Privacy

Privacy Policy

Effective from August 31, 2026.

The data controller is Superman Biohack s.r.o., Company ID 10881662, registered at Pitterova 2855/7, 130 00 Praha 3 (the “controller”). This policy describes what personal data we process about you, for what purpose, and what rights you have in connection with it.

1.What data we process

When you place an order, we process your first and last name, email, phone number, delivery address (if home delivery is selected) or the selected Packeta pickup point, the order contents, and payment details.

When you submit the contact form, we process your name, email, and the content of your message. When you visit the website, we also process technical data necessary for its operation, in particular your IP address — for example to protect the order form against abuse.

2.Purpose and legal basis of processing

We process order data to fulfil the order, deliver the goods, and comply with legal obligations, in particular accounting and tax obligations — the legal basis is performance of a contract and compliance with legal obligations.

We process contact form data to handle your inquiry, based on legitimate interest. We process technical data, in particular the IP address, based on a legitimate interest in securing and protecting the website against abuse.

3.Data retention period

We retain order data for the period required by law, in particular the Accounting Act and the VAT Act, generally for 10 years from the end of the tax period in which the transaction took place. We retain contact form messages for the period necessary to handle the inquiry, for a maximum of 12 months.

4.Recipients and processors

To fulfil orders we use the following processors: Zásilkovna s.r.o. (shipping), our payment gateway provider (payment processing), Supabase (database and technical infrastructure hosting), and Resend (sending transactional emails). The controller has a data processing agreement in place with each processor, or is bound by their equivalent processing terms.

We do not share your personal data with any third parties for marketing purposes.

5.Cookies and local storage

The website does not use tracking or advertising cookies. To operate the shopping cart, to remember your chosen language and currency, and to store your age-verification confirmation, we use browser local storage, which stays exclusively on your device and is not transmitted to our servers.

6.Your rights

In connection with the processing of personal data, you have the right to access your data, to have it rectified or erased, to restrict processing, to data portability, and to object to processing based on legitimate interest. You can exercise your rights by emailing info@supermanbiohack.com.

7.Supervisory authority

If you believe we are processing your personal data in violation of applicable law, you have the right to lodge a complaint with the Czech Office for Personal Data Protection (www.uoou.cz).

Last updated: August 31, 2026.