Privacy Policy
Last updated: 4 May 2026
Infinytree, operated by Deltalivings Kft. (“we”, “us”, “our”), is committed to protecting your personal data.
This Privacy Policy explains how we collect, use, store and protect information when you visit our website infinytree.com or place an order with us.
We operate in compliance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable data protection laws.
1. Data Controller
Deltalivings Korlátolt Felelősségű Társaság
Podmaniczky utca 19. 3. em. 21. ajtó
1065 Budapest
Hungary
Email: info@infinytree.com
Hungarian Tax Number: 32214460-2-42
EU VAT Identification Number: HU32214460
2. What Data We Collect
2.1 Data You Provide Directly
Account information: name, email address, password (encrypted)
Order information: billing and shipping address, phone number
Configuration data: product options selected by you, such as tree colour, planter/pot and other available choices
Payment information: processed securely by our payment provider; we do not store your full card details
Communication data: messages you send us via email or contact forms
2.2 Data Collected Automatically
Technical data: IP address, browser type and version, operating system, device type
Usage data: pages visited, time spent on pages, referring URL, click behaviour
Cookie data: see Section 6 below
3. How We Use Your Data
We process your personal data for the following purposes and legal bases:
Purpose | Legal Basis (GDPR) |
|---|---|
Processing and fulfilling your orders | Art. 6(1)(b) - Performance of a contract |
Storing selected product configurations | Art. 6(1)(b) - Performance of a contract |
Managing your customer account | Art. 6(1)(b) - Performance of a contract |
Sending order confirmations and shipping updates | Art. 6(1)(b) - Performance of a contract |
Responding to your enquiries | Art. 6(1)(f) - Legitimate interest |
Complying with legal obligations (tax records, invoicing) | Art. 6(1)(c) - Legal obligation |
Improving our website and services | Art. 6(1)(f) - Legitimate interest |
Marketing communications (only with your consent) | Art. 6(1)(a) - Consent |
4. Third-Party Service Providers
We share your data only with trusted service providers who process it on our behalf or where necessary to fulfil your order:
Payment provider, such as Stripe or the provider displayed at checkout, for payment processing
[TO BE COMPLETED: shipping carrier / logistics partner once confirmed] Shipping carriers and logistics partners for delivery of your orders
Hosting and website infrastructure providers
Accounting, invoicing and tax compliance service providers where required
We do not sell, rent or trade your personal data to third parties for marketing purposes.
5. Data Retention
We retain your personal data only as long as necessary:
Account data: until you delete your account or request deletion, unless retention is required by law
Order and invoice data: generally 8 years after the transaction to comply with Hungarian accounting obligations, or longer where required by law
Marketing consent data: until you withdraw your consent
Technical/usage data: for the period configured in our analytics tools, normally no longer than 26 months
6. Cookies
Our website uses cookies to ensure functionality and improve your experience:
Essential cookies: required for the website to function, such as shopping cart and login session cookies. These cannot be disabled through the website because the site cannot function properly without them.
Analytics cookies: help us understand how visitors interact with our website. These are activated only with your consent where required.
Marketing cookies: used to deliver relevant advertisements. These are activated only with your consent where required.
You can manage your cookie preferences at any time through our cookie consent banner or your browser settings.
7. Your Rights Under GDPR
As a data subject in the European Union, you have the following rights:
Right of access (Art. 15) - request a copy of the personal data we hold about you
Right to rectification (Art. 16) - correct inaccurate or incomplete data
Right to erasure (Art. 17) - request deletion of your personal data
Right to restrict processing (Art. 18) - limit how we use your data
Right to data portability (Art. 20) - receive your data in a structured, commonly used format
Right to object (Art. 21) - object to processing based on legitimate interest
Right to withdraw consent (Art. 7(3)) - withdraw consent at any time without affecting prior processing
To exercise any of these rights, please contact us at info@infinytree.com.
We will respond within one month as required by GDPR, unless an extension is permitted by law.
8. Data Security
We implement appropriate technical and organisational security measures to protect your personal data, including:
SSL/TLS encryption for data transmitted between your browser and our servers
Encrypted storage of passwords
Restricted access to personal data on a need-to-know basis
Regular security reviews and updates
9. International Data Transfers
Your data is primarily processed and stored within the European Economic Area (EEA).
If any data is transferred outside the EEA by a third-party service provider, we ensure appropriate safeguards are in place, such as EU Standard Contractual Clauses or adequacy decisions by the European Commission.
10. Supervisory Authority
If you believe we have not adequately addressed your data protection concerns, you have the right to lodge a complaint with a supervisory authority.
In Hungary, the competent authority is:
Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH)
Website: www.naih.hu
Consumers in Austria or Germany may also contact their competent local data protection authority.
11. Changes to This Policy
We may update this Privacy Policy from time to time.
Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.
Questions? Contact us at info@infinytree.com