Privacy Policy

for the online store NOX Equipment

Last updated: October 5, 2026

These principles explain how NOXunity Group s.r.o. processes the personal data of website visitors, customers, registered users, and other individuals who interact with us through the online store www.nox-equipment.com.

We process personal data primarily in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (“GDPR”) and related legal regulations of the Czech Republic.

1. WHO IS THE CONTROLLER OF PERSONAL DATA

The personal data controller is:

NOXunity Group s.r.o.

Company ID (IČO): 23986620
VAT ID (DIČ): CZ23986620
Registered office: Antonína Petrofa 2116/16, 500 09 Hradec Králové
E-mail: hello@nox-equipment.com
Phone: +420 731 225 333

(hereinafter referred to as the “controller,” “NOX Equipment,” or “we”)

For matters related to personal data protection, you can contact us via e-mail at hello@nox-equipment.com.

2. WHAT PERSONAL DATA WE PROCESS

Depending on how you use our online store and services, we may process, in particular, the following personal data:

• identification data – in particular, first name, last name, company name, Company ID, and VAT ID,

• contact data – in particular, e-mail address, phone number, billing and delivery address,

• order and transaction data – in particular, ordered goods, value and date of the order, shipping and payment method, order status, order history, and payment-related data,

• customer account data – in particular, data related to registration, settings, and use of the customer account,

• communication data – in particular, content of inquiries, e-mail communication, complaints, requests, reviews, and other communication with us,

• technical and online data – in particular, IP address, device and browser information, cookies and similar identifiers, and information about the use of our websites,

• marketing data and preferences – for example, information about granted consents, newsletter subscriptions, and cookie settings,

• other data that you voluntarily provide to us.

The specific scope of processed data depends on which services or features of the online store you use.

3. WHERE WE OBTAIN PERSONAL DATA

We obtain personal data primarily:

• directly from you when creating an order, registering a customer account, filling out a form, or when communicating with us,

• automatically when using our websites, especially through cookies and similar technologies,

• from payment, shipping, or technical service providers if it is necessary for processing an order or operating the online store,

• via the Shopify platform and other services we use to operate the online store.

4. FOR WHAT PURPOSES AND ON WHAT LEGAL BASIS WE PROCESS DATA

4.1. Order fulfillment and contract performance

We process personal data for the purpose of receiving and processing orders, concluding and fulfilling purchase contracts, ensuring payment, delivering goods, communication regarding the order, returning or exchanging goods, and handling claims for defective performance.

Legal basis: performance of a contract or taking steps prior to entering into a contract pursuant to Article 6(1)(b) GDPR.

4.2. Fulfillment of accounting, tax, and other legal obligations

We process and store certain personal data because we are required to do so by legal regulations, particularly accounting and tax regulations.

Legal basis: fulfillment of a legal obligation pursuant to Article 6(1)(c) GDPR.

4.3. Customer support, inquiries, and complaints

If you contact us, we process your personal data for the purpose of handling your inquiry, request, complaint, or other communication.

Legal basis: depending on the nature of the communication, in particular, performance of a contract pursuant to Article 6(1)(b) GDPR or our legitimate interest in providing customer support and protecting our rights pursuant to Article 6(1)(f) GDPR.

4.4. Customer account

If you create a customer account, we process the personal data necessary for its creation, operation, security, and management.

Legal basis: performance of a contract pursuant to Article 6(1)(b) GDPR.

4.5. Commercial communications to existing customers

If you have made a purchase from us, we may send you commercial communications regarding our own similar products or services under the conditions established by law.

You can simply and free of charge unsubscribe from these commercial communications at any time, especially via the link provided in each commercial communication.

Legal basis: our legitimate interest in direct marketing pursuant to Article 6(1)(f) GDPR, while complying with the rules for sending commercial communications.

4.6. Newsletter based on consent

If you sign up for a newsletter without meeting the conditions for sending commercial communications to existing customers, we process your data based on your consent.

You can withdraw your consent at any time, especially by clicking the unsubscribe link in the respective e-mail.

Legal basis: consent pursuant to Article 6(1)(a) GDPR.

Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.

4.7. Reviews and ratings

If you post a rating or review through our online store, we may process the data necessary for its receipt, publication, and potential verification of whether it comes from a customer who actually purchased the given product.

Legal basis: in particular, our legitimate interest in a transparent and trustworthy rating system pursuant to Article 6(1)(f) GDPR, or another appropriate legal basis depending on the specific method of processing.

4.8. Security, fraud prevention, and protection of rights

We may process personal data for the purpose of protecting and securing the online store, preventing fraudulent or other misuse, evaluating risky orders, resolving disputes, and protecting our legal claims.

Legal basis: our legitimate interest pursuant to Article 6(1)(f) GDPR.

4.9. Analytics, marketing, and personalization

If you grant us consent via the cookie banner, we may use analytical and marketing cookies and similar technologies, especially for measuring traffic, analyzing the use of the online store, measuring the effectiveness of advertising campaigns, personalizing content and advertising, and remarketing.

Legal basis: consent pursuant to Article 6(1)(a) GDPR.

You can change or withdraw your consent at any time through the cookie settings on our website.

5. HOW LONG WE STORE PERSONAL DATA

We store personal data only for the time necessary for the purpose for which it is processed, or for the period established by legal regulations.

Typically:

• data related to an order and contract – for the duration of the contractual relationship and subsequently for the time necessary for the protection and exercise of legal claims,

• accounting and tax documents – for the period established by relevant legal regulations, generally 5 to 10 years depending on the type of document,

• data related to complaints – for the time necessary to resolve the complaint and subsequently for the time necessary for the protection of legal claims,

• customer account data – for the existence of the customer account and subsequently for the time necessary for fulfilling legal obligations or protecting our rights,

• data processed for direct marketing based on legitimate interest – until you object or our legitimate interest ceases,

• data processed based on consent – until withdrawal of consent or the expiry of the period for which consent was granted,

• cookies and similar identifiers – according to their specific validity period and settings.

After the expiry of the relevant period, we will delete or anonymize personal data unless its further storage is required by law.

6. TO WHOM WE TRANSFER PERSONAL DATA

We may transfer personal data to the necessary extent to entities that help us operate the online store or fulfill our contractual and legal obligations.

These are primarily:

• the provider of the e-commerce platform Shopify,

• providers of payment services and payment gateways,

• carriers and operators of collection points according to the shipping method chosen by the customer,

• providers of accounting, tax, and legal services,

• providers of e-mail and marketing services,

• providers of hosting, IT, security, and customer services,

• providers of analytical and marketing services if you have granted consent to their use,

• public authorities if we are required by law to transfer the data.

We transfer personal data only to the extent necessary for the given purpose.

If a recipient acts as our processor, processing is carried out based on an appropriate contractual relationship and according to our instructions.

Some recipients may in certain cases act as independent controllers of personal data.

7. SHOPIFY

Our online store is operated through the Shopify platform.

Shopify provides us with the technical infrastructure necessary for operating the online store, and in connection with providing these services, it may process the personal data of our customers and visitors.

In cases where Shopify processes personal data on our behalf, it generally acts as a personal data processor.

For some services and features, Shopify may also process certain personal data as an independent controller, especially if a customer directly uses services provided by Shopify or if we use features for which this is stipulated by Shopify's terms and conditions.

More detailed information about the processing of personal data by Shopify is available in Shopify's privacy policy.

8. TRANSFER OF PERSONAL DATA OUTSIDE THE EEA

Some of our service providers or their further processors may be located or process personal data outside the European Economic Area (“EEA”).

This may concern, in particular, providers of technology, e-commerce, analytical, marketing, communication, or cloud services.

If personal data is transferred to a country for which the European Commission has not issued an adequacy decision, the transfer is based on an appropriate legal mechanism, in particular, standard contractual clauses approved by the European Commission, or another mechanism under the GDPR.

In connection with the operation of our online store, personal data may be processed in particular through the following services:

• Shopify,

• Google,

Meta,

• Maileon,

• customer communication and chat tools,

• analytical and marketing tools,

• other technical service providers that we currently use.

The specific involvement of these services depends on the features of the online store and your consent settings.

9. AUTOMATED DECISION-MAKING AND PROFILING

We do not perform automated individual decision-making that would be based solely on automated processing and have legal effects for you or significantly affect you in a similar way within the meaning of Article 22 GDPR, unless we expressly inform you about such processing.

When using analytical and marketing tools, certain profiling may occur based on your consent, for example, for the purpose of measuring campaigns, creating audiences, or personalizing advertising.

Such profiling in itself does not constitute automated decision-making with legal or similarly significant effects within the meaning of Article 22 GDPR.

10. YOUR RIGHTS

In connection with the processing of personal data, under the conditions set by the GDPR, you have in particular:

• the right to access your personal data,

• the right to rectification of inaccurate or incomplete data,

• the right to erasure of personal data,

• the right to restriction of processing,

• the right to data portability,

• the right to object to processing based on our legitimate interest,

• the right to withdraw consent at any time if processing is based on consent,

• the right to lodge a complaint with a relevant supervisory authority.

If we process personal data for direct marketing purposes, you have the right to object to such processing at any time. If you object, we will no longer process your personal data for direct marketing purposes.

The supervisory authority in the Czech Republic is:

The Office for Personal Data Protection
Pplk. Sochora 27
170 00 Prague 7
www.uoou.gov.cz

11. HOW YOU CAN EXERCISE YOUR RIGHTS

You can exercise your rights via e-mail at hello@nox-equipment.com or in writing at the address:

NOXunity Group s.r.o.
Antonína Petrofa 2116/16
500 09 Hradec Králové

In case of reasonable doubts about the identity of the person submitting the request, we may request the provision of additional information necessary to verify their identity.

We respond to requests in accordance with the time limits set by the GDPR.

12. COOKIES AND SIMILAR TECHNOLOGIES

On our websites, we use cookies and similar technologies.

12.1. Necessary cookies

These cookies are necessary for the proper and secure functioning of the online store, for example, for the shopping cart function, logging in, security, or saving user settings.

If these technologies are strictly necessary for providing the service requested by the user, consent is not required for their use.

12.2. Analytical cookies

We use analytical cookies only based on your consent, if consent is required by law.

They help us, for example, to understand how visitors use our online store and which parts are most frequently visited.

12.3. Marketing cookies

We use marketing cookies and similar technologies only based on your consent, if consent is required by law.

They may be used in particular for measuring advertising campaigns, remarketing, and displaying more relevant advertising.

12.4. Cookie settings

Upon your first visit to the website, you can choose which optional cookies you allow via the cookie banner.

You can change or withdraw your consent at any time through the cookie settings available on our website.

Refusing optional cookies does not affect your ability to use the basic functions of the online store.

13. PERSONAL DATA SECURITY

We adopt appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration, or unauthorized disclosure.

Access to personal data is restricted to persons who need it for the performance of their work or contractual obligations, or to our contractual service providers to the necessary extent.

14. THIRD-PARTY LINKS AND SERVICES

Our websites may contain links to third-party websites or services.

We are not responsible for the way these third parties process personal data in their capacity as controllers. We therefore recommend that you also read their own privacy policies.

15. CHANGES TO THESE PRINCIPLES

We may update these principles on an ongoing basis, particularly in connection with changes in legal regulations, used technologies, or services.

The current version will always be published on this page together with the date of the last update.

These privacy principles are effective from October 5, 2026.