Privacy Policy

Last updated: HZ Performance

This Privacy Policy explains how HZ Performance collects, uses and protects your personal data when you use our online shop, in accordance with the EU General Data Protection Regulation (GDPR).

1. Data We Collect
Order data (name, email, phone, shipping address, order details); payment data (processed by Stripe - we receive only a confirmation and identifier, never your full card number); technical data (IP address, basic device/browser info) used for security and fraud prevention.

2. How We Use Your Data
To process and deliver your order and provide order tracking; to send transactional emails (order confirmation, shipping updates); to prevent fraud and secure our systems; to comply with legal and tax obligations.

3. Legal Bases
We process order and payment data to perform our contract with you, technical data on the basis of our legitimate interest in securing the service, and other data with your consent where required.

4. Sharing Your Data
We share data only with processors necessary to fulfil your order: our payment provider (Stripe), shipping carriers, and our email/hosting providers. We do not sell your personal data.

5. Retention
We keep order and invoice records for as long as required by tax and accounting law (typically up to 10 years).

6. Your Rights
You have the right to access, rectify, erase, restrict or object to processing of your personal data, and to data portability. Contact support@hzperformance.test to exercise these rights. You may also lodge a complaint with your local data protection authority.

7. Cookies
We use only strictly necessary cookies required for the shopping session, security (CSRF) and checkout. We do not use advertising or third-party tracking cookies.

8. Contact
For any privacy question, email support@hzperformance.test.