Privacy Policy

Effective Date

16th of March, 2026

Who We Are

Your privacy matters. This page explains what data we collect, how we use it, and your choices.

Data Controller: Petra Stračiaková
Address: Nové Sady 2, Brno 602 00, Czech Republic
Email: hello@denshoo.com

Personal Data We Collect

Depending on how you use the website, we may process the following categories of personal data:

• Identification data (name, username)
• Contact data (email address)
• Billing and transaction data (billing address, purchase history, VAT information where applicable)
• Technical data (IP address, browser type, device information)
• Usage data (pages visited, interaction with content)
• Marketing and communication preferences

We collect this data directly from you, automatically through website technologies, or from service providers involved in analytics and advertising.

Comments

When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

Legal basis: Consent (when you submit a comment).

Media

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Legal basis: Consent / Legitimate interest (preventing harm or misuse).

Cookies

If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

We use cookies and similar technologies:

1. Functional cookies: These cookies are essential for the website to function correctly. They allow features such as keeping items in your shopping cart, logging in, remembering your screen preferences, and maintaining session state across pages. Functional cookies do not track your browsing outside this website and are always active. They are retained only for the duration necessary to support these features (e.g., session cookies or up to one year for login preferences).
2. Statistics cookies: Statistics cookies collect information about how visitors use the site, such as pages viewed, time spent on each page, and interactions with content. For example, Google Analytics collects anonymized data including IP address (anonymized for EU users) and browser information. These cookies help us understand website performance, improve user experience, and identify issues. They are opt-in only and typically retained according to the analytics provider’s settings (usually 14–26 months).
3. Marketing cookies: Marketing cookies track your activity on the website and across third-party sites to deliver relevant advertisements and measure ad effectiveness. This includes data such as pages visited, clicks, conversions, and interactions with marketing campaigns. Services like Meta Ads and Google Ads may also use hashed identifiers via Advanced Matching for targeted advertising. These cookies are opt-in only, and personal data shared with marketing platforms is processed according to your cookie consent preferences.

You can accept, reject, or manage preferences using the banner. Only Functional cookies are always active.

Legal basis: Consent / Legitimate interest.

Embedded Content

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Legal basis: Consent / Legitimate interest.

Third-Party Services

We use the following services:

Google Analytics: Collects anonymous data about how visitors interact with the site. IP anonymization is enabled for EU visitors.

Meta: Used to track website interactions for marketing, ad targeting, and conversion measurement. When enabled, Advanced Matching allows us to send hashed personal identifiers, such as email address, phone number, first and last name, city, ZIP code, or gender, to Meta. This helps improve ad targeting, create lookalike audiences, and measure campaign performance.

All data is processed in accordance with your cookie consent preferences and Meta’s privacy policies: https://www.facebook.com/privacy/policies/ads

MailPoet: Sends newsletters to those who opt in; functional emails (receipts, order confirmations) are necessary for purchases. MailPoet newsletter & emails

If you have subscribed to our newsletter or if you are a member of our website (you can log in) or if you have purchased on our website, there is a good chance you will receive emails from us.

We will only send you emails which you have signed up to receive, or which pertain to the services we provided to you.

To send you emails, we use the name and email address you provide us. Our site also logs the IP address you used when you signed up for the service to prevent abuse of the system.

This website can send emails through the MailPoet Sending Service. This service allows us to track opens and clicks on our emails. We use this information to improve the content of our newsletters.

No identifiable information is otherwise tracked outside this website except for the email address.

Below is a list of cookies that may be generated by MailPoet (note that some cookies are only utilized when WooCommerce is installed and activated):

Cookie name: mailpoet_page_view
Cookie expiry: 3,650 days.
Cookie description: The purpose of this cookie is to track the last time a subscriber viewed any page on the site.

Cookie name: mailpoet_revenue_tracking
Cookie expiry: 14 days.
Cookie description: The purpose of this cookie is to track which newsletter sent from your website has acquired a click-through and a subsequent purchase in your WooCommerce store.

Cookie name: mailpoet_subscriber
Cookie expiry: 3,650 days.
Cookie description: The purpose of this cookie is to track subscriber engagement. It is used when the user logs in, signs up in a form, confirms subscription to a newsletter, or places an order through WooCommerce.
Note: User must be opted-in and a confirmed subscriber.

Cookie name: popup_form_dismissed_{$formId}
Cookie expiry: the expiration date varies and can be set per form.
Cookie description: This cookie is used to track if a user has previously dismissed a specific form, preventing the re-display of the form until the cookie’s expiration date. It is applicable for popup, slide-in, or fixed bar forms.

Payment Provider: Securely handles transactions; we never store full payment info.

WooCommerce, WordPress, Astra, Hostinger: Help run and secure the website.

MaxMind: Geolocation service used to determine a visitor’s approximate geographic location based on IP address. This is used for applying correct VAT rates, fraud prevention, security monitoring, and ensuring compliance with regional legal requirements. MaxMind processes IP-based location data but does not provide precise location tracking.

Complianz: This website uses the Privacy Suite for WordPress by Complianz to collect and record Browser and Device-based Consent. For this functionality, your IP address is anonymized and stored in our database. This service does not process any personally identifiable information and does not share any data with the service provider. For more information, see the Complianz Privacy Statement.

LiteSpeed Cache: This site utilises caching in order to facilitate a faster response time and better user experience. Caching potentially stores a duplicate copy of every web page that is on display on this site. All cache files are temporary, and are never accessed by any third party, except as necessary to obtain technical support from the cache plugin vendor. Cache files expire on a schedule set by the site administrator, but may easily be purged by the admin before their natural expiration, if necessary. We may use QUIC.cloud services to process & cache your data temporarily. Please see https://quic.cloud/privacy-policy/ for more details.

These services may use their own cookies and tracking technologies.

Legal basis: Consent for marketing, Contractual necessity for purchases, Legitimate interest for analytics, security, fraud prevention, and VAT compliance.

Recipients of Personal Data

Personal data may be shared with trusted service providers acting as data processors, including hosting providers, payment processors, analytics providers, email delivery services, advertising platforms, and security services. These providers process data only on our documented instructions and in accordance with GDPR.

Legal basis: Consent for marketing, Contractual necessity for purchases, Legitimate interest for analytics, security, fraud prevention, and VAT compliance.

Where processing is based on legitimate interest, we have assessed that our interests (website security, analytics improvement, fraud prevention, and service operation) do not override your fundamental rights and freedoms.

Data Retention

We retain personal data only for as long as necessary for the purposes described:

Consent records: retained for the duration required to demonstrate GDPR compliance.

Comments: stored indefinitely unless deletion is requested

Customer account and order data: retained for up to 10 years to comply with Czech accounting and tax obligations

Newsletter data: retained until consent is withdrawn or subscription is cancelled

Analytics data: retained according to provider settings (typically 14–26 months)

Provision of Data

Providing personal data is voluntary. However, certain data is necessary to create an account, complete purchases, receive newsletters, ensure website functionality. Failure to provide required data may prevent us from delivering requested services.

Your Rights

You have the right to access, correct, or request deletion of your personal data, except for information we must retain for legal reasons. You can also withdraw consent for marketing emails or cookies at any time using the unsubscribe link or cookie preferences banner.

You also have the right to: restrict processing of your personal data; receive a copy of your data in a portable format; object to processing based on legitimate interest; withdraw consent for marketing or cookies; and lodge a complaint with the Czech Data Protection Authority. Úřad pro ochranu osobních údajů (UOOU), Pplk. Sochora 27, 170 00 Prague 7, Czech Republic, www.uoou.cz

Automated Decision-Making and Profiling

We do not make decisions producing legal or similarly significant effects based solely on automated processing.

Advertising platforms (such as Meta and Google) may use profiling to display relevant advertisements based on browsing behavior and interactions with our website, subject to your cookie consent preferences.

International Transfers

Some service providers are located outside the European Economic Area (EEA), including Google and Meta.

Where personal data is transferred outside the EEA, we rely on appropriate safeguards under GDPR Article 46, including the European Commission’s Standard Contractual Clauses (SCCs) and additional technical and organizational measures where required.

Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, or alteration. Measures include secure hosting, encrypted connections (HTTPS), access controls, and regular software updates.

Children’s Privacy

Our site is not intended for children under 16. We do not knowingly collect personal data from children. If you believe we have, contact us to remove it.

Updates to Policy

We may update this policy occasionally. The latest version will always be posted here with a new effective date. Significant changes will be communicated via email or website when appropriate.