At Once@Home, we respect your privacy and are committed to protecting your personal information. We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and other applicable data protection laws.

This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website, place an order, or communicate with us.

1. Who Is Responsible for Your Data?

The data controller responsible for processing your personal information is:

Once@Home s.r.o.
Registered address: Londýnská 254/7, Prague, 120 00, Czech Republic
Company registration number: IČO 09422595
Email: info@onceathome.com

2. What Personal Information We Collect

Depending on how you interact with our website, we may collect:

• Contact information: Your name, email address, telephone number, billing address, and delivery address.
• Order information: Products purchased, order history, payment status, and delivery details.
• Payment information: Information required to process payments. Payment transactions are handled through our payment service providers.
• Technical information: IP address, browser information, device information, and website usage data, where applicable.
• Communication information: Messages, inquiries, and correspondence you send us.

3. How We Use Your Information

We process personal information for the following purposes:

• Order processing and delivery: To confirm purchases, process payments, arrange shipping, and handle returns or refunds.
• Customer service: To respond to inquiries and provide assistance.
• Legal compliance: To meet applicable accounting, tax, and other legal obligations.
• Website operation and security: To maintain and protect our online store.
• Marketing communications: To send promotional information where permitted by applicable law, including where consent is required and has been obtained.
• Website improvement: To understand how visitors use our website, where permitted by applicable law.

4. Legal Basis for Processing

We process personal information only where an appropriate legal basis applies under the GDPR, including:

• Performance of a contract: When processing is necessary to fulfill your order or respond to requests before a purchase.
• Legal obligations: When information must be retained or processed to comply with applicable laws.
• Legitimate interests: Where necessary for appropriate business operations, customer service, or website security, provided these interests do not override your rights.
• Consent: Where required, particularly for certain marketing activities and optional cookies or tracking technologies.

You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5. Sharing Your Personal Information

We may share personal information with trusted service providers where necessary to operate our business, including:

• Our e-commerce platform provider, Shopify.
• Payment processing providers.
• Shipping and delivery companies.
• IT, hosting, and technical service providers.
• Accounting and other professional service providers.

We share only the information reasonably necessary for the relevant purpose and require appropriate safeguards where applicable.

We do not sell your personal information.

6. International Data Transfers

Some service providers may process personal information outside the European Economic Area (EEA).

Where such transfers occur, we apply or rely on appropriate safeguards required under applicable data protection laws, such as adequacy decisions or approved contractual protections, as appropriate.

7. How Long We Keep Your Information

We retain personal information only for as long as necessary for the purposes for which it was collected, including fulfilling orders, providing customer support, complying with legal obligations, and resolving disputes.

Certain transaction and accounting records may need to be retained for periods required by applicable law.

Where processing is based on consent, information will be retained in accordance with the relevant purpose and applicable retention requirements.

8. Your Rights Under the GDPR

Subject to applicable legal conditions, you have the right to:

• Access your personal information.
• Request correction of inaccurate or incomplete information.
• Request deletion of your personal information.
• Request restriction of processing.
• Object to certain types of processing.
• Request data portability where applicable.
• Withdraw consent at any time where processing is based on consent.
• Lodge a complaint with a competent data protection supervisory authority.

In the Czech Republic, the competent supervisory authority is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů, ÚOOÚ). For more information, please visit its official website.

You may also lodge a complaint with the supervisory authority in the EU member state of your habitual residence, place of work, or where the alleged infringement occurred, as provided under the GDPR.

To exercise your rights, please contact us at info@onceathome.com.

We will respond within the time limits required by applicable law.

9. Cookies and Website Technologies

Our website may use cookies and similar technologies to support essential store functionality, remember preferences, understand website performance, and support marketing activities where applicable.

Where required by law, we obtain your consent before using non-essential cookies or similar technologies.

You can manage your cookie preferences through the options available on our website, where provided.

10. Data Security

We take appropriate technical and organizational measures to protect personal information against unauthorized access, disclosure, alteration, or loss.

Although no method of electronic storage or transmission can guarantee absolute security, we continuously aim to maintain appropriate safeguards for the information entrusted to us.

11. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our business practices, legal requirements, or services.

The latest version will always be available on this page.

 

12. Privacy Rights for California Residents

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), where applicable.

These rights may include the right to know what personal information we collect, request access to or deletion of your information, correct inaccurate information, and opt out of the sale or sharing of personal information, as defined by applicable California law.

We respect these rights and will process eligible requests in accordance with applicable legal requirements.

For more information, please visit the California Attorney General's website.

13. How to Exercise Your Privacy Rights

You may contact us at info@onceathome.com to exercise your applicable privacy rights, including requesting access to, correction of, or deletion of your personal information, or objecting to certain types of processing.

Where applicable, you may also withdraw your consent to marketing communications or optional tracking technologies.

We will review and respond to your request in accordance with applicable data protection laws. Certain information may need to be retained where required by law or necessary for other legally permitted purposes.

If our website offers additional privacy preference controls, you may also use those controls to manage your choices.

14. Contact Us

For additional information about purchasing from Once@Home, please refer to our Terms of Service.

If you have questions about this Privacy Policy or how your personal information is processed, please contact:

Once@Home s.r.o.
Email: info@onceathome.com

Last updated: 24.10.2026