Privacy Policy

Last updated: September 22, 2026.

Peter Gulyas Photography operates this store and website, including all related information, content, features, tools, products and services, to provide customers with a personalised shopping experience (the “Services”). Peter Gulyas Photography is powered by Shopify, which enables us to provide the Services. This Privacy Policy describes how we collect, use and disclose your personal information when you visit or use our store, buy products, make other transactions through the Services or otherwise interact with us. If our Terms of Service conflict with this Privacy Policy, this Policy governs the collection, processing and disclosure of personal information.

Please read this Privacy Policy carefully. By accessing or using the Services, you acknowledge that you have read it and understand the collection, use and disclosure of your information as described here.

Personal information we collect or process

“Personal information” means information that identifies or can reasonably be linked to you or another person. It does not include information collected anonymously or de-identified so that you cannot reasonably be identified or linked to it. Depending on how you use the Services, where you live and what applicable law permits or requires, we may collect or process the following categories of personal information, including inferences drawn from them:

• Contact details: name, address, billing and delivery address, telephone number and email address.

• Financial information: credit or debit card and financial account numbers and details, transaction information, payment method, payment confirmation and other payment details.

• Account details: username, password, security questions, preferences and settings.

• Transaction information: products viewed, added to a cart or wish list, purchased, returned, exchanged or cancelled, and your transaction history.

• Communications: information you provide when you contact us, including customer service enquiries.

• Device information: details of your device, browser and network connection, IP address and other unique identifiers.

• Usage information: how and when you use or navigate the Services.

Sources of personal information

We may collect personal information directly from you, including when you create an account, visit or use the Services, contact us or otherwise provide information; automatically through the Services, including from your device and through cookies and similar technologies; from service providers that collect or process information on our behalf or operate technology for us; and from partners or other third parties.

How we use your personal information

We may use personal information for the following purposes, depending on your interaction with us and the Services you use:

• Providing, personalising and improving the Services: performing our contract with you, processing payments, fulfilling orders, remembering your preferences and items of interest, sending account notifications, processing purchases, returns, exchanges and other transactions, establishing and managing your account, arranging shipping, enabling reviews and offering a personalised shopping experience such as product recommendations related to your purchases. We may also use personal information to refine and improve the Services.

• Marketing and advertising: sending marketing, advertising and promotional communications by email, text message or post; and showing online advertisements for products or services in our Services or on other websites, for example based on items you previously bought or added to your cart and your other activity in the Services.

• Security and fraud prevention: authenticating accounts, providing secure payments and purchases, detecting, investigating and acting on suspected fraudulent, illegal, unsafe or malicious activity, protecting public safety and securing our Services. If you register an account, you are responsible for safeguarding your credentials. We strongly recommend that you do not share your username, password or other access details.

• Communication with you: providing customer support, answering enquiries, delivering effective service and maintaining our business relationship with you.

• Legal reasons: complying with applicable laws and responding to valid legal process, including requests from law enforcement or public authorities, discovery in civil litigation, investigating or participating in actual or potential legal disputes, and enforcing or investigating breaches of our terms and policies.

How we disclose personal information

We may disclose your personal information to third parties for lawful purposes consistent with this Policy in the following circumstances:

• To Shopify, vendors and third parties providing services on our behalf, such as IT management, payment processing, data analysis, customer support, cloud storage, fulfilment and shipping.

• To business and marketing partners to provide marketing services and display advertising. For example, we use Shopify to help display personalised ads in third-party services based on your online activity across different merchants and websites. Our partners use your information according to their own privacy notices. Depending on where you live, you may have the right to instruct us not to share your information for targeted advertising and marketing based on such activity.

• When you instruct, request or otherwise consent to disclosure to third parties, for example to arrange delivery or through your use of social-media widgets or sign-in integrations.

• To our affiliates or within our corporate group.

• In connection with business transactions such as a merger or bankruptcy, to comply with legal obligations including subpoenas, search warrants and similar requests, to enforce applicable terms and policies, or to protect the Services, our rights and the rights of our users or others.

Relationship with Shopify

Shopify hosts the Services and collects and processes personal information about your access to and use of the Services to provide and improve them. Information you submit through the Services is transferred to and shared with Shopify and with third parties, who may be located outside your country of residence, to provide and improve the Services. To protect, grow and improve our business, we also use enhanced Shopify features drawing on information from interactions with our store, other merchants and Shopify. To deliver these features, Shopify may use personal information collected from your interactions with our store, other merchants and Shopify. In these circumstances, Shopify is responsible for the processing of that personal information, including responding to requests to exercise your rights concerning that use. For information on Shopify's use of your personal information and your rights, see https://www.shopify.com/legal/privacy/app-users. Depending on your location, you may exercise certain rights through https://privacy.shopify.com/en.

Third-party websites and links

The Services may contain links to websites or online platforms operated by third parties. If you follow links to sites unaffiliated with or not controlled by us, please review their privacy and security policies and other terms. We do not guarantee or accept responsibility for the privacy or security of those sites, including the accuracy, completeness or reliability of their information. Information you provide in public or semi-public spaces, including on third-party social networks, may be visible to other users of the Services or those platforms without our or a third party's ability to restrict its use. Including a link does not, by itself, mean that we endorse the content, owners or operators of a platform unless stated in the Services.

Children's information

The Services are not intended for use by children, and we do not knowingly collect personal information about minors in your care. If you are a parent or guardian of a child who has provided personal information to us, you may contact us below to request its deletion. As of the effective date of this Policy, we have no actual knowledge that we “share” or “sell” the personal information of anyone under 16 as those terms are defined by applicable law.

Security and retention of information

No security measure is perfect or impenetrable, and we cannot guarantee perfect security. Information you transmit may not be secure while in transit; please do not use insecure channels to send sensitive or confidential information to us.

We retain personal information for periods determined by factors such as whether we need it to maintain your account, provide the Services, meet legal obligations, resolve disputes or enforce relevant agreements and policies.

Your rights and choices

Depending on where you live, you may have some or all of the following rights relating to your personal information. These rights are not absolute, may apply only in certain circumstances and, where law permits, we may refuse a request:

• Access: you may request access to personal information we hold about you.

• Deletion: you may request deletion of personal information we hold about you.

• Correction: you may request correction of inaccurate personal information we hold about you.

• Portability: in certain circumstances and subject to exceptions, you may request a copy of your personal information and ask us to transfer it to a third party.

• Managing communication preferences: you can unsubscribe from promotional emails at any time using the unsubscribe option in those messages. We may still send non-promotional emails about your account or orders.

If you live in the United Kingdom or European Economic Area, subject to applicable exceptions and restrictions, you may also have these rights:

• Objection and restriction: you may ask us to stop or restrict certain processing of your personal information.

• Withdrawal of consent: where we rely on your consent to process personal information, you may withdraw it. Withdrawal does not affect the lawfulness of processing based on consent before withdrawal.

You can exercise applicable rights through the options available in the Services or by contacting us below. For more information on how Shopify uses your personal information and your rights concerning data processed by Shopify, visit https://privacy.shopify.com/en.

We will not discriminate against you for exercising your rights. Before processing a request, we may need to verify your identity as permitted or required by law. Where the law permits, you may appoint an authorised representative to submit a request on your behalf. We may ask that person to prove their authorisation and may ask you to verify your identity directly with us. We will respond within the time required by applicable law.

Complaints

If you have a complaint about our handling of your personal information, please contact us using the details below. Depending on where you live, you may have the right to appeal our decision or complain to your local data protection authority. For a list of supervisory authorities in the European Economic Area, see https://edpb.europa.eu/about-edpb/about-edpb/members.

International transfers

Your personal information may be transferred to, stored and processed in countries outside your country of residence. Where we transfer it outside the European Economic Area or United Kingdom, we rely on recognised transfer mechanisms, such as the European Commission's standard contractual clauses or equivalent contracts approved by the relevant UK authority, unless the destination has been recognised as providing an adequate level of protection.

Changes to this Privacy Policy

We may update this Policy from time to time, including to reflect changes in our practices or for operational, legal or regulatory reasons. We will publish the updated Policy on this website, amend the “Last updated” date and provide any notice required by applicable law.

Contact

If you have questions about our privacy practices or this Policy, or wish to exercise any applicable rights, please call +36 30 626 8866, email peter@gulyaspeter.com, or contact us at Damjanich utca 4, Balassagyarmat, 2660, Hungary. We are the controller of your personal information under applicable data protection laws.