Privacy Policy
Summary
- We are Nadasi Technologies Kft., a small company in Hungary, and we are the controller of your personal data.
- We never see or store your card details. Stripe and Mollie handle payment.
- Your parcel is plain and unbranded, with nothing on it to indicate the contents or the sender.
- We do no advertising, no profiling, and we never sell personal data.
- We record and keep the confirmations you give at checkout, as evidence. Section 6 sets out what we hold and why.
- Questions: info@wickedergonomy.com.
1. Who we are
Nadasi Technologies Kft., trading as WickedErgonomy, registered in Hungary, is the data controller — “we” throughout this policy. Our registered particulars appear in the Impressum.
Contact: info@wickedergonomy.com
You may complain to the Hungarian supervisory authority (NAIH) or to the supervisory authority of the country where you live.
2. What we collect
When you place an order: your name, email address, delivery address, and — for made-to-measure items — the body dimensions you supply. Your order contents and history.
When you pay: nothing. Stripe (card payments) or Mollie (other payment methods) processes the payment. We receive confirmation that payment was made, and a reference. We neither see nor store your card number.
When you use the website: your IP address, browser and device information, and the pages you visit, recorded in our server and security logs. We aggregate these into anonymous statistics and then delete the underlying logs; see section 9.
When you confirm at checkout: see section 6.
If you subscribe to the newsletter: your email address, and the fact and time of your double opt-in.
What we do not collect: identity documents. We do not verify your age by document.
2.1 What we need in order to perform the contract
We need your name, delivery address and a working email address to enter into and perform the contract with you. Without them we cannot manufacture, dispatch or confirm your order, and cannot accept it. For made-to-measure items the same applies to the dimensions you supply.
Everything else is optional, and you may withhold it without consequence.
3. Why we process your data, and on what basis
| What we do | Why | Legal basis |
|---|---|---|
| Fulfil your order | Manufacture and delivery | Contract, Art. 6(1)(b) |
| Manufacture to the dimensions you supply | Same | Contract, Art. 6(1)(b) |
| Invoicing and accounts | Statutory obligation | Legal obligation, Art. 6(1)(c) |
| Correspond with you | Answering your enquiries | Contract / legitimate interest, Art. 6(1)(f) |
| Keep records of your checkout confirmations | Establishing and defending legal claims; evidencing that we sell only to adults | Legitimate interest, Art. 6(1)(f) — section 6 |
| Secure the website | Preventing fraud and attack | Legitimate interest, Art. 6(1)(f) |
| Count visitors | Assessing how the site and its content perform | Legitimate interest, Art. 6(1)(f) — aggregated, section 9 |
| Send the newsletter | You asked to receive it | Consent, Art. 6(1)(a) |
We carry out no automated decision-making and no profiling.
4. How we treat the record that you bought from us
A record that you bought from us is sensitive, whatever its formal classification in data-protection law. We treat it accordingly:
- We collect only what we need to manufacture and deliver your order.
- Only one person can access it: the managing director who runs the business.
- We do no profiling, segmentation or marketing analysis.
- No advertising networks operate on our website, and we do not use purchase data for targeting.
- We do not disclose what you bought to anyone outside those listed in section 5.
- Your parcel is plain and unbranded, with nothing to indicate the contents or the sender.
- If you pay by card, your statement will show WICKEDERGONOMY.COM, our shop’s name, not a product name. We give you the exact wording in your order confirmation.
5. Who we share it with
We disclose your personal data only to the following, and only so far as necessary:
- Stripe Payments Europe, Limited (Ireland) — card payment processing
- Mollie B.V. — payment processing for other payment methods
- The carrier — your name, address and contact details, for delivery
- Számlázz.hu — invoicing, as Hungarian law requires
- Hostinger — hosting. Your data is held on servers in Germany
- Cloudflare — traffic filtering and visitor statistics; processes IP addresses in transit
- MailPoet — newsletter delivery, if you subscribe
- Public authorities, where we are legally required to
We do not sell your personal data, do not disclose it to advertisers, and do not disclose it to anyone for their own marketing.
Where we transfer data outside the EEA, we rely on the European Commission’s standard contractual clauses.
6. Records of what you confirm at checkout
Before you can place an order, you confirm your age and acknowledge our safety and sale terms. We keep a record of each confirmation:
- which documents you accepted, and the version of each;
- the exact wording shown to you at that moment, stored in full;
- the date and time;
- the IP address you gave it from.
Why we keep it: our legitimate interest in establishing and defending legal claims, and in evidencing that we sell only to adults. Given what we sell, being able to establish precisely what you were shown and what you accepted protects you as much as it protects us.
How we store it: in a tamper-evident archive that cannot be altered after the fact, with an offline copy. A record that could be changed afterwards would have no evidential value.
We do not keep all of it for the same length of time. The wording of each document version is our own text and identifies nobody, so we keep it indefinitely. The record of which order accepted which version, and when, is what may be needed to answer a claim, so we keep that for fifteen years. Your IP address is deleted after two years — it is useful for fraud and attribution close to the time of the order and loses that value quickly, so we do not hold it for the life of the rest of the record. Section 9 sets out each period.
What this means if you ask us to erase it: because these records exist to evidence what was agreed, we may refuse a request to delete them where they remain necessary for the establishment or defence of a legal claim. We will tell you if we rely on this. It does not affect deletion of your other data.
7. Your body dimensions
The dimensions you supply for made-to-measure items — wrist, hand, neck and similar — are used to manufacture your item, and to remake it if a fault is our responsibility.
They are not health data. We draw no health inference from them, and we do not disclose them.
8. Your age
You confirm that you are 18 or over when you enter the site, and again at checkout. We record the checkout confirmation as described in section 6. We neither ask for nor hold identity documents.
9. How long we keep things
| Data | How long | Why |
|---|---|---|
| Orders and invoices | 8 years | Hungarian accounting law |
| Which order accepted which document version, and when | 15 years | The period during which a product-liability claim may be brought, including where an injury emerges late |
| The IP address recorded with that confirmation | 2 years | Fraud and attribution — its usefulness for that decays quickly |
| The wording of each document version | Indefinitely | Our own text. It identifies nobody, and keeping it is what lets us reproduce exactly what you accepted |
| Body dimensions | 2 years | The conformity period, so that we can remake an item |
| Newsletter subscription | Until you unsubscribe | Consent |
| Server and security logs (including IP addresses) | 6 months | Detecting attack and fraud |
| Aggregated visitor statistics (nothing identifiable) | Indefinitely | Not personal data |
Statistics and logs. We count visits and then discard the identifying data. The underlying logs, which contain IP addresses, are deleted after six months. What remains is aggregate totals from which no one can be identified, and which are consequently outside the scope of the Regulation.
Confirmation records. We keep these longest because a claim about a product may be brought considerably later than we need to hold accounting records. The period that applies is the one during which such a claim may be made, not the one governing bookkeeping — and under the revised EU product-liability rules that period extends where an injury emerges only after some years. We keep the part that would answer such a claim, and delete the part that would not: the IP address goes at two years, the acceptance record stays for fifteen.
10. Cookies
We use the cookies necessary to operate the site: your basket and your session. If you arrive through a partner link, the referring partner is recorded within that same session so that they can be credited; we set no separate cookie for it.
We do not currently operate any analytics. If we do in future, we will ask for your consent first.
We use no advertising cookies, and none of our cookies tracks you across other websites.
11. Your rights
You may ask us to:
- give you access to the data we hold about you;
- correct anything that is wrong;
- erase it — subject to section 6, and to records we are required by law to keep;
- restrict what we do with it, or object to it;
- give you a copy in a portable format;
and you may withdraw your consent to the newsletter at any time, which does not affect anything we sent before that.
Write to info@wickedergonomy.com and we will answer within one month. You need not justify a request, and making one has no effect on your relationship with us.
12. Security
The site runs over HTTPS. Stripe and Mollie process payment entirely on their own systems. Administrative access requires two-factor authentication. We hold the confirmation records in a tamper-evident store with an offline copy.
No system is entirely secure. If a breach affects you, we will notify you in accordance with the Regulation.
13. Changes to this policy
We publish amended versions here with their date. We keep previous versions, so that the version applying at the time of your order can be established.
Last updated: 10 September 2026