Privacy Policy

PoloHub Inc. ("PoloHub", "we", "us", or "our") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you visit our website, use our mobile application, or purchase our products.

This policy applies to all users worldwide. Depending on your location, additional rights and protections may apply to you — see the regional sections below for details specific to residents of the European Economic Area, California, and other jurisdictions.

By using our Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of our Service.

Account & Identity Data: When you create an account or place an order, we collect your name, email address, phone number, billing address, and shipping address.

Payment Data: We collect payment card details necessary to process your transactions. Full card numbers are transmitted directly to our payment processor (Stripe) and are never stored on our servers. We retain only the last four digits, card type, and expiry date for reference.

Design & Content Data: Artwork, images, and files you upload to create custom products. We store these to fulfill your orders and, if you are a registered artist, to list your designs for sale.

Usage Data: We automatically collect information about how you interact with our Service, including pages visited, time spent, clicks, search queries, referral URLs, browser type, operating system, IP address, and device identifiers.

Communications: Records of your correspondence with us via email, chat, or support tickets, including the content of those messages.

Cookies & Tracking: We use cookies, web beacons, and similar technologies. See our Cookie Policy section below for full details.

Order Fulfillment: To process and ship your orders, send order confirmations and tracking updates, and handle returns or refunds.

Account Management: To create and maintain your account, authenticate your identity, and provide customer support.

Personalization: To tailor product recommendations, marketing communications, and on-site content to your interests and browsing history.

Service Improvement: To analyze usage patterns, diagnose technical issues, conduct A/B testing, and develop new features.

Legal Compliance: To comply with applicable laws, respond to lawful requests from public authorities, enforce our Terms of Service, and protect the rights and safety of PoloHub and its users.

Marketing: To send you promotional emails, newsletters, and special offers — but only if you have opted in or we have a legitimate interest, and always with an easy opt-out mechanism.

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.

Service Providers: We share data with trusted vendors who help us operate our business — including payment processors (Stripe), shipping carriers (UPS, FedEx, USPS), cloud infrastructure (AWS), email platforms (SendGrid), and analytics tools (Google Analytics). All providers are bound by data processing agreements.

Artists: If you purchase a design created by a registered artist, we share your order details (product type, quantity) with that artist for royalty calculation purposes only. We never share your personal contact or payment information with artists.

Business Transfers: In the event of a merger, acquisition, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your data is subject to a different privacy policy.

Legal Requirements: We may disclose your information if required by law, court order, or governmental authority, or if we believe disclosure is necessary to protect the rights, property, or safety of PoloHub, our users, or the public.

We use the following categories of cookies: (1) Strictly Necessary — required for the Service to function, such as session authentication and shopping cart persistence. (2) Performance — analytics cookies that help us understand how visitors interact with our site. (3) Functional — cookies that remember your preferences, such as language or region. (4) Marketing — used to deliver relevant advertisements and track campaign effectiveness.

You can control cookie preferences through our Cookie Consent banner (shown on first visit) or through your browser settings. Disabling certain cookies may affect the functionality of our Service.

We use Google Analytics with IP anonymization enabled. You may opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on.

We participate in interest-based advertising programs. You can opt out via the Digital Advertising Alliance (optout.aboutads.info) or the Network Advertising Initiative (optout.networkadvertising.org).

We implement industry-standard security measures to protect your personal information, including 256-bit SSL/TLS encryption for data in transit, AES-256 encryption for sensitive data at rest, role-based access controls, regular security audits and penetration testing, and multi-factor authentication for all internal systems.

Our payment processing is handled entirely by Stripe, a PCI DSS Level 1 certified provider. We never handle raw card data on our own servers.

Despite our best efforts, no security system is impenetrable. In the event of a data breach that is likely to result in risk to your rights and freedoms, we will notify you and relevant authorities within 72 hours of becoming aware, as required by applicable law.

You are responsible for maintaining the confidentiality of your account password. We recommend using a strong, unique password and enabling two-factor authentication.

We retain your personal information for as long as your account is active or as needed to provide our services. Specifically: account data is retained for the lifetime of your account plus 2 years; order records are retained for 7 years to comply with tax and accounting regulations; uploaded design files are retained until you delete them or close your account; usage and analytics data is retained for 26 months.

When you close your account, we will delete or anonymize your personal data within 90 days, except where retention is required for legal, regulatory, or legitimate business purposes.

Backup copies of deleted data may persist in encrypted form for up to 90 additional days before being permanently purged from our systems.

Depending on your location, you may have the following rights regarding your personal data: Access — request a copy of the personal data we hold about you. Correction — request correction of inaccurate or incomplete data. Deletion — request deletion of your personal data ("right to be forgotten"). Portability — receive your data in a structured, machine-readable format. Objection — object to processing of your data for direct marketing or based on legitimate interests. Restriction — request that we limit how we use your data.

To exercise any of these rights, contact us at info@polohub.hu or through your Account Settings page. We will respond within 30 days (or 45 days where permitted by law for complex requests). We may need to verify your identity before processing your request.

You may unsubscribe from marketing emails at any time using the unsubscribe link in any email we send, or by updating your notification preferences in Account Settings. Transactional emails (order confirmations, shipping updates) cannot be opted out of while your account is active.

European Economic Area (GDPR): Our legal bases for processing personal data include contract performance (to fulfill orders), legitimate interests (to improve our Service and prevent fraud), consent (for marketing emails and non-essential cookies), and legal obligation. You have the right to lodge a complaint with your local data protection authority. Our EU representative is PoloHub EU Ltd., Dublin, Ireland.

California (CCPA/CPRA): California residents have the right to know what personal information we collect and how it is used; the right to delete personal information; the right to opt out of the "sale" or "sharing" of personal information (we do not sell personal information); and the right to non-discrimination for exercising these rights. To submit a CCPA request, email info@polohub.hu or call 06-30-6324734.

Other Jurisdictions: We comply with applicable privacy laws in all jurisdictions where we operate, including but not limited to PIPEDA (Canada), LGPD (Brazil), POPIA (South Africa), and PDPA (Thailand). Contact us for jurisdiction-specific information.

Our Service is not directed to children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children under these ages.

If you are a parent or guardian and believe your child has provided us with personal information without your consent, please contact us at info@polohub.hu. We will take prompt steps to delete such information from our systems.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by email (to the address associated with your account) or by posting a prominent notice on our website at least 30 days before the change takes effect.

The date at the top of this policy indicates when it was last revised. We encourage you to review this policy periodically to stay informed about how we protect your information.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Privacy Team:

PoloHub Privacy Team 1138 Budapest, Párkány utca, Hungary Email: info@polohub.hu Phone: 06-30-6324734 Response time: within 5 business days

For EU/EEA inquiries, you may also contact our EU representative at info@polohub.hu.