Privacy Policy

Last updated: March 12, 2026

1. Introduction

Vitalis Technologies Kft. ("we," "our," or "us") operates the Femme Society website and online store (femmesociety.store) as a channel of the Opulent Minds brand. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website, interact with our services, or make a purchase.

Our store is powered by Shopify, which provides the e-commerce infrastructure to operate the website, process transactions, and deliver digital products. By accessing or using our services, you acknowledge that you have read and understood this Privacy Policy.

2. Data Controller

The data controller responsible for processing your personal data is:

Vitalis Technologies Kft.
6503 Baja, Sárköz u. 4., Hungary
Company Registration: 03-09-140141 (Bács-Kiskun Megyei Cégbíróság)
Tax Number: 33011291-2-03
EU VAT Number: HU33011291
Email: opulentminds01@gmail.com

3. What Personal Information We Collect

3.1 Information You Provide

When you make a purchase or contact us, we may collect:

  • Full name
  • Email address
  • Phone number (if provided)
  • Billing address
  • Order and transaction details

3.2 Information Collected Automatically

When you visit our website, certain technical information may be collected automatically:

  • IP address
  • Device type and operating system
  • Browser type and version
  • Pages visited and time spent
  • Referring website

3.3 Payment Information

Payment card details are processed directly by our payment providers (Shopify Payments / Stripe, PayPal, Apple Pay). We do not store or have access to your full credit card numbers.

4. Purposes and Legal Bases for Processing

Under the EU General Data Protection Regulation (GDPR), we process your personal data for the following purposes and on the following legal bases:

PurposeLegal Basis
Processing and fulfilling your orderPerformance of contract (Art. 6(1)(b) GDPR)
Payment processing via Shopify/Stripe/PayPalPerformance of contract (Art. 6(1)(b) GDPR)
Sending order confirmation and delivery emailsPerformance of contract (Art. 6(1)(b) GDPR)
Maintaining accounting and tax recordsLegal obligation (Art. 6(1)(c) GDPR)
Fraud prevention and website securityLegitimate interest (Art. 6(1)(f) GDPR)
Essential website functionality cookiesLegitimate interest (Art. 6(1)(f) GDPR)
Customer support and complaint handlingPerformance of contract (Art. 6(1)(b) GDPR)

We do not use your personal data for email marketing, promotional campaigns, newsletters, or automated advertising unless you have given separate, explicit consent.

5. Third-Party Service Providers

We share your personal data with the following categories of service providers, who act as data processors on our behalf or as independent data controllers:

  • Shopify Inc. — E-commerce platform, order management, and hosting. Shopify acts as a data processor for standard services and as a data controller for Enhanced Services (analytics). See Shopify's Privacy Policy.
  • Stripe, Inc. — Payment processing (underlying processor for Shopify Payments).
  • PayPal Holdings, Inc. — Alternative payment processing (if enabled).
  • Netlify, Inc. — Website hosting and content delivery.

We may also maintain a presence on social media platforms including Instagram, TikTok, and YouTube. These platforms may provide aggregated engagement statistics and are governed by their own privacy policies.

6. International Data Transfers

Our website is hosted by Netlify and our e-commerce platform is Shopify, both of which store and process data in Canada and the United States. As a result, your personal data may be transferred to or processed in countries outside the European Economic Area (EEA).

These transfers are protected by the following safeguards:

  • Canada: The European Commission has issued an adequacy decision for Canada (for organizations covered by PIPEDA). Shopify Inc. is headquartered in Canada and is covered by this decision.
  • United States: Transfers are governed by Standard Contractual Clauses (SCCs) as adopted by the European Commission (2021 version).

Shopify's Data Processing Addendum (DPA), which includes SCCs, is automatically part of the Shopify Terms of Service. For a list of Shopify's sub-processors, see Shopify's Sub-processor List.

7. Data Retention

We retain your personal data for the following periods:

Data CategoryRetention PeriodReason
Order and transaction records8 yearsHungarian accounting law (Számviteli tv. 169. §)
Invoice data8 yearsHungarian tax law
Customer email correspondence5 yearsCivil law statute of limitations
Server logs (IP, device info)12 monthsWebsite security (legitimate interest)
Cookie consent recordsDuration of consent + 1 yearGDPR accountability

8. Your Rights

8.1 Rights Under EU/EEA Law (GDPR)

If you are located in the EU/EEA, you have the following rights:

  • Right of Access (Art. 15) — Obtain a copy of your personal data
  • Right to Rectification (Art. 16) — Correct inaccurate data
  • Right to Erasure (Art. 17) — Request deletion of your data ("right to be forgotten")
  • Right to Restriction (Art. 18) — Restrict certain processing
  • Right to Data Portability (Art. 20) — Receive your data in a machine-readable format
  • Right to Object (Art. 21) — Object to processing based on legitimate interest
  • Right Regarding Automated Decisions (Art. 22) — Not be subject to solely automated decision-making
  • Right to Withdraw Consent (Art. 7(3)) — Withdraw consent at any time, without affecting the lawfulness of processing based on consent before withdrawal

To exercise these rights, contact us at opulentminds01@gmail.com. We will respond within one month (extendable to three months for complex requests). We may verify your identity before processing your request.

8.2 Right to Lodge a Complaint (NAIH)

You have the right to lodge a complaint with the Hungarian data protection supervisory authority:

Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH)
Address: 1055 Budapest, Falk Miksa utca 9-11., Hungary
Phone: +36 1 391-1400
Email: ugyfelszolgalat@naih.hu
Website: www.naih.hu

8.3 Rights Under US State Privacy Laws

If you are a resident of a US state with applicable privacy legislation (such as California, Colorado, Connecticut, Virginia, or other states with consumer privacy laws), you may have additional rights including:

  • The right to know what personal information we collect and how it is used
  • The right to request deletion of your personal information
  • The right to opt out of the sale or sharing of personal information
  • The right to non-discrimination for exercising your privacy rights

We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising. To exercise any of these rights, contact us at opulentminds01@gmail.com.

9. Cookies

Our website uses cookies that are strictly necessary for the operation of the Shopify e-commerce platform. These cookies allow the website to function correctly, maintain sessions, and process purchases securely. We do not currently use analytics or marketing cookies.

For detailed information about cookies, see our Cookie Policy.

10. Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects concerning you or similarly significantly affects you.

11. Children's Privacy

Our services are intended for individuals who are at least 16 years old (or the age of digital consent in your jurisdiction). We do not knowingly collect personal information from children under 16. If you believe a child under 16 has provided us with personal information, please contact us and we will promptly delete it.

12. Security

We implement reasonable technical and organizational measures to protect your personal data from unauthorized access, loss, misuse, or alteration. All payment processing is PCI DSS compliant through our payment providers. However, no method of electronic transmission or storage is 100% secure.

13. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those websites and encourage you to read their privacy policies.

14. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

15. Contact Us

For any questions about this Privacy Policy, your personal data, or to exercise your rights:

Vitalis Technologies Kft.
6503 Baja, Sárköz u. 4., Hungary
Email: opulentminds01@gmail.com