Privacy & GDPR
We keep this simple: we collect only what we need to send you your keychains, and we never sell your data.
Who is responsible
Bakost Keychains is the data controller for the data you give us on this site. Questions, requests or complaints: bakost.office@gmail.com.
What we collect and why
- Order data — name, email, phone, delivery address, items, price, shipping method. Needed to conclude and fulfil your purchase contract.
- Payment reference — invoice number, variable symbol and payment status, so we can match your bank transfer to your order.
- Account data — email and password (stored encrypted) if you choose to create an account. Ordering as a guest is always possible.
- Analytics — anonymous usage statistics via Google Analytics 4 and Microsoft Clarity, so we can see which pages work. No advertising profiles are built.
How long we keep it
Invoices and order records are kept for 10 years, as required by accounting and tax law. Account data is kept until you ask us to delete the account. Analytics data expires automatically after 14 months.
Who else processes it
We use a small number of service providers, each bound by a data processing agreement: our hosting and database provider, our email delivery provider, Google (Sheets for internal order records and Analytics), Microsoft (Clarity) and the postal carrier delivering your parcel. Your address is shared with the carrier only.
Your rights
You have the right to access your data, correct it, delete it, restrict or object to processing, and receive a copy in a portable format. Email us and we respond within 30 days. If you are not satisfied, you can lodge a complaint with your national data protection authority.
Cookies
We use essential cookies to keep your cart and login session working, plus analytics cookies as described above. You can block or delete cookies in your browser at any time; essential cookies are required for checkout to function.