Privacy Policy

Effective from 13 August 2026

This Privacy Policy explains how the BluSyntax online store processes your personal data when you visit the website, make a purchase, receive digital products, use your customer account, or communicate with us.

1. Details of the Data Controller

Data Controller: Blum Barbara, sole proprietor
Trading name: BluSyntax
Registered address: Dr. Kolta László utca 45/C, Ground Floor 3, 7150 Bonyhád, Hungary
Sole trader registration number: 61541685
Tax number: 91616229-1-37
EU VAT number: HU91616229
Email: hello@blusyntax.com
Telephone: +36 70 947 8689
Online store: https://blusyntax.com

The Data Controller has not appointed a Data Protection Officer, as it is not required to do so under the applicable legislation.

2. Scope of this Policy

This Policy applies to visitors to the BluSyntax online store, customers, users with a customer account, and individuals who contact BluSyntax.

The online store sells digital products, including Google Sheets-based planners and related digital user guides. No physical products are shipped.

3. Personal Data We Process

BluSyntax may process the following personal data:

• your name;
• your email address;
• your telephone number, if you provide it;
• your billing address;
• your company name, tax number, or EU VAT number if you request a business invoice;
• your order number, the product purchased, the purchase price, currency, and date of the order;
• your payment method, payment status, and transaction details;
• the fact and date of your declaration requesting immediate digital performance and acknowledging the loss of your right of withdrawal;
• information relating to the delivery, download, and access limit of the digital product;
• information relating to refund, cancellation, and customer service requests;
• information associated with your customer account;
• the content of your communications with us;
• your IP address and browser, device, and network information;
• usage information collected by cookies and similar technologies;
• your marketing and cookie consent preferences.

BluSyntax does not have access to your full payment card number, security code, or other complete card details. These details are processed by the relevant payment service provider.

4. Purposes, Legal Bases, and Retention Periods

4.1. Operating the Online Store

Purpose: displaying and technically operating the website, maintaining its security, and using essential cookies.
Legal basis: the legitimate interest of the Data Controller in maintaining a secure and functional online store and taking steps prior to entering into a contract.
Retention: technical logs and cookies are retained for the periods determined by Shopify or specified in the cookie settings.

4.2. Processing Orders and Delivering Digital Products

Purpose: receiving and processing orders, processing payments, confirming purchases, delivering digital files and Google Sheets links, and managing orders.
Legal basis: performance of a contract or taking steps at your request before entering into a contract.
Retention: five years from the performance of the contract, in line with the limitation period applicable to civil law claims.

Providing the information required to fulfil an order is mandatory. Without this information, BluSyntax cannot process the order or deliver the digital product.

4.3. Processing Payments

Purpose: enabling and verifying payment and preventing fraudulent or unauthorised transactions.
Legal basis: performance of a contract and the legitimate interests of the Data Controller and the payment service providers in fraud prevention and payment security.
Retention: transaction and accounting information is retained for the period required under applicable accounting and tax legislation.

4.4. Invoicing and Accounting Obligations

Purpose: issuing, delivering, and retaining electronic invoices and submitting mandatory invoice information to the Hungarian National Tax and Customs Administration.
Legal basis: compliance with a legal obligation to which the Data Controller is subject.
Retention: accounting records and the information on which they are based are retained for at least eight years.

4.5. Recording the Declaration Relating to Immediate Digital Performance

Purpose: proving that the customer expressly requested the immediate performance of the digital content contract and acknowledged the loss of the 14-day right of withdrawal once performance begins.
Legal basis: compliance with a legal obligation and the legitimate interest of the Data Controller in being able to prove the content of the contract and the customer’s declaration.
Retention: five years from the performance of the contract or, in the event of a dispute, until the dispute has been finally resolved.

4.6. Customer Accounts and Self-Service Requests

Purpose: allowing customers to view previous orders, manage access to digital products, and submit refund or cancellation requests.
Legal basis: performance of a contract and provision of a service requested by you.
Retention: until the customer account is deleted. Billing, contractual, and other information that must be retained by law may continue to be stored after the customer account is deleted until the applicable retention period expires.

4.7. Communication and Customer Support

Purpose: responding to questions, providing technical assistance, and handling delivery problems, refunds, and other customer service matters.
Legal basis: performance of a contract, taking steps prior to entering into a contract, or the legitimate interest of the Data Controller in responding to enquiries.
Retention: one year after the matter is closed. Communications relating to a contract or legal claim may be retained for up to five years.

4.8. Handling Consumer Complaints

Purpose: investigating, responding to, and documenting consumer complaints.
Legal basis: compliance with a legal obligation to which the Data Controller is subject.
Retention: copies of complaints and the responses provided are retained for three years.

4.9. Marketing Communications

Purpose: sending newsletters, offers, and other marketing messages where you have provided separate consent.
Legal basis: your freely given consent.
Retention: until you withdraw your consent or the relevant marketing activity is discontinued.

You may withdraw your consent at any time by using the unsubscribe option included in the message or by contacting BluSyntax. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal. Consent to marketing is not a condition of purchase.

4.10. Non-Essential Cookies, Analytics, and Personalisation

Purpose: analysing the use of the website, improving its performance, personalising content and, where applicable, displaying relevant advertisements.
Legal basis: your prior consent.
Retention: for the period specified for each cookie or until you withdraw your consent.

For visitors in the European Economic Area, non-essential cookies and tracking technologies are used only after consent has been provided. You may change your cookie preferences at any time using the “Cookie preferences” link in the footer of the online store.

4.11. Security and Fraud Prevention

Purpose: protecting the online store, customers, payments, and user accounts and detecting and preventing fraudulent or unlawful activity.
Legal basis: the legitimate interests of the Data Controller, Shopify, and the relevant payment service providers.
Retention: for the period required to investigate the security event and manage any related legal claims.

5. Sources of Personal Data

We may receive personal data:

• directly from you;
• through your use of the online store or customer account;
• through cookies and similar technologies;
• from Shopify, payment service providers, and applications used to operate the online store.

6. Processors and Recipients

BluSyntax shares only the personal data necessary to provide its services, comply with legal obligations, or achieve the purposes described in this Policy.

Shopify

The online store is operated by Shopify International Limited. Shopify provides services including hosting, checkout, customer accounts, order management, digital product delivery, payment solutions, fraud prevention, and certain analytics functions.

Personal data relating to customers in the EEA, the United Kingdom, and Switzerland is initially processed by Shopify International Limited in Ireland. Shopify may use affiliated companies and subprocessors.

Further information:
https://www.shopify.com/legal/privacy/consumers
https://privacy.shopify.com

Shopify Network Intelligence

Shopify Network Intelligence is enabled for this online store. Shopify may use information about your activity in the store together with other Shopify data to provide Enhanced Services, such as personalising the shopping experience, producing analytics, improving services, and supporting more relevant advertising.

For these purposes, Shopify may also act as an independent data controller. In the EEA, processing based on non-essential cookies and tracking technologies takes place only with your consent. You may object to certain processing carried out by Shopify or exercise your rights regarding data processed by Shopify at https://privacy.shopify.com.

Payment Service Providers and Financial Institutions

Payment information is processed by the payment service providers available at checkout, in particular Shopify Payments and Shop Pay, as well as the relevant banks and payment card networks. These service providers may also process information under their own privacy policies.

Számlázz.hu and the Invoicing Integration

Electronic invoices are issued and delivered using KBOSS.hu Kft. (Számlázz.hu). The connection between Shopify and Számlázz.hu is provided by 2023 Projects, Inc.

Where required by law, invoice information is also disclosed to the Hungarian National Tax and Customs Administration.

Google

BluSyntax may use Google services for email communication and to provide access to Google Sheets-based digital products.

When you open a Google Sheets link and create your own copy, you use Google’s services under Google’s own terms and privacy policy. BluSyntax does not have access to the content of the private Google Sheets copy created by you.

Consent Recording Application

The online store uses the RT: Terms and Conditions Box application provided by RoarTheme to display the mandatory declaration relating to immediate digital performance, require its acceptance, and record the fact and date of acceptance in the order details.

Authorities and Other Recipients

Personal data may also be disclosed to competent authorities, courts, and legal advisers where required by law, in response to a lawful authority request, in legal proceedings, or for the establishment, exercise, or defence of legal claims.

7. International Data Transfers

Shopify, Google, 2023 Projects, Inc., and other service providers may process personal data outside the European Economic Area.

Where personal data is transferred internationally, appropriate safeguards are used, such as an adequacy decision of the European Commission, Standard Contractual Clauses, or another transfer mechanism recognised under the GDPR.

8. Automated Decision-Making

BluSyntax does not make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you.

Shopify and payment service providers may use automated systems to identify potentially fraudulent transactions. Further information is available in the privacy policies of the relevant service providers.

9. Data Security

BluSyntax and its service providers apply reasonable technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, loss, or destruction.

No electronic system can be considered completely risk-free. Please do not send sensitive information to us through unsecured communication channels.

10. Your Rights

Subject to the conditions set out in applicable law, you have the right to:

• request information about and access to your personal data;
• request the correction of inaccurate personal data;
• request the deletion of your personal data;
• request the restriction of processing;
• receive personal data that you provided in a portable format;
• object to processing based on legitimate interests;
• withdraw your consent at any time;
• lodge a complaint with a supervisory authority;
• seek a judicial remedy.

You may submit your request by email to hello@blusyntax.com or by post to the address of the Data Controller.

BluSyntax will respond without undue delay and, as a general rule, within one month of receiving the request. We may need to take reasonable steps to verify your identity before fulfilling the request.

Requests are generally processed free of charge unless a request is manifestly unfounded, excessive, or repetitive.

11. Complaints and Legal Remedies

If you believe that the processing of your personal data infringes applicable law, you may first contact BluSyntax using the contact details provided in this Policy.

You may also lodge a complaint with:

Hungarian National Authority for Data Protection and Freedom of Information (NAIH)
Address: Falk Miksa utca 9–11, 1055 Budapest, Hungary
Postal address: PO Box 9, 1363 Budapest, Hungary
Email: ugyfelszolgalat@naih.hu
Telephone: +36 1 391 1400
Website: https://www.naih.hu

You also have the right to seek a judicial remedy.

If you live in another EEA country, you may also lodge a complaint with the competent supervisory authority in your country of residence.

12. Children’s Personal Data

The online store is not specifically intended for children, and BluSyntax does not knowingly collect personal data from children under the age of 16.

If BluSyntax becomes aware that it is processing such personal data without an appropriate legal basis, it will take the necessary steps to delete it.

13. Third-Party Websites

The online store may contain links to third-party websites, including Google and Shopify services. The processing practices of these external service providers are governed by their own privacy policies.

14. Changes to this Privacy Policy

BluSyntax may update this Policy to reflect changes in its services, technologies, business practices, or legal obligations.

The revised Policy becomes effective when it is published in the online store. Where required by applicable law, BluSyntax may provide a separate notice of material changes.

15. Contact

If you have any questions about this Policy, BluSyntax’s privacy practices, or the exercise of your rights, please contact:

Blum Barbara, sole proprietor – BluSyntax
Email: hello@blusyntax.com
Telephone: +36 70 947 8689
Postal address: Dr. Kolta László utca 45/C, Ground Floor 3, 7150 Bonyhád, Hungary