Privacy policy

Privacy Policy

Effective date: September 25, 2026

This Privacy Policy explains how PK Innovations s. r. o. collects, uses, stores, and protects personal information relating to visitors and customers of the GET THE DEAL online store.

We take the protection of personal information seriously. We only process personal information to the extent necessary to operate our online store, process and fulfill orders, comply with legal obligations, protect our website and business, provide customer support, and measure the performance of our website and advertising.

1. Data Controller

The controller responsible for the processing of personal information is:

PK Innovations s. r. o.
Karpatské námestie 10A
831 06 Bratislava
Slovakia
European Union

Company ID: 51727749

For privacy-related questions or requests, please contact:

email@get-the-deal.com

PK Innovations s. r. o. processes personal information in accordance with applicable data protection laws, including Regulation (EU) 2016/679, the General Data Protection Regulation, commonly referred to as the GDPR, where applicable.

2. Personal Information We Collect

Depending on how you use our website and services, we may collect and process the following categories of personal information:

first and last name;
email address;
telephone number;
billing address;
shipping address;
country of residence or delivery;
information relating to your order, including products purchased, order value, currency, order status, and order history;
payment-related information, such as the payment method used, payment status, and transaction identifiers;
IP address;
information about your device, browser, and operating system;
approximate location derived from your IP address;
information about how you interact with our website;
cookie identifiers and similar technical information;
information contained in messages you send to us by email or through a contact form;
information you voluntarily provide when submitting a product review.

We do not request or collect health records, medical diagnoses, medical questionnaire responses, genetic information, or other special categories of personal data under the GDPR.

Although we sell dietary supplements, customers are not required to provide information about their health or medical condition in order to purchase products from us.

3. Purposes and Legal Bases for Processing

Order Processing and Fulfillment

We use personal information to:

receive and process orders;
process payments;
prepare and ship products;
provide order confirmations and shipping updates;
process returns, refunds, and complaints;
respond to order-related questions.

Where the GDPR applies, the legal basis for this processing is the performance of a contract or taking steps at your request before entering into a contract.

Compliance With Legal Obligations

We may process and retain certain personal information where required by law, including for accounting, taxation, recordkeeping, fraud prevention, and regulatory compliance.

Where the GDPR applies, the legal basis is compliance with a legal obligation.

Customer Support

If you contact us, we may process the information contained in your message in order to respond to your request, resolve an issue, or assist you with an order.

Depending on the circumstances, the legal basis may be performance of a contract, compliance with a legal obligation, or our legitimate interest in providing customer support and protecting our legal rights.

Security and Fraud Prevention

We may process personal and technical information in order to protect our website, prevent fraudulent transactions, detect abuse, protect payment systems, and prevent unlawful activity.

Where the GDPR applies, the legal basis is our legitimate interest in protecting our business, customers, systems, and services.

Analytics and Advertising Measurement

We use Google Analytics 4 and Google Ads, implemented through Google Tag Manager, in order to measure website traffic, understand website performance, and evaluate the effectiveness of our advertising campaigns.

We do not use these tools for remarketing or behavioral advertising based on a customer's previous activity on our website.

Where applicable law requires consent before analytical or advertising technologies can be used, such technologies are activated only after the relevant consent has been obtained.

You may withdraw or change your consent at any time through the cookie or privacy settings available on our website.

Product Reviews

We use Judge.me to manage customer product reviews.

If you voluntarily submit a review, we may process information such as:

your name or display name;
star rating;
review text;
photos or videos you choose to submit;
information used to verify that the review relates to a genuine purchase.

If you would like us to remove a review, you may contact us at email@get-the-deal.com.

4. Payments

Card payments are processed by Stripe.

Information required to process your payment may be provided to Stripe and to financial institutions, card networks, and other parties involved in completing the payment transaction.

PK Innovations s. r. o. does not store full payment card numbers or CVV/CVC security codes.

Stripe may process information for purposes including:

payment processing;
fraud prevention;
security;
regulatory compliance;
compliance with financial and anti-money laundering obligations.

Stripe may act as a processor or as an independent controller depending on the particular processing activity.

5. Order Fulfillment and Shipping

We use ShipBob for warehousing, fulfillment, and shipping services.

In order to fulfill and deliver your order, we may provide ShipBob and relevant shipping carriers with information necessary for delivery, including:

your name;
shipping address;
telephone number;
email address;
order and shipment information.

This information is used only to the extent necessary to prepare, ship, track, and deliver your order and to resolve delivery-related issues.

6. Shopify

Our online store is hosted and operated using the Shopify ecommerce platform.

Shopify provides the technical infrastructure required to operate our online store and may process personal information relating to customers and visitors in connection with those services.

For core ecommerce services, Shopify generally processes customer information on behalf of merchants. However, Shopify may act as an independent controller for certain services or features where it determines the purposes and means of processing itself.

7. Cookies and Similar Technologies

Our website uses cookies and similar technologies.

Some cookies are strictly necessary for the website to function properly. These may include cookies required for:

shopping cart functionality;
checkout;
website security;
fraud prevention;
session management;
processing orders.

Strictly necessary cookies may be used without consent where permitted by applicable law.

Analytics and advertising cookies that are not strictly necessary are used only after consent has been obtained where required by law.

You may refuse, withdraw, or change your consent through the privacy or cookie settings available on our website.

8. Marketing Communications

We do not send customers newsletters, promotional emails, marketing SMS messages, or similar unsolicited marketing communications.

Contact information collected during checkout is not used by us for unrelated promotional email or SMS marketing.

We may, however, send transactional or service-related communications that are directly connected to:

your order;
payment;
shipment;
refund;
complaint;
customer support request;
another request initiated by you.

These communications are necessary to provide the services you requested and are not marketing communications.

9. Parties With Whom We May Share Personal Information

We may share personal information, where necessary, with service providers and other recipients including:

Shopify, for ecommerce platform hosting and technical infrastructure;

Stripe, for payment processing;

ShipBob, for warehousing, fulfillment, and shipping;

shipping carriers and courier companies, for delivery of orders;

Google, in connection with Google Analytics 4, Google Ads, and Google Tag Manager;

Judge.me, for managing product reviews;

our email service provider, for handling customer communications;

accountants, tax advisers, legal advisers, auditors, or other professional advisers, where reasonably necessary;

government authorities, courts, regulators, law enforcement authorities, or other public bodies, where disclosure is required by law or a legally binding request.

We expect service providers processing personal information on our behalf to protect such information and process it in accordance with applicable data protection laws.

10. International Transfers of Personal Information

We sell products internationally and use service providers that operate in multiple countries.

As a result, personal information may be processed outside Slovakia and outside the European Economic Area, including in the United States and other countries in which our service providers operate.

Where personal information protected by the GDPR is transferred outside the European Economic Area, appropriate safeguards are used where required by law.

These safeguards may include:

an adequacy decision issued by the European Commission;
Standard Contractual Clauses approved by the European Commission;
another legally permitted transfer mechanism.

11. Data Retention

We retain personal information only for as long as necessary for the purpose for which it was collected, or for as long as required by applicable law.

Information contained in accounting and tax records may be retained for the period required under applicable Slovak accounting and tax legislation, which may generally be up to ten years following the relevant accounting period.

Order-related information may be retained for as long as reasonably necessary to:

fulfill the order;
process returns and refunds;
comply with legal obligations;
resolve disputes;
establish, exercise, or defend legal claims.

Customer support communications may be retained for as long as necessary to handle the request and for a reasonable period thereafter where necessary to protect our legitimate interests or legal rights.

Where processing is based on consent, we generally process the relevant personal information until consent is withdrawn or the purpose of the processing ends, unless further retention is required or permitted by law.

12. Your Privacy Rights

Depending on your location and the privacy laws applicable to you, you may have rights in relation to your personal information.

Where the GDPR applies, these rights may include the right to:

obtain confirmation as to whether we process your personal information;
request access to your personal information;
request correction of inaccurate or incomplete information;
request deletion of your personal information where the legal requirements are met;
request restriction of processing;
object to processing based on legitimate interests;
receive certain personal information in a structured, commonly used, and machine-readable format;
withdraw consent at any time where processing is based on consent;
lodge a complaint with a competent data protection authority.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

To exercise your privacy rights, contact us at:

email@get-the-deal.com

We may ask you to provide information reasonably necessary to verify your identity before fulfilling a privacy request.

13. Automated Decision-Making

We do not carry out automated individual decision-making or profiling that produces legal effects concerning you or similarly significantly affects you.

Payment processors and security providers may use automated systems to identify potentially fraudulent, suspicious, or high-risk transactions in accordance with their own legal obligations and privacy practices.

14. Age Requirement

Our online store is intended for individuals who are at least 18 years old.

We do not knowingly collect personal information from individuals under the age of 18.

If we become aware that personal information has been provided to us by a person under the age of 18 without appropriate authorization, we may delete the information unless retention is required by law.

15. Information Security

We use reasonable technical and organizational measures designed to protect personal information against:

unauthorized access;
accidental loss;
misuse;
alteration;
unauthorized disclosure;
destruction.

However, no electronic transmission or storage system can be guaranteed to be completely secure.

16. Sale of Personal Information and Personalized Advertising

We do not sell personal information.

We do not use customer information collected through our online store for remarketing or for creating behavioral advertising profiles designed to show personalized advertisements based on previous activity on our website.

We use Google Ads to advertise our products and measure advertising performance, but not for remarketing visitors based on their previous activity on the GET THE DEAL website.

17. Supervisory Authority

If you believe that your personal information has been processed in violation of applicable data protection law, you have the right to lodge a complaint with a competent supervisory authority.

For Slovakia, the competent authority is:

Office for Personal Data Protection of the Slovak Republic
Úrad na ochranu osobných údajov Slovenskej republiky
Galvaniho 7/B
821 04 Bratislava
Slovakia

If permitted by applicable law, you may also lodge a complaint with the competent supervisory authority in the country of your habitual residence, place of work, or place of the alleged infringement.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including where necessary to reflect changes to:

our services;
our technology;
our service providers;
our business operations;
applicable legal or regulatory requirements.

The current version of this Privacy Policy will always be published on this website together with its effective date.

19. Contact Us

If you have questions about this Privacy Policy, how we process personal information, or if you wish to exercise a privacy right, please contact us: