Privacy policy

Last updated: May 2, 2026

This Privacy Policy describes how Be Puff (the "Site", "we", "us", or "our") collects, uses, and discloses your personal information when you visit, use our services, or make a purchase from bepuff.shop (the "Site") or otherwise communicate with us (collectively, the "Services").

1. PERSONAL INFORMATION WE COLLECT

When you visit the Site, we collect certain information about your device, your interaction with the Site, and information necessary to process your purchases.

  • Information collected directly from you: Contact details (name, shipping address, billing address), payment information (processed via encrypted gateways), and communication history.

  • Information collected automatically: Device version, IP address, time zone, and cookie data.

  • Affiliate & Referral Data: If you reach our Site via a referral partner, we collect the unique Referral Code to attribute the transaction within our internal, siloed tracking system.

2. HOW WE USE YOUR PERSONAL INFORMATION

We use your personal information to provide our Services to you, fulfill our contract, and comply with legal obligations.

  • Legal Basis (GDPR): As a Czech entity, we process data based on Contractual Necessity, Compliance with Czech Law (statutory retention of invoices), and Legitimate Interest (fraud prevention).

  • Automated Decision-Making: We use automated tools for product recommendations. We do not use automated decision-making or profiling that has a legal or significant effect on you as an individual.

3. DISCLOSURE OF PERSONAL INFORMATION

We share your Personal Information with service providers to help us provide our Services and fulfill our contracts with you.

  • Shopify: We use Shopify to power our online store. Our configuration limits Shopify's ability to use your data for independent profiling.

  • Affiliate Silo: We operate a "Privacy-by-Design" affiliate program. Zero identifiable personal information (names, addresses, or contact details) is shared with our Affiliate/Referral partners. Partners only receive anonymized transaction metadata.

  • Compliance with Law: We may disclose information to respond to subpoenas, search warrants, or to comply with Czech and EU regulatory audits.

4. INTERNATIONAL TRANSFERS & CUSTOMS

As we ship globally, your information may be transferred, stored, and processed outside of your country of residence.

  • Data Residency: Core personal data is maintained on secure servers within the European Economic Area (EEA).

  • Shipping & Customs: For international orders, the minimum necessary data is shared with logistics providers. For high-risk or restricted jurisdictions, the customer acts as the "Importer of Record" and acknowledges that data shared for customs clearance is subject to local laws.

5. SECURITY AND RETENTION

We implement industry-standard security measures, though no method of transmission is 100% secure.

  • Statutory Retention: Pursuant to the Czech Accounting Act, we are legally required to retain transaction and invoice data for a period of 10 years.

  • Account Deletion: Non-essential account data is deleted 24 months after last activity or upon a valid request for erasure, subject to legal overrides.

6. YOUR RIGHTS (EEA & GLOBAL)

Depending on where you live, you have the right to access, correct, or erase your Personal Information.

  • Right to Withdraw: Pursuant to Directive (EU) 2023/2673, you may exercise your right to withdraw from a contract within 14 days via the digital withdrawal mechanism in your account.

  • Complaints: You have the right to lodge a complaint with the Czech Office for Personal Data Protection (ÚOOÚ) at www.uoou.cz.

7. COOKIES AND TRACKING

Our Site utilizes a "Strict Opt-In" cookie architecture. No marketing or analytical cookies are deployed without your affirmative consent. Technical cookies necessary for Site functionality and referral code attribution are active by default but do not store PII.

8. CONTACT

For more information about our privacy practices, or to exercise your rights, please contact our Data Protection Officer at:

Email: bigmoneymoves20@proton.me Address: Be Puff, Kurzova 2222, Hlavní město Praha, 155 00, CZ