Privacy policy

Last updated: 5 October 2026

These rules describe which personal data we process when you order on this site, why, for how long, and which rights you have under Regulation (EU) 2016/679 (GDPR).

1. Data controller

The controller is Easy Peasy Group Limited, a company registered in Hong Kong (Registration number: 72561395), Flat A, 15/F, Goldfield Industrial Building, 144-150 Tai Lin Pai Road, Kwai Chung, New Territories, Hong Kong. Email: info@inflamestore.com.

2. What data we process

name,
phone number,
delivery address,
if you arrive from an advert, the click identifier in the page URL (gclid, fbclid or ref), sent with the order as source_ref.
technical data that our web host records in its server logs when you open a page: IP address, date and time, the page requested, and browser and device type.

The order form does not ask for an email address or payment data: you pay cash to the courier. You do not type the click identifier; the offer page copies it from the advert link only so we know which advert brought the order. We do not use it to build advertising profiles on this site and we do not sell it.

3. Why we process it and on what legal basis

Performance of a contract (Art. 6(1)(b) GDPR): phone confirmation, delivery and, where needed, a return or warranty claim.
Legal obligation (Art. 6(1)(c) GDPR): keeping accounting and tax records.
Legitimate interest (Art. 6(1)(f) GDPR): handling complaints and defending our rights.
Legitimate interest (Art. 6(1)(f) GDPR): keeping the website secure and preventing abuse, using our web host’s server logs.
Legitimate interest (Art. 6(1)(f) GDPR): finding out which advert led to an order, using the click identifier sent with the order (source_ref). It is not stored in your browser, and you can object at any time by email.

We call you only to confirm your order. We do not use your phone number for marketing.

4. Who we pass it to

We share your name, phone and address only with those who need them to process the order:

the carrier — delivery and cash-on-delivery collection;
our web host, Hostinger — running the website and storing the order data sent through the form;
a call centre in the European Union — confirming the order by calling the number from the form.

We do not pass the data for marketing and we do not sell it.

The controller is established in Hong Kong, outside the European Economic Area. The GDPR applies to us directly because we sell to customers in the EU. Where your data are transferred from the EEA to us or to service providers outside the EEA, we protect them with the Standard Contractual Clauses adopted by the European Commission (Implementing Decision (EU) 2021/914). You can ask us for a copy by email. The call centre that makes the confirmation call is in the EU.

5. How long we keep it

Order data are kept for the legal warranty of conformity, 24 months from receipt, and then for as long as accounting and tax rules require. Unconfirmed orders are deleted after 30 days.

Server logs are kept by our web host only for as long as needed to keep the site secure, and are then deleted automatically.

6. Your rights

access and a copy,
rectification,
erasure, when we no longer need the data,
restriction of processing,
portability,
objection to processing based on legitimate interest.

Write to info@inflamestore.com. We reply within one month. The phone number from the order is enough to identify you.

7. Complaint to a supervisory authority

You can complain to the authority in the EU country of your habitual residence. For the markets we ship to, those include:

Hungary — NAIH, naih.hu
Poland — UODO, uodo.gov.pl
Slovakia — ÚOOÚ, uoou.sk
Spain — AEPD, aepd.es
Latvia — DVI, dvi.gov.lv
Romania — ANSPDCP, dataprotection.ro
Germany — BfDI, bfdi.bund.de
Czechia — ÚOOÚ, uoou.cz
Croatia — AZOP, azop.hr
Slovenia — IP, ip-rs.si
Lithuania — VDAI, vdai.lrv.lt

8. Cookies

This site does not use analytics, advertising or third-party cookies. It only stores your choice on the consent notice, in the browser. Detail in the Cookie policy.