Privacy Policy

Effective 31 August 2026

The controller is Untamed Production s.r.o., company no. 17352801, registered at Školní 23, 747 64 Budišovice, Czech Republic. Contact: ladislav@envoitactical.com.

We process only what we need and keep it no longer than we have to. What follows is what we collect, why, and on what legal basis.

When you buy something

• Name, email, phone — to process the order and reach you about it.
• Delivery address or pickup point — to get the parcel to you.
• Order details — what you bought, for how much, when.

Legal basis: performance of a contract. Without this data an order cannot be fulfilled.

We keep order records for 10 years because accounting and tax law require it. The basis for that retention is a legal obligation.

Card details are entered directly with our payment provider. We never see or store a card number.

When you join the waitlist

• Your email address — so we can tell you when something is available.

Legal basis: consent, given when you submit the form. You can withdraw it at any time through the unsubscribe link in every email or by writing to us, and we delete the address when you do.

When you answer the intake survey

• Your answers and your email — how kit fits you, what you buy and what you would replace first. It shapes what we make next.

Legal basis: consent. Answering is voluntary, every question can be skipped, and you can ask us to delete the response at any time.

Technical data

We process your IP address and request metadata briefly, to rate-limit forms and prevent abuse. Legal basis: our legitimate interest in keeping the service secure. We do not build advertising profiles.

Who we share it with

We use a small number of processors and share only what is necessary:

• Stripe — card payments. You enter card details directly with Stripe; we never receive or store them.
• Packeta (Zásilkovna) — delivery. We pass your name, email, phone and the address or pickup point so they can deliver the parcel and keep you informed about it.
• Resend — sending our email (order confirmations, updates).
• Cloudflare — hosting, bot protection and site security.
• Railway — hosting the shop system and its database.
• Supabase — storing intake survey responses.

Cookies and analytics

Strictly necessary storage that makes the site and the cart work is always used; the law does not require consent for it.

Google Analytics 4 measures traffic, but only after you agree to it. Until then nothing is stored and Google receives nothing. We run no advertising measurement or remarketing, ad signals are permanently off, and IP addresses are truncated.

The processor is Google Ireland Limited. Data may be transferred to the USA under standard contractual clauses.

You can change your mind at any time: show the cookie choice again

Transfers outside the EU

Some processors are based outside the EU. Where that is the case the transfer is covered by standard contractual clauses approved by the European Commission, or another adequate mechanism.

Your rights

You have the right to:

• know what data we hold about you and get a copy of it;
• have it corrected or completed;
• have it deleted, where we have no other basis for keeping it;
• restrict or object to the processing;
• take it elsewhere;
• withdraw consent at any time, where the processing rests on consent.

Write to ladislav@envoitactical.com. If you believe we are handling your data badly, you can complain to the Czech Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7, uoou.gov.cz.

Children

The shop and the mailing list are not aimed at people under 16 and we do not knowingly collect their data.

Changes

We may update this document. The effective date is always shown at the top.