Privacy policy

Effective date: August 3, 2026

My Premium Sport ("we," "us," "our") operates the website mypremiumsport.deals (the "Services"). This Privacy Policy explains what personal information we collect, why, and what rights you have over it. It's written for our customers across the European Union, United Kingdom, and elsewhere.

Who we are. My Premium Sport is the trading name of Jiří Houra, a sole trader (OSVČ) registered in the Czech Republic under company identification number (IČO) 07398751, with a registered seat at Náměstí Přemyslovců 163/20, 280 02 Nymburk, Czech Republic. For the purposes of the GDPR, Jiří Houra is the data controller of the personal information described below. Because our business is established within the EU, we are not required to appoint a separate EU representative under Article 27 GDPR.

Data protection contact. Given the size and nature of our processing (a small online retailer that does not carry out large-scale systematic monitoring or process special-category data at scale), we are not legally required to appoint a formal Data Protection Officer under Article 37 GDPR, and we have not appointed one. For any privacy question, request, or complaint, contact us directly at hourajiripersonal@gmail.com.

Personal information we collect

Contact details — name, billing and shipping address, phone number, email address.
Financial information — processed by our payment provider ([PAYMENT PROCESSOR NAME — TO BE COMPLETED]); we do not store full card numbers ourselves.
Account information — if you create a customer account: username, password (stored encrypted), order history, saved addresses.
Transaction information — items viewed, added to cart, purchased, returned, or exchanged.
Communications — anything you send us, e.g. a support request.
Device and usage information — IP address, browser type, and how you interact with the Services, collected via cookies and similar technologies as described in our cookie banner and privacy settings.

Why we process your information, and our legal basis

Purpose	What we do	Legal basis (GDPR Art. 6)
Taking and fulfilling your order	Processing payment, arranging shipping, customer service for that order	Performance of a contract (Art. 6(1)(b))
Managing your account, if you create one	Storing login details, order history	Performance of a contract (Art. 6(1)(b))
Fraud prevention and store security	Screening orders for fraud risk, securing our systems	Legitimate interests (Art. 6(1)(f)) — preventing fraud and protecting our business and customers
Marketing emails, if you've opted in	Sending you offers or updates by email	Consent (Art. 6(1)(a)) — withdrawable at any time via the unsubscribe link
Complying with tax, accounting, and consumer-law obligations	Keeping transaction records for the periods required by Czech and EU law	Legal obligation (Art. 6(1)(c))
Improving our Services	Basic aggregated analytics on how the store is used	Legitimate interests (Art. 6(1)(f)), balanced against your privacy — you can object at any time

We do not use your personal information for automated decision-making or profiling that produces legal or similarly significant effects on you.

Who we share it with

Shopify, our e-commerce platform provider, which hosts the Services and processes data on our instructions under its Data Processing Addendum.
Our payment processor ([PAYMENT PROCESSOR NAME — TO BE COMPLETED]), to process your payment securely.
Our fulfillment and logistics partners, including DSers and BigBuy, to ship your order — some of these partners are located outside the EU/EEA; see International Transfers below.
IT and analytics service providers, where used, to help run and improve the store.
Legal and regulatory authorities, where required by law.

We do not sell your personal information, and we do not share it with third parties for their own independent marketing purposes without your consent.

International transfers

Because we work with fulfillment partners for some products — and because international shipping is a core part of how this store operates, not an edge case — your order information (name, shipping address, order contents) is regularly transferred to and processed in countries outside the European Economic Area, including countries that have not been found to provide an equivalent level of data protection. Where this happens, we rely on appropriate safeguards recognized under GDPR, such as the European Commission's Standard Contractual Clauses, to protect your information.

How long we keep your information

We keep order and transaction records for as long as required by Czech tax and accounting law (generally several years after the transaction), and account information for as long as your account remains active. We delete or anonymize personal information when it's no longer needed for these purposes.

Your rights

If you're in the EEA, UK, or Switzerland, you have the right to:

Access the personal information we hold about you.
Rectify inaccurate information.
Erase your information, subject to legal retention requirements (e.g., we must keep certain transaction records for tax purposes even after an erasure request).
Restrict or object to certain processing, particularly processing based on our legitimate interests.
Data portability — receive your data in a portable format.
Withdraw consent at any time, where we rely on consent (e.g., marketing emails), without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, email us at hourajiripersonal@gmail.com. We'll respond within 30 days, as required by GDPR. You also have the right to lodge a complaint with a supervisory authority — in the Czech Republic, this is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů, uoou.gov.cz), or the data protection authority in your own EU country of residence.

Cookies

We use cookies and similar technologies, including a cookie consent banner that lets you choose which non-essential cookies to accept. See our cookie banner for details and to manage your preferences at any time.

Children's data

Our Services are not directed at children, and we do not knowingly collect personal information from anyone under the age of digital consent in their jurisdiction (16 in most EU countries, though some set it as low as 13). If you believe a child has provided us with personal information, contact us and we'll delete it.

Changes to this policy

We may update this Privacy Policy from time to time. We'll update the effective date above and, for material changes, take reasonable steps to notify you (e.g., a notice on our site).