Privacy Policy

Last updated: 30 May 2025

This Privacy Policy explains how Zantris a.s. (“Afterglow”, “we”, “us”, “our”), Varšavská 715/36, 120 00 Praha 2 – Vinohrady, Czech Republic, Company ID 22482059, collects, uses, discloses and protects your personal data when you visit www.feelafterglow.com (the “Website”), create an account, purchase our products or otherwise interact with us.

We process personal data in accordance with:

• Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR)
• Czech Act No. 110/2019 Sb. on Personal Data Processing
• Any other local privacy laws where we sell and deliver our products.

If you have questions, please write to support@feelafterglow.com or to our postal address above.

1. Who is Responsible for Your Data?

• Data Controller: Zantris a.s.
• Registered address: Varšavská 715/36, 120 00 Praha 2 – Vinohrady, Czech Republic
• Contact e‑mail: support@feelafterglow.com
• EU representative (Art 27 GDPR): not required, because we are established in the EU.
• Data Protection Officer: not appointed; our scale of processing does not make this mandatory. All privacy queries are handled at the e‑mail above.

2. What Personal Data Do We Collect?

We collect the following categories of data:

1. Identity data – your name, title and, if you provide it, date of birth.
2. Contact data – billing and delivery addresses, e‑mail address, telephone number.
3. Account data – username, encrypted password, language and marketing preferences.
4. Transaction data – the products you purchased, order numbers, prices, applicable VAT rate.
5. Payment data – masked card number or payment token and payment status. We do not receive your full card details; these stay with our payment providers.
6. Log and device data – IP address, browser type and version, operating system, the web page that referred you, and time‑stamp information collected automatically by our server.
7. Marketing data – your newsletter opt‑in or opt‑out status and your interaction with our campaigns.
8. Health‑related data – We do not collect health-related data unless you voluntarily include such information in product feedback or communication. We process this only with your explicit consent and delete it after the query is resolved.

We do not intentionally collect data from children under 18 or target them with our products.

3. Why Do We Use Your Data and on What Legal Basis?

• To process and deliver your order – contract performance (Art 6 (1)(b) GDPR).
• To create and manage your customer account – contract performance.
• To provide customer service, returns and legal guarantees – contract performance and compliance with legal obligations (Art 6 (1)(b) and (c)).
• To issue invoices and keep tax records – legal obligation under Czech accounting and tax law (Art 6 (1)(c)).
• To prevent fraud and secure our Website – our legitimate interests in running a safe business (Art 6 (1)(f)).
• To send transactional e‑mails such as order confirmations and shipping notifications – contract performance.
• To send you newsletters and personalised offers – your consent (Art 6 (1)(a)). You can withdraw consent at any time.
• To analyse Website traffic and improve user experience – our legitimate interests or, for non‑essential cookies, your consent.
• To comply with product‑safety and recall duties – legal obligation (Art 6 (1)(c)).
• To handle any health‑related feedback you voluntarily provide – your explicit consent (Art 6 (1)(a) and Art 9 (2)(a) for special‑category data).

Whenever we rely on legitimate interests, we ensure that our interests are not overridden by your fundamental rights and freedoms.

4. Cookies and Similar Technologies

We use three types of cookies and pixels:

1. Essential cookies – necessary for the Website to function (e.g., basket and login). These load automatically.
2. Analytics cookies – help us understand how the Website is used so we can improve it. We load them only if you consent via the cookie banner.
3. Marketing cookies – allow us to show you relevant ads. They are placed only after you give consent in the banner.

You can withdraw your consent at any time by reopening the cookie banner or changing your browser settings. A detailed list of cookies is available in our separate Cookie Policy.

5. With Whom Do We Share Your Data?

We disclose data only when necessary:

• Payment service providers (e.g., Stripe, Apple Pay, Google Pay) to process your payment securely.
• Fulfilment and logistics partners (e.g., DHL, GLS, Packeta) so your order can reach you.
• Cloud hosting and IT service providers (e.g., AWS EU region, Vercel) that keep our Website and databases running.
• E‑mail marketing platforms (e.g., Klaviyo, Mailchimp) to send newsletters if you opt in.
• Analytics and advertising partners (e.g., Google Analytics, Meta) when you have consented to non‑essential cookies.

All third‑party processors are bound by GDPR‑compliant contracts and may use the data only on our instructions.

6. International Transfers

Some partners are located outside the European Economic Area. When personal data leaves the EEA, we ensure that at least one of the following is in place:

• An adequacy decision by the European Commission, or
• Standard Contractual Clauses (SCCs) supplemented by additional safeguards where necessary.

Copies of SCCs can be requested at support@feelafterglow.com.

7. How Long Do We Keep Your Data?

• Accounting and transaction records – 10 years after the end of the fiscal year, as required by Czech law.
• Customer‑account data – for as long as your account is active. If you do not log in for 24 months, we delete the account unless the data must be kept for legal reasons.
• Newsletter subscription data – until you unsubscribe or after 24 months of no engagement.
• Server log files – 30 days unless they are needed to investigate security incidents.
• Health‑related feedback – deleted once your query is resolved, and in any case within 12 months.

When a retention period expires, we erase or irrevocably anonymise the data.

8. Your Rights Under the GDPR

You can, at any time:

1. Access the personal data we hold about you.
2. Rectify inaccurate or incomplete data.
3. Erase data (“right to be forgotten”) where legal grounds permit.
4. Restrict processing of your data.
5. Port your data to another controller.
6. Object to processing based on legitimate interests or to direct marketing.
7. Withdraw consent where processing relies on it; withdrawal does not affect processing already performed.
8. Avoid automated decisions with legal or similarly significant effects – we do not perform such profiling.

To exercise any of these rights, e‑mail us at support@feelafterglow.com. We will reply within one month.

9. Complaints

If you believe we misuse your data, you can lodge a complaint with the Czech Data Protection Authority (ÚOOÚ), Pplk. Sochora 27, 170 00 Praha 7 (www.uoou.cz), or with your local supervisory authority in the EEA or the UK.

10. How We Protect Your Data

We implement appropriate technical and organisational measures, including:

• HTTPS/TLS encryption of all traffic
• Two‑factor authentication and role‑based access for staff
• Regular security audits and vulnerability scans
• Secure off‑site back‑ups and disaster‑recovery plans
• Data minimisation and, where possible, pseudonymisation

11. Children’s Privacy

Our Website and products are intended for adults aged 18 years and over. We do not knowingly collect personal data from children. If we discover that a minor has provided personal data, we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version is always available on the Website and supersedes previous versions. We will notify registered customers by e‑mail if changes materially affect their rights.

13. Contact

Questions, requests or complaints about privacy can be sent to: support@feelafterglow.com
Zantris a.s., Varšavská 715/36, 120 00 Praha 2 – Vinohrady, Czech Republic