have the opportunity to grant or refuse consent.

The exact categories, providers, purposes, and retention periods of cookies must be determined based on the actual configuration of the website.

Webnode Cookies

The website uses the Webnode platform, which may place cookies necessary for the technical operation and functionality of the online store.

Further information regarding the cookies used is available through the website's cookie settings, where applicable.

11. Final Provisions

This Privacy Policy is made available to customers when using the Equine Essence online store.

When placing an order, customers may confirm that they have read and acknowledged this Privacy Policy by selecting the appropriate checkbox.

The Data Controller reserves the right to amend this Privacy Policy at any time, particularly in response to changes in legislation, the introduction of new services, or changes in data processing practices.

The updated version of this Privacy Policy will be published on the online store's website.

Effective Date: 21 October 2026

Data Controller: Essence Capital Kft.

Online Store: Equine Essence