Last updated: 22 October 2026
This policy explains what personal data Quokka Planet collects when you visit quokkaplanet.com, sign up for our emails or buy from us, why we need it, who we share it with, how long we keep it and what rights you have. We follow the EU General Data Protection Regulation (GDPR), the UK GDPR and Hungarian Act CXII of 2011. If you are in the United States, Australia or New Zealand, the same practices apply to you.
1. Who we are
Quokka Planet is run by:
- LÉNOSZ-KER Korlátolt Felelősségű Társaság (LÉNOSZ-KER Kft.)
- Registered office: Kossuth utca 6., 5538 Biharugra, Hungary
- Company registration number: 04-09-15310 (Registry Court of Gyula)
- Tax number: 27928789-2-04 · EU VAT number: HU27928789
- Email: hello@quokkaplanet.com
We are the data controller. We have not appointed a data protection officer because the law does not require one. Write to the address above with any question about your data.
2. What we collect and why
2.1 When you place an order
- Data: name, email address, billing and delivery address, phone number (if you give one), the products you order, order value, payment status and any message you add. We never see or store your full card details: payment is handled by the payment provider shown at checkout.
- Why: to take payment, have your order printed and delivered, send order and shipping emails, handle returns and reprints, and keep the accounting records the law requires.
- Legal basis: performance of the contract with you (GDPR Art. 6(1)(b)) and our legal obligations for accounting and tax (Art. 6(1)(c)).
- How long: order and invoice records for 8 years after the end of the year of purchase, as Hungarian accounting law requires (Act C of 2000, section 169). Data needed only for delivery or support is deleted sooner once it is no longer needed.
2.2 Customer account
- Data: name, email, password (stored encrypted), saved addresses and order history.
- Why: so you can see your orders and check out faster.
- Legal basis: your consent when you create the account (Art. 6(1)(a)) and the contract (Art. 6(1)(b)).
- How long: until you ask us to delete the account. Order records are kept as described in 2.1.
2.3 Launch list, newsletter and the free Rottnest field guide
- Data: first name, email address, the date and source of your sign-up and your consent, and whether you open or click our emails.
- Why: to send the launch discount code, the field guide and the emails you signed up for (new designs, conservation updates).
- Legal basis: your consent (Art. 6(1)(a)).
- How long: until you unsubscribe. Every email has a one-click unsubscribe link. After you unsubscribe we keep only a record of the unsubscribe so we do not email you again.
2.4 Contact form and emails
- Data: name, email, the topic, your order number if you add one, and your message.
- Why: to answer you.
- Legal basis: your consent (Art. 6(1)(a)); if your message is about an order, the contract (Art. 6(1)(b)).
- How long: up to 1 year after the conversation ends, or as long as the related order record if it is about an order.
2.5 Cookies, analytics and advertising
The site uses strictly necessary cookies (cart, checkout, login, security and remembering your cookie choice). These do not need consent.
With your consent only, we also use analytics and advertising cookies and pixels: Google Analytics (through Google Site Kit), Google for WooCommerce, and the Meta (Facebook/Instagram) Pixel. They help us see which pages work and measure our ads. You choose in the cookie banner, and you can change your choice at any time with the cookie icon in the corner of the page.
Legal basis: your consent (Art. 6(1)(a)). How long: as set by each cookie, at most 13 months.
2.6 Spam protection and security
Our forms use Google reCAPTCHA to stop spam, which processes technical data such as your IP address and browser details. Server logs (IP address, time, page requested) are kept for security for a short period. Legal basis: our legitimate interest in keeping the site safe (Art. 6(1)(f)).
3. Who we share data with
We share only what each service needs to do its job:
- Printify, Inc. and the print providers in its network: your name, delivery address, phone number (if given) and the items ordered, so your order can be printed and shipped. They also pass your details to the delivery carrier.
- Payment provider shown at checkout: payment and billing details, to take your payment securely.
- Namecheap, Inc. (EasyWP): hosts the website and its database.
- MailPoet (Automattic) and Elementor Site Mailer: send our newsletters and the site’s emails.
- Zoho: our email inbox at hello@quokkaplanet.com.
- Google (reCAPTCHA; with consent: Analytics, Google for WooCommerce) and Meta Platforms (with consent: Meta Pixel).
- Our accountant, and authorities where the law requires it.
We do not sell your personal data, and we do not share it for anyone else’s own marketing.
4. Transfers outside the EU
Some of these providers are based in, or use servers in, the United States and other countries outside the European Economic Area. Where that happens, the transfer is covered by the EU–US Data Privacy Framework where the provider is certified, or by the European Commission’s Standard Contractual Clauses.
5. Your rights
You can ask us at any time to:
- tell you what data we hold about you and give you a copy;
- correct it;
- delete it (unless the law requires us to keep it, for example invoices);
- restrict how we use it;
- send it to you or another company in a common format (data portability);
- stop using it where we rely on legitimate interest (right to object);
- withdraw your consent, without affecting what happened before.
Write to hello@quokkaplanet.com. We answer within one month.
If you think we have handled your data unlawfully, you can complain to the Hungarian supervisory authority: Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH), Falk Miksa utca 9–11, 1055 Budapest, Hungary, naih.hu. You can also complain to the data protection authority where you live or work, or go to court.
6. Children
The shop is not aimed at children under 16, and we do not knowingly collect their data. Parents can buy for their children; the order is in the parent’s name.
7. Security
The site runs over HTTPS, admin access is limited to the two of us, and we use the security tools of our hosting and of WordPress. No system is perfect: if a breach ever puts your data at risk, we will tell you and the authority as the law requires.
8. Changes
If we change this policy, we update the date at the top. Significant changes will also be announced by email to people on our list.