Updated 5 November 2026.
1. Who is responsible for your data
The data controller for xglide.store is X Glide s.r.o., Czech company ID 21464243, registered office Vřesová 679/9, Troja, 181 00 Praha 8, Czech Republic, registered with the Municipal Court in Prague, Section C, File 402288.
For questions and privacy requests, contact support@xglide.store, call +420 606 201 126, or write to our correspondence address: X Glide s.r.o., Dlouhá 186/31, 412 01 Litoměřice, Czech Republic.
2. Website visits and enquiries
Displaying the website involves technical processing, in particular of your IP address, requested page, and browser and connection information. We use this to display and operate the site and protect it from misuse. Our legal basis is our legitimate interest in operating a secure website under Article 6(1)(f) GDPR.
If you email or call us, we process the contact details and information you provide to answer your enquiry. For a purchase enquiry, the basis is taking steps at your request before entering into a contract under Article 6(1)(b) GDPR. For other correspondence, it is our legitimate interest in responding to you.
3. Orders
To fulfil your purchase, we need your name, contact, billing and delivery details, order contents, and payment and delivery information. We obtain these from you and, where necessary, from the payment service and carrier, for example confirmation of payment or delivery.
Our legal basis for the contract, payment, delivery and related messages is performance of the contract under Article 6(1)(b) GDPR. Handling defect claims, withdrawal requests and accounting or tax records also involves compliance with legal obligations under Article 6(1)(c). Necessary records for resolving disputes and protecting legal claims may be retained on the basis of legitimate interests under Article 6(1)(f). We do not require consent for these purposes.
4. Who may receive data
Where necessary, we use hosting, email and technical support providers. Once orders begin, recipients may also include accounting and legal advisers, banks, and public authorities where required by law. Providers processing data on our behalf are subject to appropriate contractual obligations.
Stripe payments: We use Stripe to process payments. Services for Czechia involve in particular the Irish companies Stripe Payments Europe, Limited and, depending on the service, Stripe Technology Europe, Limited. Stripe processes transaction and security information and acts as an independent controller for some activities. Other group companies may be involved depending on the context. See Stripe’s Privacy Policy and the Stripe Privacy Center for details and the relevant controllers.
Packeta / Zásilkovna delivery: if this delivery option is selected, we will share necessary recipient, contact, delivery location and shipment details with Zásilkovna s.r.o., Czech company ID 28408306. It acts as an independent controller for delivery. See Packeta / Zásilkovna’s Privacy Policy.
5. Transfers outside the EEA
Using Stripe’s global payment service may involve processing outside the European Economic Area, particularly in the United States. Stripe describes transfers based on adequacy decisions, including the EU–US framework for certified recipients, or standard contractual clauses and other applicable safeguards. Details and access to the clauses are available in the Stripe Privacy Center. You can also ask us for information about specific recipients and transfer safeguards.
6. How we determine retention periods
Data is not kept indefinitely. Retention depends on the purpose and the type of record:
- Enquiries and correspondence: for the time needed to resolve the matter and related follow-up; in a dispute, also for the time necessary to protect legal claims.
- Orders: while performing the contract and handling purchase-related rights; necessary records are then retained for applicable limitation and statutory retention periods.
- Accounting and tax documents: for the statutory periods applying to the particular document and accounting or tax period.
- Operational and security information: according to the need to operate the site and detect and resolve a technical issue or security incident.
Data should be erased or anonymised once its purpose and any retention requirement end. This does not require us to delete a document that the law still requires us to retain. Stripe and Zásilkovna set retention periods for their own activities in their respective policies.
7. Cookies and similar technologies
Cookies are small records stored in your browser. We use only technology necessary for requested website functions and security, such as maintaining a session when you use shop functions. We do not enable analytics or advertising cookies or order source attribution.
The following overview covers common cookies for language selection, the cart and payment security. The cookies used depend on the functions you use and may not all be set on every visit:
xglide_lang— remembers your chosen language; up to 1 year.woocommerce_cart_hashandwoocommerce_items_in_cart— detect changes to the cart contents; for the browser session.wp_woocommerce_session_*— links your browser to the stored cart; normally 2 days without signing in and 7 days for a signed-in session.__stripe_mid— Stripe fraud prevention and payment risk assessment; up to 1 year.__stripe_sid— Stripe fraud prevention and payment risk assessment; up to 30 minutes.
These periods run from when a cookie is set or renewed. Your browser may shorten them, and you can delete cookies earlier.
Necessary cookies do not require consent. You can control or delete cookies through your browser settings; restrictions may affect the relevant website function. The payment service also explains its cookies and purposes in the Stripe Cookie Policy and Stripe’s cookie list with storage periods. Before introducing any optional cookies, we will provide specific information and a way to consent in advance, refuse them and easily withdraw consent.
8. Which information you need to provide
You can browse without entering a name or email address. To receive a reply, you need to give us usable contact details. Information necessary for a purchase is marked in the order form; without it, we cannot process and deliver the order. Other information is optional. An enquiry or purchase does not itself constitute consent to advertising.
9. Your rights and complaints
Subject to the GDPR’s conditions, you may request access and a copy of your data, correction, erasure, restriction and portability. You may object to processing based on legitimate interests. If any processing is based on consent, you may withdraw it at any time without affecting earlier lawful processing.
Email support@xglide.store or use another contact method above. If we have reasonable doubts, we may request information necessary to verify your identity. We will respond without undue delay, normally within one month, and will inform you in time of any extension allowed by law. You can complain to the Czech Office for Personal Data Protection.
10. Automated decisions and updates
We do not make solely automated decisions with legal or similarly significant effects or create advertising profiles. Stripe may use automated security and fraud checks during payment under its own policies. Contact us if you have a payment problem.
We update this information to reflect how the site actually operates, in particular before introducing new functions or changing processing purposes.