top of page

Privacy Policy

​

 

Last Updated: December 11, 2025
This policy is effective as of December 11, 2025.

 

At INDIRACING z.s. (operating as INDI CREW), we are committed to protecting your personal data.
This Privacy Policy describes how we collect, use, store, and protect your information in accordance with:

  • Regulation (EU) 2016/679 (GDPR)

  • Czech Act No. 110/2019 Coll. (Personal Data Processing Act)

  • Other applicable EU and Czech privacy regulations

​

By using our website or services, you acknowledge that you have read and understood this Privacy Policy.

 

1. Data Controller

  • Data Controller: INDIRACING z.s.

  • Registered Address: č.p. 31, 289 26 Stará Lysá, Czech Republic

  • Contact Email: indi23crew@gmail.com

​

We do not currently appoint a Data Protection Officer (DPO), as this is not required under GDPR for our activities.

 

2. Personal Data We Collect

2.1 Categories of Data

We may collect the following types of personal data:

​

Identification & Contact Information

  • Name

  • Email address

  • Phone number

  • Shipping and billing address

​

Order & Transaction Data

  • Purchased items

  • Order history

  • Chosen sizes, colors, designs

  • Payment confirmation information (payment details are NOT stored by us)

​

Payment Information

Processed securely by:

  • Stripe

  • Wix Payments

We never store your full payment card details.

​

Website Usage Data

Collected via cookies and tracking tools:

  • IP address

  • Browser type and version

  • Device identifiers

  • Pages visited

  • Interaction data

​

User-Generated Data

  • Information you submit via contact forms or email correspondence

​

2.2 How We Collect Data

We collect data when you:

  • Place an order

  • Create or access an account

  • Contact us by email or through forms

  • Browse our website (via cookies and analytics)

  • Accept or customize cookie preferences

 

3. Purpose of Processing

We process your data for the following purposes:​

​

✔ Order Processing & Delivery

  • fulfilling and delivering orders

  • customer communication

  • issuing invoices

  • processing payments​

​

✔ Customer Support

  • responding to questions or complaints

  • managing returns and warranty claims​

​

✔ Website Operation & Improvements

  • maintaining security

  • analyzing website performance

  • personalizing user experience​​

​

✔ Legal Compliance

  • compliance with tax, accounting, and consumer protection laws

  • maintaining transaction records​

​

✔ Marketing Communications (Only With Your Consent)

  • newsletters

  • product updates

  • promotions

​

You may withdraw marketing consent at any time.​​​

​

4. Legal Basis for Processing

We process personal data under these GDPR legal bases:

4.1 Performance of a Contract (Article 6(1)(b))

   To:

  • process orders

  • deliver products

  • manage payments

  • provide customer support

4.2 Legal Obligation (Article 6(1)(c))
   For:​

  • tax and accounting obligations

  • warranty and complaint handling

  • consumer rights com

4.3 Legitimate Interests (Article 6(1)(f))

   For:

  • site security

  • fraud prevention

  • analytics and service improvements

4.4 Consent (Article 6(1)(a))

   For:

  • marketing communications

  • optional cookies (marketing, analytics, functional)

You can withdraw consent anytime via:

  • email

  • “unsubscribe” links

  • cookie settings menu

​

5. Data Sharing

We share personal data only when necessary.​

5.1 Service Providers​

​

✔ Printful

   For:

  • order production

  • fulfillment

  • shipping
    (They receive only the minimum data required to process your order.)    ​

​

✔ Wix

   For:

  • hosting the website

  • providing secure infrastructure

  • analytics

  • operating the Cookie Consent Manager

  • processing payments (Wix Payments)​

​

✔ Stripe

   For:

  • secure payment processing

​

All service providers comply with GDPR and implement appropriate security measures.​

​

5.2 Legal or Regulatory Requirements

We may disclose your data to:

  • tax authorities

  • law enforcement authorities

  • supervisory authorities

Only when required by law.

 

6. Data Retention

We retain data only as long as necessary.

​

Order & Accounting Data:

10 years (required by Czech tax law)

​

Customer Support / Complaint Records:

Up to 3 years after resolution

​

Marketing Data:

Until you withdraw consent

​

Cookie & Analytics Data:

As defined in your cookie settings and Cookie Policy

​

7. Cookies & Tracking Technologies

7.1 Cookie Use

Our website uses cookies for:

  • essential site functionality

  • analytics

  • personalization

  • marketing (only with consent)

7.2 Cookie Management

Our site uses the Wix GDPR-compliant Cookie Consent Manager, which allows you to:

  • Accept all cookies

  • Decline all non-essential cookies

  • Customize cookie preferences

​

You can change or withdraw your cookie choices at any time via the “Cookie settings” button.

For full details, see our Cookies Policy.

 

8. Your GDPR Rights

Under GDPR, you have the following rights:

  • Right to Access – obtain a copy of your data

  • Right to Rectification – correct inaccurate information

  • Right to Erasure (“right to be forgotten”)

  • Right to Restriction of Processing

  • Right to Data Portability

  • Right to Object to processing based on legitimate interests or marketing

  • Right to Withdraw Consent at any time

​

To exercise any of these rights, email: indi23crew@gmail.com

 

9. Data Security

We take appropriate measures to protect your data, including:

  • SSL encryption

  • access controls

  • secure hosting via Wix

  • regular security audits

  • encrypted payment processing by Stripe and Wix Payments

​

While no system is 100% secure, we ensure compliance with GDPR standards.

 

10. International Data Transfers

Your data may be transferred outside the EU/EEA because:

  • Wix and Printful operate globally

  • Stripe may process payments outside the EU

All transfers rely on GDPR-compliant safeguards, such as:

  • Standard Contractual Clauses (SCCs)

  • Approved international transfer mechanisms

​

Our service providers are required to protect your data appropriately.

 

11. Complaints

If you believe your data protection rights have been violated, you may file a complaint with:

 

12. Updates to This Privacy Policy

We may update this Privacy Policy to reflect changes in law or business operations.
The latest version will always be posted on our website with the updated “Last Updated” date.

​

13. Additional Policies​

 

For questions or concerns about this Privacy Policy, contact us at:

​

bottom of page