Privacy Policy

Last updated: July 14, 2026

Afterglow Supplements (operated by Zantris a.s., Varšavská 715/36, 120 00 Praha – Vinohrady, Czech Republic, IČO: 22482059) operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the “Services”). Afterglow Supplements is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase using the Services or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read and understood this Privacy Policy.

Personal Information We Collect

When we use the term “personal information,” we refer to information that identifies or can reasonably be linked to you. We may collect the following categories of personal information depending on how you interact with the Services:

• Contact details including your name, address, billing address, shipping address, phone number, and email address.

• Financial information including payment card information, transaction details, form of payment, and payment confirmation.

• Transaction information including items you view, add to cart, purchase, return, or cancel, and your past transactions.

• Communications with us including information you include in customer support enquiries.

• Device information including information about your device, browser, network connection, IP address, and unique identifiers.

• Usage information including how and when you interact with or navigate the Services.

Sources of Personal Information

• Directly from you when you create an account, visit or use the Services, or communicate with us.

• Automatically through the Services via cookies and similar technologies when you use our products, services, or websites.

• From our service providers when they collect or process your personal information on our behalf.

• From our partners or other third parties.

How We Use Your Personal Information — and Our Legal Basis

For EU, UK, and EEA residents: under the General Data Protection Regulation (EU GDPR / UK GDPR), we are required to have a lawful basis for each purpose for which we process your personal information. The table below sets out each purpose and the lawful basis we rely on.

Providing and improving the Services — Lawful basis: Performance of a contract.
We use your personal information to process your payments, fulfil your orders, manage your account, arrange shipping, facilitate returns and exchanges, and send notifications related to your account. This processing is necessary to perform our contract with you.

Marketing and promotional communications — Lawful basis: Consent.
We send marketing, advertising and promotional communications by email only where you have actively opted in to receive them. You may withdraw your consent at any time by using the unsubscribe link in any marketing email. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. We do not send marketing communications on the basis of legitimate interests.

Personalised advertising (cookies and pixels) — Lawful basis: Consent.
We may use advertising and tracking technologies such as Meta Pixel or Google Ads to show you relevant advertisements on third-party platforms based on your interactions with our store. This processing only occurs where you have given your consent via our cookie consent tool. You may withdraw consent at any time through your cookie preferences.

Security and fraud prevention — Lawful basis: Legitimate interests.
We use your personal information to authenticate your account, detect and investigate potentially fraudulent, illegal, or malicious activity, and secure our services. We have assessed that these legitimate interests are not overridden by your rights and freedoms.

Communicating with you (customer support) — Lawful basis: Performance of a contract / Legitimate interests.
We use your personal information to provide customer support, respond to enquiries, and maintain our business relationship with you.

Legal compliance — Lawful basis: Legal obligation.
We use your personal information to comply with applicable law, respond to valid legal process, and enforce or investigate potential violations of our terms or policies.

How Long We Keep Your Personal Information

We retain your personal information only for as long as necessary for the purposes for which it was collected, subject to our legal obligations. Specifically:

• Order and transaction data: retained for 7 years to comply with Czech and EU accounting and tax law obligations.

• Account data: retained for as long as your account is active, and for 2 years after account closure or last interaction, after which it is deleted or anonymised.

• Marketing consent records: retained for the duration of the marketing relationship plus 3 years, to demonstrate compliance with consent obligations.

• Customer support communications: retained for 3 years from the date of the last communication.

• Cookie and analytics data: retained in accordance with the individual cookie lifespans disclosed in our cookie consent tool, generally no longer than 13 months.

How We Disclose Personal Information

We may disclose your personal information to third parties in the following circumstances:

• Service providers: Shopify and vendors who perform services on our behalf, including IT management, payment processing, data analytics, customer support, cloud storage, fulfilment and shipping.

• Business and marketing partners: to provide personalised advertising services, where you have consented. Our partners will use your information in accordance with their own privacy notices. You may opt out of targeted advertising at any time through your cookie preferences or using the opt-out link below.

• At your direction: when you consent to disclosure, for example through social media integrations or shipping to a third-party address.

• Corporate transactions: in connection with a merger, acquisition, or bankruptcy, subject to confidentiality obligations.

• Legal requirements: to comply with applicable legal obligations, respond to subpoenas, search warrants or similar requests, or protect our rights and the rights of our users.

Our Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve the Services. Information you submit may be transmitted to and processed by Shopify and its sub-processors, who may be located in countries other than where you reside. Where Shopify processes personal information for its own purposes (such as fraud detection across its merchant network), Shopify acts as an independent data controller. To learn more, visit the Shopify Consumer Privacy Policy at privacy.shopify.com.

International Transfers

We may transfer, store, and process your personal information outside the country where you reside. If we transfer your personal information out of the European Economic Area or the United Kingdom, we will rely on recognised transfer mechanisms such as the European Commission’s Standard Contractual Clauses, or any equivalent contracts issued by the relevant UK competent authority, unless the transfer is to a country that has been determined to provide an adequate level of protection.

Third-Party Websites and Links

The Services may include links to third-party websites or platforms. We are not responsible for the privacy or security practices of those sites. Information you share on public or semi-public venues, including third-party social networking platforms, may be viewable by other users without limitation.

Children’s Data

The Services are not intended for use by children under the age of majority in your jurisdiction. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us and we will delete it. As of the date of this Privacy Policy, we do not knowingly sell or share the personal information of individuals under 16 years of age.

Security

We implement appropriate technical and organisational measures to protect your personal information. However, no security measures are perfect or impenetrable. We recommend you do not use unsecured channels to communicate sensitive information to us.

Your Rights and Choices

Depending on where you live, you may have some or all of the following rights in relation to your personal information. These rights are not absolute and may apply only in certain circumstances.

• Right to Access / Know: request access to the personal information we hold about you.

• Right to Delete: request deletion of personal information we hold about you.

• Right to Correct: request correction of inaccurate personal information.

• Right to Portability: receive a copy of your personal information in a structured format and request transfer to a third party.

• Right to Opt Out of Sale or Sharing for Targeted Advertising: opt out of the “sale” or “sharing” of your personal information for targeted advertising purposes.

• Managing Communications: opt out of marketing emails at any time using the unsubscribe link. We may still send non-promotional emails related to your account or orders.

Additional rights for EU, EEA, and UK residents:

• Objection to Processing: ask us to stop processing your personal information for certain purposes, including direct marketing.

• Restriction of Processing: ask us to restrict how we process your personal information in certain circumstances.

• Withdrawal of Consent: where we rely on consent, withdraw it at any time without affecting the lawfulness of prior processing.

• Right to Lodge a Complaint: you have the right to lodge a complaint with your local data protection supervisory authority. For Czech Republic residents, the supervisory authority is the Úřad pro ochranu osobních údajů (ÚOOÚ), www.uoou.cz. For UK residents, the supervisory authority is the Information Commissioner’s Office (ICO), www.ico.org.uk. For other EEA residents, you can find your local authority at edpb.europa.eu.

Additional US Privacy Rights

If you are a resident of the United States, including California, you may have the following rights, subject to applicable law:

• Right to Know: request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the purposes for collection and use, and the categories of third parties to whom we disclose personal information.

• Right to Delete: request deletion of personal information we have collected from you, subject to legal exceptions.

• Right to Correct: request correction of inaccurate personal information we maintain about you.

• Right to Non-Discrimination: we will not discriminate against you for exercising your privacy rights.

• Right to Opt Out of Sale or Sharing: you may opt out of the sale or sharing of personal information for targeted advertising purposes.

We do not sell or share personal information, and we have not sold or shared personal information in the preceding 12 months.

To exercise any of these rights, please contact us using the details below. We may need to verify your identity before processing your request. We will respond in a timely manner as required by applicable law and will not discriminate against you for exercising your rights.

Complaints

If you have concerns about how we process your personal information, please contact us first using the details below. If you are not satisfied with our response, you have the right to escalate to your local data protection authority as described above.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Policy on this website and update the “Last updated” date. Where required by applicable law, we will provide additional notice of material changes.

Contact Us

If you have any questions about this Privacy Policy or wish to exercise any of your rights, please contact us at: support@feelafterglow.com or by post at: Zantris a.s., Varšavská 715/36, 120 00 Praha – Vinohrady, Czech Republic. For the purpose of applicable data protection laws, Zantris a.s. is the data controller of your personal information.