PRIVACY POLICY

At Hockey Horizon, we are committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our website or services.

1. WHO WE ARE
Data Controller: Hockey Horizon

2. PERSONAL DATA WE COLLECT
Depending on how you use our website and services, we may collect the following categories of personal data:

Identity data (e.g. name, email address, phone number)

Account data (e.g. login credentials, preferences)

Transaction data (e.g. purchases, billing and payment details)

Communication data (e.g. customer support requests, email correspondence)

Technical data (e.g. IP address, cookie identifiers, browser and device information)

3. WHY WE PROCESS YOUR DATA
We process your personal data only when legally permitted, for purposes such as fulfilling your orders and delivering products, managing and maintaining user accounts, providing customer service and support, sending marketing communications (only with your consent), complying with legal and accounting obligations, and ensuring website security and preventing fraud.

The legal bases for processing are performance of contract, consent, legal obligation, and legitimate interest, as applicable.

4. COOKIES
We use cookies and similar technologies to improve your experience on our website, remember your preferences, and analyze usage. You can refuse or manage cookies via your browser settings or our cookie management tools; however, some website features may not function properly without certain cookies. More details are provided in our Cookie Policy.

5. DATA SHARING
We may share your personal data with trusted partners where necessary, including delivery partners and couriers, payment and financial service providers, IT infrastructure and hosting providers, government and supervisory authorities (where required by law), and legal or debt recovery service providers.

All partners are contractually required to ensure the confidentiality and security of your data.

6. INTERNATIONAL DATA TRANSFERS
If your personal data is transferred outside the EU/EEA, we ensure appropriate safeguards are in place, such as the EU Standard Contractual Clauses (SCCs), technical and organizational measures, and lawful data processing and transfer agreements.

7. DATA RETENTION

We keep your personal data only as long as necessary for the purposes described above or as required by law. For example:

Transactional and accounting data is typically kept for 5 years
Marketing data is kept until you withdraw your consent
User account data is kept as long as the account is active or as legally required

When data is no longer needed, it is deleted or anonymized.

8. YOUR RIGHTS
You have the right to access your personal data, request the correction or deletion of your data, withdraw your consent at any time (where processing is based on consent), object to or request the restriction of certain types of processing, receive your personal data in a structured, commonly used, machine-readable format and request its transfer to another controller (data portability), and lodge a complaint with the Data State Inspectorate (DVI) or another competent supervisory authority.

To exercise these rights, please contact us at [email protected]. We aim to respond to all requests within 30 days. If necessary, we may ask for an electronically signed document to verify your identity.

9. DATA SECURITY
We apply strong technical and organizational measures to protect your personal data, including secure networks, encryption where appropriate, internal access control, and continuous training of our employees regarding data protection and security.

10. POLICY UPDATES
We may revise this Privacy Policy from time to time to reflect changes in legislation, technology, or our internal processes. The most current version will always be available on our website. Continued use of our website and services after any updates constitutes acceptance of the revised Privacy Policy.