Privacy Policy

1. Data we collect

When you place an order we collect only what fulfilment requires:

• your name,
• your email address (order confirmation and support),
• your shipping address (street, city, ZIP, country),
• the contents and status of your orders.

We do not collect payment card numbers or wallet credentials — payments run entirely on our payment partner's hosted page.

2. Why we process it

We process your data to fulfil the purchase contract (Art. 6(1)(b) GDPR): taking payment, packing and shipping your cards, and handling returns or support requests. Order records are also kept to meet accounting and tax obligations (Art. 6(1)(c) GDPR).

3. Processors

Our payment partner processes your email and the order amount to execute the payment. For card payments, its card onramp partner may perform a one-time identity verification (KYC) — that data stays with the onramp partner and is never shared with us. Shipping carriers receive your name and delivery address only.

4. Retention

Order data is kept for the period required by Slovak accounting and tax law (up to 10 years), after which it is deleted. Support correspondence is deleted after 2 years.

5. Your rights

You have the right to access, rectify, erase or restrict processing of your personal data, the right to data portability, and the right to object. To exercise any of them, email shop@vaultpokes.com — we respond within 30 days. You may also lodge a complaint with the Slovak data protection authority (Úrad na ochranu osobných údajov).

6. Cookies & local storage

This shop uses no tracking cookies. The only browser storage we use is technically essential: your shopping cart is stored in your browser's localStorage so it survives a page reload, and a session cookie keeps the admin area locked to the shop owner. No analytics, no advertising, no third-party trackers.