PRIVACY POLICY

Last updated: August 9, 2026

This Privacy Policy explains how YNAKÍ s.r.o. (“YNAKÍ”, “we”, “us” or “our”) collects, uses, stores and shares your personal data when you visit ynaki.com, make a purchase, create an account, subscribe to marketing communications or otherwise interact with us.

Our online store is hosted by Shopify, which provides the e-commerce platform that enables us to offer our products and services to you.

Please read this Privacy Policy carefully. By using our website, you acknowledge that you have read and understood how we process personal data as described below.

1. DATA CONTROLLER

The controller responsible for processing your personal data is:

YNAKÍ s.r.o.
Company ID: 21984409
Registered office: Plzeňská 3352/156, Smíchov, 150 00 Prague 5, Czech Republic
Email: info@ynaki.com
Telephone: +420 722 333 575 / +421 908 456 240

1. PERSONAL DATA WE COLLECT

Depending on how you interact with us, we may collect and process the following categories of personal data:

Contact information

Your name, billing and delivery address, email address and telephone number.

Order and transaction information

Information about products you view, place in your cart, purchase, return or cancel, together with order numbers, transaction records, delivery details and purchase history.

Payment information

Information required to process your payment, such as the selected payment method, payment status and transaction confirmation.

Payments are processed by Shopify and the relevant payment service providers. We do not normally receive or store your complete payment card number.

Account information

Your account login information, order history, saved preferences and account settings, if you choose to create a customer account.

Communications

Information you provide when contacting us by email, telephone, contact form, social media or another communication channel.

Marketing preferences

Information about whether you have subscribed to our newsletter or consented to personalised marketing and advertising.

Device and usage information

Your IP address, browser type, device information, operating system, network connection, approximate location, cookie identifiers and information about how you interact with our website.

1. HOW WE COLLECT PERSONAL DATA

We collect personal data:

• directly from you when you place an order, create an account, subscribe to our newsletter, contact us or otherwise provide information to us;

• automatically when you browse or use our website, including through cookies and similar technologies;

• from Shopify and other service providers that process information on our behalf;

• from delivery companies, payment providers, marketing platforms and other partners involved in providing our services;

• from third parties where permitted by law and where they have a lawful basis to share the information with us.

1. HOW AND WHY WE USE PERSONAL DATA

We process personal data only where we have a valid legal basis under applicable data protection law.

Processing orders and providing our services

We use your personal data to:

• process and fulfil orders;

• process payments;

• arrange delivery or collection;

• communicate with you about your order;

• manage returns, refunds, exchanges and complaints;

• maintain and manage your customer account;

• provide customer support.

Legal basis: Processing is necessary to perform a contract with you or to take steps at your request before entering into a contract.

Complying with legal obligations

We process and retain certain personal data to comply with tax, accounting, consumer protection and other legal obligations.

Legal basis: Compliance with a legal obligation.

Marketing and newsletters

Where you have subscribed, we may use your email address and marketing preferences to send you news, product updates, invitations and promotional communications.

In cases permitted by applicable law, we may contact existing customers about similar products. You may unsubscribe at any time by clicking the unsubscribe link in an email or by contacting us at info@ynaki.com.

Legal basis: Your consent or, where permitted by law, our legitimate interest in communicating with existing customers. You always have the right to object to direct marketing.

Website analytics and improvement

Subject to your cookie choices, we may analyse how visitors use our website to understand performance, improve navigation, develop our products and create a better shopping experience.

Legal basis: Your consent where required for non-essential analytics cookies. Limited processing strictly necessary for the operation and security of the website may be based on our legitimate interests.

Personalised advertising

Subject to your consent, we may use cookies and similar technologies to measure advertising performance and show you more relevant advertising on third-party platforms.

Legal basis: Your consent.

Security and fraud prevention

We process certain account, transaction, device and usage information to protect our website, customers and business, prevent fraudulent transactions, detect misuse and maintain the security of our services.

Legal basis: Our legitimate interests in protecting our services, customers and business, and compliance with legal obligations where applicable.

Establishing and defending legal claims

We may process personal data where necessary to establish, exercise or defend legal claims, resolve disputes and enforce our agreements and policies.

Legal basis: Our legitimate interests and compliance with legal obligations.

1. WHEN YOU MUST PROVIDE PERSONAL DATA

Certain information is required to process an order, accept payment, deliver products or comply with legal obligations.

If you do not provide the necessary information, we may be unable to complete your order or provide the requested service. Providing information for marketing purposes is voluntary and is not required to make a purchase.

1. COOKIES AND SIMILAR TECHNOLOGIES

Our website uses cookies and similar technologies.

Essential cookies are necessary for the website, shopping cart, checkout, security and other core functions to work. These cookies do not require consent where they are strictly necessary.

Analytics, preference and advertising cookies are used only in accordance with your choices and where required with your prior consent.

You can manage or withdraw your cookie preferences through the cookie settings available on our website. Withdrawing consent does not affect the lawfulness of processing carried out before consent was withdrawn.

Disabling certain cookies may affect some website features. Further information about the cookies in use, their providers and duration is available through our cookie preference centre.

1. MARKETING COMMUNICATIONS

If you subscribe to our newsletter, we may send you information about new collections, products, events and other YNAKÍ news.

You can unsubscribe at any time by:

• clicking the unsubscribe link in any marketing email;

• changing your communication preferences, where this option is available;

• contacting us at info@ynaki.com.

Unsubscribing from marketing does not prevent us from sending non-marketing communications relating to your orders, customer account or requests.

We may retain a limited record of your opt-out request to ensure that we respect your communication preference.

1. HOW WE SHARE PERSONAL DATA

We may share personal data only where necessary and for the purposes described in this Privacy Policy.

Recipients may include:

• Shopify, which hosts and supports our online store;

• payment service providers and financial institutions;

• delivery, fulfilment and logistics providers;

• IT, hosting, cloud storage and security providers;

• email, customer support and communication providers;

• analytics and advertising providers, subject to your consent where required;

• accountants, auditors, legal advisers and other professional advisers;

• public authorities, courts or law enforcement agencies where disclosure is required by law;

• parties involved in a merger, acquisition, restructuring or sale of all or part of our business, subject to appropriate confidentiality and data protection measures.

Service providers acting on our behalf may process personal data only in accordance with our instructions, their contractual obligations and applicable data protection law.

We do not sell personal data in the ordinary meaning of the word.

1. RELATIONSHIP WITH SHOPIFY

Our store is hosted by Shopify. Shopify processes personal data about your access to and use of our online store to provide and improve its services, support checkout and payments, maintain security and enable e-commerce functions.

Information submitted through our store may be transmitted to Shopify and other service providers located outside the country where you live.

In some circumstances, Shopify may process personal data for its own purposes as an independent controller. You can learn more about Shopify’s processing practices and your rights in the Shopify Consumer Privacy Policy:

https://www.shopify.com/legal/privacy/consumers

You can also access Shopify’s privacy portal at:

https://privacy.shopify.com/en

1. INTERNATIONAL DATA TRANSFERS

Some of our service providers may process personal data outside the European Economic Area or the United Kingdom.

Where personal data is transferred to a country that has not been recognised as providing an adequate level of data protection, we use appropriate safeguards required by applicable law. These may include the European Commission’s Standard Contractual Clauses or another legally recognised transfer mechanism.

You may contact us at info@ynaki.com for further information about the safeguards used for international transfers.

1. DATA RETENTION

We retain personal data only for as long as necessary for the purposes for which it was collected, including to provide our services, comply with legal obligations, resolve disputes and establish or defend legal claims.

The applicable retention period depends on the type of data and purpose of processing:

• order, transaction, accounting and tax records are retained for the periods required under applicable Czech law, generally for 5 or 10 years depending on the type of record;

• customer account information is retained while the account remains active and for a reasonable period afterwards, unless earlier deletion is requested and no legal reason requires continued retention;

• customer service communications are retained for as long as necessary to resolve the request and for any applicable limitation period;

• marketing data is retained until you withdraw consent, object to marketing or the data is no longer required for the relevant marketing purpose;

• cookie and analytics information is retained according to the duration stated in our cookie preference centre;

• information required for legal claims, fraud prevention or security may be retained for the applicable legal limitation period.

When personal data is no longer required, it will be deleted, anonymised or securely archived where continued retention is required by law.

1. SECURITY

We use appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

However, no method of electronic transmission or storage is completely secure. We therefore cannot guarantee absolute security.

You are responsible for keeping your account credentials confidential. Please do not share your password or account access information with anyone.

1. YOUR DATA PROTECTION RIGHTS

Depending on your location and subject to the conditions of applicable law, you may have the following rights:

Right of access

You may request confirmation of whether we process your personal data and obtain access to that data.

Right to rectification

You may ask us to correct inaccurate or incomplete personal data.

Right to erasure

You may request deletion of your personal data where there is no longer a lawful reason for us to retain it.

Right to restriction

You may request that we restrict the processing of your personal data in certain circumstances.

Right to data portability

Where processing is based on consent or a contract and carried out by automated means, you may request your personal data in a structured, commonly used and machine-readable format.

Right to object

You may object to processing based on our legitimate interests. You have an absolute right to object to the use of your personal data for direct marketing.

Right to withdraw consent

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

Right to lodge a complaint

You may lodge a complaint with the competent data protection authority, particularly in the country where you live or work or where you believe a violation occurred.

To exercise your rights, contact us at info@ynaki.com. We may need to verify your identity before responding to your request.

We will respond without undue delay and normally within one month. Where permitted by law, this period may be extended for complex or multiple requests, in which case we will inform you.

These rights are not absolute and may be subject to legal limitations or exceptions.

1. COMPLAINTS

If you have concerns about how we process your personal data, please contact us first at info@ynaki.com so that we can try to resolve the matter.

You also have the right to lodge a complaint with the Czech supervisory authority:

Office for Personal Data Protection
Úřad pro ochranu osobních údajů
Pplk. Sochora 27
170 00 Prague 7
Czech Republic
Website: https://uoou.gov.cz

If you live in another EEA country, you may contact the data protection authority in that country.

1. AUTOMATED DECISION-MAKING

We do not make decisions that produce legal or similarly significant effects concerning you based solely on automated processing.

We may use limited automated tools for fraud prevention, security, product recommendations or advertising, subject to applicable law and your cookie choices. These tools do not normally produce legal or similarly significant effects.

1. CHILDREN’S PRIVACY

Our website and products are not directed at children, and we do not knowingly collect personal data from children below the age at which they may lawfully provide consent in their jurisdiction.

If you believe that a child has provided us with personal data without the necessary authorisation, please contact us at info@ynaki.com so that we can take appropriate action.

1. THIRD-PARTY WEBSITES

Our website may contain links to websites, social media platforms or services operated by third parties.

We are not responsible for the privacy, security or content of third-party services. We recommend reviewing their privacy policies before providing personal data to them.

1. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy to reflect changes to our practices, services, technology or legal obligations.

The updated version will be published on this page with a revised “Last updated” date. Where required by law, we will provide additional notice of material changes.

1. CONTACT

If you have questions about this Privacy Policy or would like to exercise your data protection rights, please contact us:

YNAKÍ s.r.o.
Company ID: 21984409
Registered office: Plzeňská 3352/156, Smíchov, 150 00 Prague 5, Czech Republic
Email: info@ynaki.com
Telephone: +420 722 333 575 / +421 908 456 240

For the purposes of applicable data protection laws, YNAKÍ s.r.o. is the controller of your personal data.