Privacy Policy

1. Controller and contact

The controller for buyer and platform-account data is Ladislav Hájek. Privacy enquiries can be sent to noreply@dezajn.com.

2. Data categories

• Account data such as email, profile name, username, region, and onboarding status.
• Checkout and order data such as shipping address, billing details, tax IDs, order history, invoices, and legal confirmations.
• Designer payout data such as Stripe connected-account status, withdrawal requests, ledger activity, and payout blocking reasons.
• Support, privacy, DSA, and moderation correspondence submitted through Dezajn forms or support channels.
• Analytics data and visitor identifiers only where non-essential analytics consent has been granted.

3. Purposes and legal bases

• Account creation, login, and security: contract performance and legitimate interests in platform security.
• Order handling, invoicing, and complaint resolution: contract performance and legal obligations.
• Tax, bookkeeping, and fraud controls: legal obligations and legitimate interests.
• Designer payouts and clawback handling: contract performance, legal obligations, and legitimate interests.
• Non-essential analytics cookies and related measurement: consent.

4. Recipients and processors

Dezajn uses third-party processors and service providers including Supabase for application data, Stripe for payments and payout onboarding, Fakturoid for invoicing, Printify for fulfillment, Resend for transactional emails, and Google services where configured for moderation or AI functions. The current vendor register is maintained in the internal subprocessor document.

5. Retention

Retention periods depend on the type of record and the legal basis. Accounting and invoice data are retained for statutory retention periods. Saved profile addresses, support requests, moderation submissions, and analytics identifiers are retained according to the current retention schedule published internally and reflected in operational deletion workflows.

6. Data subject rights

You may request access, rectification, erasure, restriction, portability, or object to qualifying processing. Privacy requests can be submitted via the Privacy Rights Requests page. Dezajn may ask for reasonable identity verification before acting.