Privacy Policy
Last Updated:
1. Who We Are (Data Controller)
888 Wholesale is operated by 888Studios Kft., a company registered in Hungary (company reg. no. 13 09 245507, tax no. 32993745-2-13, EU VAT HU32993745), registered seat 2330 Dunaharaszti, Hungary. We are the data controller responsible for the personal data described in this policy. Full company details are on our Legal Notice page.
For any privacy question or to exercise your rights, contact privacy@888wholesale.co. This policy applies worldwide to everyone who visits our website, registers a partner account, places an order, books a consultation, applies for a role, or uses our warehouse-management (WMS) tools.
2. Information We Collect
- Account & business data: name, email, password (stored only as a hash), and optionally company name, tax/VAT number, phone, website, and billing / shipping addresses. A company and VAT number are optional — individuals (e.g. emerging brands) may register without one.
- Order & transaction data: products, quantities, customization details, uploaded artwork/tailoring files, order history, invoices, and payment status.
- Payment data: processed by our payment provider; we receive transaction references, amounts, and status — we do not store full card numbers.
- Enquiry data: consultation bookings (name, email, company, message, scheduled time, timezone), contact-form messages, and partner applications.
- Recruitment data: if you apply for a role — name, email, the position, and your message.
- WMS / desktop app data: a hashed device fingerprint and a hashed caller IP address (used for security — see Section 9), plus stock transactions and worker-issuance records you log.
- Technical & usage data: with your consent, anonymised analytics about how you use the site (see Section 8).
3. How We Use Your Data & Legal Bases
Where the EU/UK GDPR applies, we rely on the following lawful bases (Art. 6 GDPR):
| Purpose | Legal basis |
|---|---|
| Creating your account, processing and fulfilling orders, support | Performance of a contract (Art. 6(1)(b)) |
| Issuing invoices and keeping accounting records | Legal obligation (Art. 6(1)(c)) — Hungarian Accounting Act |
| Security, fraud prevention, device/session binding for the WMS | Legitimate interests (Art. 6(1)(f)) |
| Service emails (order updates, lead follow-up, abandoned-cart reminders) | Legitimate interests / contract; opt-out anytime |
| Analytics cookies | Consent (Art. 6(1)(a)) — opt-in only |
| Recruitment | Pre-contractual steps / legitimate interests; consent for talent-pool retention |
4. Service Providers & Recipients
We do not sell or rent your personal information. We share it only with the processors and partners needed to run the service, each bound by a data-processing agreement:
- Supabase — database & file storage
- Vercel — website hosting
- Stripe — card payment processing
- Számlázz.hu (KBOSS.hu Kft.) — e-invoicing
- Resend — transactional email delivery
- Google (Analytics 4) — anonymised analytics, only with consent
- Logistics & manufacturing partners — to fulfil and ship your orders
- Authorities — where required by law
5. Data Retention
- Account data: for as long as your account is active, then deleted or anonymised.
- Invoices & accounting records: retained for 8 years, as required by the Hungarian Accounting Act (Act C of 2000, §169).
- Incomplete registrations (leads): if you start but never finish registration, your record is automatically and permanently deleted 90 days after sign-up.
- Consultation & contact enquiries: kept only as long as needed to handle your request, then deleted.
- Recruitment data: deleted after the role is filled unless you consent to us keeping it for future openings.
- Security logs (WMS): kept for the life of the API key plus a short audit window.
6. International Data Transfers
As a global supplier using cloud providers, your data may be processed outside your country, including in the United States (e.g. Stripe, Vercel, Google). Where data leaves the EEA/UK, we rely on appropriate safeguards — chiefly the European Commission's Standard Contractual Clauses (and the UK Addendum / IDTA where applicable) — to ensure an equivalent level of protection.
7. Your Rights
Subject to your local law, you may have the right to:
- access the personal data we hold about you;
- correct inaccurate or incomplete data;
- request deletion (subject to legal retention duties, e.g. invoices);
- restrict or object to certain processing;
- data portability;
- withdraw consent at any time (e.g. analytics or marketing) without affecting prior processing;
- opt out of marketing communications.
To exercise any right, email privacy@888wholesale.co. We respond within the period required by applicable law (one month under the GDPR).
8. Cookies & Analytics
Strictly necessary cookies (authentication, security, basic UI state) are always active. Analytics cookies (Google Analytics 4) are set only after you opt in via the cookie banner — no analytics run before you accept. You can change your choice at any time. Full details are in our Cookie Policy.
9. WMS Desktop App & Security
Our optional warehouse-management desktop app and stock API include anti-fraud protections for the benefit of the account holder:
- Device binding: the app sends a one-way hash of a device identifier so an issued key works only on the machine that activated it. We store the hash, not the raw identifier.
- Session protection: we store a one-way hash of the caller IP address to detect simultaneous use of the same key from different locations and lock a key if it appears compromised. We store the hash, not the raw IP.
We use industry-standard security (encryption in transit, hashed credentials, access controls). No method of transmission is 100% secure, but we work to protect your data and will notify you and the competent authority of a personal-data breach where the law requires.
10. Automated Decision-Making
We do not carry out automated decision-making that produces legal or similarly significant effects about you. Features such as partner levels, volume rebates, and lead follow-up are rule-based business logic, not profiling, and a human is always available on request.
11. Region-Specific Privacy Rights
European Union / EEA & United Kingdom
You have the GDPR / UK GDPR rights in Section 7 and the right to lodge a complaint with a supervisory authority — in Hungary the NAIH (naih.hu), in the UK the ICO (ico.org.uk), or your local authority.
United States (California & other states)
We do not sell or share personal information as those terms are defined under the CCPA/CPRA and similar state laws, and we do not use it for cross-context behavioural advertising. California, Virginia, Colorado, Connecticut, Texas and other state residents may request access, correction, deletion, and the categories of data we collect — without discrimination — by emailing privacy@888wholesale.co.
Other regions
Residents of Switzerland (revFADP), Canada (PIPEDA), Brazil (LGPD), Australia and other jurisdictions have the rights granted by their local law and may contact us or their national authority. We honour valid requests regardless of where you live.
12. Changes to This Policy
We may update this Privacy Policy from time to time. The “Last Updated” date reflects the latest version, and we will notify you of material changes by email or a prominent notice.
13. Contact & Complaints
Data controller: 888Studios Kft. · privacy@888wholesale.co · 2330 Dunaharaszti, Hungary. If you believe we have not handled your data lawfully, please contact us first so we can put it right — you also have the right to complain to your supervisory authority (Section 11).