Privacy Policy
Last updated: March 17, 2026
Hungary in a Box ("we", "us", "our") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information in accordance with the EU General Data Protection Regulation (GDPR).
1. Data Controller
The data controller responsible for your personal data is:
Hungary in a Box
Budapest, Hungary
Email: hello@hungaryinabox.com
2. What Data We Collect
We collect only the data necessary to provide our services:
- Email address — when you subscribe to our newsletter
- Order information — when you purchase through our Etsy shop (processed by Etsy; see their privacy policy)
- Shipping address — when you order a physical gift box
3. Why We Collect It (Legal Basis)
We process your personal data based on:
- Your consent (Article 6(1)(a) GDPR) — for sending marketing emails and newsletters. You can withdraw consent at any time.
- Contract performance (Article 6(1)(b) GDPR) — to fulfil your orders and provide customer support.
4. How We Use Your Data
- To send you newsletter updates, new product announcements, and promotional offers (only with your consent)
- To process and deliver your orders
- To respond to your enquiries
We never sell, rent, or share your personal data with third parties for their marketing purposes.
5. Third-Party Services
We use the following third-party services that may process your data:
- Etsy — for order processing and payments (Etsy Privacy Policy)
- Email service provider — for sending newsletters (data stored within the EU/EEA or under adequate safeguards)
6. Data Retention
We retain your email address for as long as you remain subscribed to our newsletter. You can unsubscribe at any time using the link in every email. Order-related data is retained for the period required by Hungarian tax law (currently 8 years).
7. Your Rights
Under the GDPR, you have the right to:
- Access — request a copy of the personal data we hold about you
- Rectification — correct any inaccurate data
- Erasure — request deletion of your data ("right to be forgotten")
- Withdraw consent — unsubscribe from marketing emails at any time
- Data portability — receive your data in a structured, machine-readable format
- Lodge a complaint — with the Hungarian data protection authority (NAIH, naih.hu)
To exercise any of these rights, email us at hello@hungaryinabox.com.
8. Cookies
This website does not currently use cookies or tracking technologies. If this changes in the future, we will update this policy and request your consent before using any non-essential cookies.
9. Changes to This Policy
We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date.
10. Contact
If you have any questions about this privacy policy or your personal data, contact us at: