Privacy Policy

Effective from: 24 January 2026
Online store: Nepeta, https://www.nepeta.cz/

1. Who is the data controller?

The controller of your personal data is Ing. Lucia Brzáková, Company ID No.: 73153346, registered office/place of business: Mládežnická 1310, 373 16 Dobrá Voda u Českých Budějovic, Czech Republic, e-mail: info@nepeta.cz, telephone: +420 773 050 277 (hereinafter the “Controller”).

2. What personal data do we process?

Depending on how you communicate with us and which services you use, we may process the following categories of personal data:

Identification and contact details: first name, surname, e-mail address, telephone number and postal address.
Order information: purchased goods, price, delivery and payment method, order number, billing details and order history.
Communication data: the content of messages sent by e-mail or through online forms, including reviews and complaints.
Technical data relating to website use: cookies and information derived from them, such as your IP address, device or browser identifiers and behaviour on the website.

3. Why do we process your data and on what legal basis?

A) Processing orders and fulfilling purchase agreements — processing your order, delivering the goods, communicating about the order and issuing accounting documents. Legal basis: performance of a contract.

B) Compliance with legal obligations — accounting, tax obligations and other statutory obligations relating to the sale of goods. Legal basis: compliance with a legal obligation.

C) Complaints and customer service — handling complaints, rights arising from defective performance and customer enquiries. Legal basis: performance of a contract, compliance with a legal obligation or legitimate interests, depending on the circumstances.

D) Marketing, newsletters and special offers — sending marketing communications by e-mail. Legal basis: your consent for newsletter subscriptions, or legitimate interests in relation to existing customers to the extent permitted by law. You may unsubscribe at any time using the link in the e-mail or by writing to info@nepeta.cz.

E) Website operation, security and analytics — ensuring the website functions properly, measuring traffic, protecting the website against misuse. Legal basis: legitimate interests for essential technical and security measures, and your consent for analytical and marketing cookies.

4. Who do we share your data with?

We share personal data only to the extent necessary with the following recipients:

Online store platform and hosting: Shoptet, a.s.
Delivery companies: Packeta / Zásilkovna — name, delivery address and contact details.
Payment service providers: the payment gateway provider and our bank — the information necessary to process payments.
Accounting and tax services: an external accountant.

5. How long do we retain your data?

Orders and accounting documents: for the period required by law, usually 10 years.
Complaints and disputes: for the duration of the case and subsequently for as long as necessary to defend our legal rights.
Marketing data: until consent is withdrawn or the recipient unsubscribes.
Cookies: for the period determined by the type of cookie and the settings selected in the consent bar.

6. Cookies and consent management

We use the following types of cookies:

Essential cookies — required for the online store to function; consent is not required.
Analytical cookies — used to measure traffic and improve the website; used on the basis of your consent.
Marketing cookies — used to personalise advertising and measure campaigns; used on the basis of your consent.

You may change your preferences at any time through the cookie settings in the website footer.

7. What are your rights?

You have the right:

to access your personal data,
to have inaccurate data corrected,
to have your data erased, subject to the applicable legal conditions,
to restrict processing,
to data portability,
to object to processing based on legitimate interests,
to withdraw your consent at any time where processing is based on consent.

You may exercise your rights by contacting us at info@nepeta.cz.

8. Where can you submit a complaint?

If you believe that your personal data is being processed in breach of applicable data protection legislation, you may submit a complaint to the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, Czech Republic, www.uoou.gov.cz.

9. Data security

We use appropriate technical and organisational measures designed to prevent the misuse, loss of, or unauthorised access to personal data — for example access controls, encrypted data transmission and regular system updates.

10. Changes to this privacy policy

We may update this Privacy Policy from time to time. The current version is always available at https://www.nepeta.cz/en/privacy-policy/.