Privacy policy

1. What data we process

• Visit statistics: when you enter the site we store only the country (from Cloudflare), the site you came from, the type of device, the language and the page you entered on. Your IP address is not stored in these statistics and no cookies are used for them.
• Browsing without an account: pages visited and the usual technical server data (IP address, browser, time), and clicks to partner shops (which product and from which part of the site), without personal data.
• Account: name, e-mail, phone, password (stored encrypted), language and city, if you register.
• Orders with TodosPy sellers: product, amount, delivery address and phone, order status.
• Messages: what you write through the contact form (name, e-mail, text) and the reports you submit.

2. What we use it for

To make the site work (session, cart, orders, delivery), to answer your messages and complaints, to see which products people are interested in and improve the catalogue, and to prevent abuse and fraud.

3. Cookies

We use one session cookie that is necessary to keep your account signed in. We have no advertising cookies of our own. To measure how the site is used in aggregate we use Google Analytics, which sets statistics cookies (for example _ga); we do not use them for advertising or to identify you. The site runs behind Cloudflare, which may set technical security cookies.

4. Who we share data with

With the seller and the courier of your order, only the data needed to deliver it; with technical providers that host and protect the site (hosting, Cloudflare, e-mail sending); and with authorities when the law requires it. When you press “Buy” on a partner-shop product you leave TodosPy and that shop's policy applies. We do not sell your data.

5. How long we keep it

Account data while you keep the account; orders as long as needed to handle claims and legal obligations; contact messages until your request is resolved and a reasonable time afterwards.

6. Your rights

You can ask for access, correction or deletion of your data by writing to us through the contact form from your account e-mail. We will answer within a reasonable time.

7. Security and minors

We protect access with an encrypted connection (HTTPS) and encrypted password storage. The site is not directed at people under 18.

8. Changes

If we change this policy, the new version will be published on this page with its update date.