Legal
Privacy Notice
Effective date: 2026-07-29
This notice is operated by Peci Kft., 2119 Pécel, Aradi u. 5, Hungary (Cg. 13-09-089813; adószám HU12761609) ("Company", "we", "us", "our"). The Company is established in the European Union and acts as data controller for everything described below — it is collected directly from you for the Company's own purpose, not on behalf of any Shopify merchant.
What we collect and why
| Category | What | Why | Legal basis |
|---|---|---|---|
| Email address | The email address you enter | Sending the specific content you asked for (e.g. checklist results) and occasional related updates about the same product, as described at sign-up | Consent |
| Consent record | Timestamp and version of the consent text you saw | Evidencing consent — so we can always show exactly what you agreed to, even if the wording changes later | Consent |
| Attribution | UTM source/medium/campaign parameters and the page you signed up from | Understanding which channel drove sign-ups, for our own marketing measurement | Legitimate interest |
We do not collect payment information, physical addresses, or phone numbers on this website, and we do not use this data for anything beyond what the consent text describes at the time of sign-up. We do not sell or share it with third parties.
Spam prevention. The sign-up form includes a hidden field that only automated bots fill in. If it is filled in, the submission is discarded and nothing is stored.
Where this data is stored
Sign-up data is stored in a dedicated database, separate from the Persistent Cart application's own production data. We use the following providers to run the website and store this data:
- Vercel Inc. — hosts the website and the sign-up form (United States)
- Neon, LLC (a Databricks, Inc. company) — hosts the sign-up database (United States)
Data in transit is encrypted (HTTPS/TLS). Data at rest is encrypted by the database provider. Because these providers are located in the United States, transfers are safeguarded under the EU–US Data Privacy Framework where the provider is certified, with Standard Contractual Clauses as a fallback.
How results are sent
Given the current, low sign-up volume, results and updates are currently sent by us manually rather than through an additional email-sending service. This is an operational detail, not a change to what data we collect or why.
Your rights
You can access, correct, restrict, or ask us to delete your data, or object to how we use it, at any time, by writing to privacy@peci.io. We will respond within 30 days. You can also unsubscribe from any email we send, or ask us to delete your data entirely — we keep it only until you do so.
You have the right to lodge a complaint with a supervisory authority — in Hungary, the Nemzeti Adatvédelmi és Információszabadság Hatóság (naih.hu) — or with the authority in your own country of residence.
Changes to this notice
We will update the effective date above whenever this notice changes materially.
Contact
2119 Pécel, Aradi u. 5, Hungary
General contact: hello@peci.io
Data / privacy matters: privacy@peci.io