Privacy policy

Last updated: 2 October 2026

This policy explains how Thirsty Pot Co. collects, uses, shares and protects your personal information when you visit our online store or buy from us. We aim to keep it short and plain.

1. Who we are

Thirsty Pot Co. is operated by Vasyl Ivanys (sole trader, Czech Republic), Nový Malín 39, 788 03, Czech Republic. We are responsible (the "controller") for your personal information. Contact us about privacy at thirstypotco@email.cz.

Because we are based in the European Union, we follow the EU General Data Protection Regulation (GDPR). We also handle your information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth).

2. What we collect

Details you give us: name, email address, phone number, delivery and billing address, and any messages you send us.
Order details: what you bought, prices paid, delivery and return information.
Payment details: payments are handled by our payment providers (for example Shopify Payments). We never see or store your full card number.
Device and usage data: IP address, browser and device type, pages viewed and similar data, collected through cookies and similar technologies (see section 6).

We do not knowingly collect information from children under 16, and our store is not directed at them.

3. Why we use it (and our legal basis)

To process and deliver your order, handle returns and refunds, and provide customer service (performance of our contract with you).
To prevent fraud and keep the store secure (our legitimate interests).
To meet legal obligations, such as tax and accounting record-keeping (legal obligation).
To send marketing emails, only if you have opted in. You can unsubscribe at any time using the link in every email (consent). We follow the Australian Spam Act 2003.
To understand how the store is used and improve it (legitimate interests or, where required, your consent).

4. Who we share it with

We share only what each party needs to do its job:

Shopify, which hosts our store and processes orders and payments.
Our suppliers and their couriers, who pack and ship your order directly to you from warehouses in Australia. They receive your name, delivery address, phone number and the items ordered. Orders are passed to them through our dropshipping platform, Syncee.
Payment providers, to take payment and prevent fraud.
Email and analytics tools we use to run the store, if you have agreed to them.
Authorities or advisers (for example our accountant), where the law requires it or to protect our legal rights.

We do not sell your personal information.

5. Sending information overseas

We are based in the Czech Republic, so your information is handled in the European Union. Our service providers and suppliers may also store or process it in Australia, Singapore, Canada, the United States and other countries. Where information leaves the EU, we rely on safeguards such as the European Commission's standard contractual clauses or adequacy decisions used by our providers. We take reasonable steps to make sure overseas recipients protect your information in line with the Australian Privacy Principles.

6. Cookies

Our store uses cookies that are needed for it to work (for example to remember your cart and complete checkout). Where the law requires it, we only use analytics or marketing cookies if you agree. You can change your cookie choices in the cookie banner or block cookies in your browser settings, although some parts of the store may then not work.

7. How long we keep it

We keep order and invoice records for as long as tax and accounting laws require (generally up to 10 years). We keep marketing consent until you unsubscribe. Other information is deleted or anonymised when we no longer need it.

8. Your rights

You can ask us to:

give you a copy of the personal information we hold about you;
correct information that is wrong or out of date;
delete your information (unless we must keep it by law);
limit or object to how we use it, including for marketing;
send your information to you or another business in a common format;
withdraw your consent at any time (this does not affect anything we did before).

Email thirstypotco@email.cz. We will reply within 30 days. We may need to confirm your identity first.

9. Complaints

If you are unhappy with how we have handled your information, please contact us first so we can try to fix it. You can also complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au, or to the Czech data protection authority, the Office for Personal Data Protection (UOOU), at uoou.gov.cz.

10. Security

We use reputable providers and reasonable technical and organisational measures to protect your information. No online service is completely secure, so please contact us straight away if you think your information has been misused.