Privacy Policy

Last updated: 21 August 2026

By Barnabas respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how By Barnabas collects, uses, stores and protects personal data when you visit our website, contact us, purchase an item, subscribe to communications or otherwise interact with us.

By Barnabas is operated by Martin Dohnálek, a sole trader based in the Czech Republic.

1. Who is responsible for your personal data?

The data controller responsible for the processing of your personal data is:

Martin Dohnálek – By Barnabas
Špitálka 81/18b
602 00 Brno
Czech Republic

IČO: 05997798
Email: info@bybarnabas.com
Phone: +420 720 940 500
Website: www.bybarnabas.com

For any questions concerning the processing of your personal data or to exercise your data protection rights, please contact us at info@bybarnabas.com.

2. What personal data do we collect?

Depending on how you interact with By Barnabas, we may collect and process the following categories of personal data:

When you contact us

  • name

  • email address

  • telephone number, if provided

  • postal or delivery address, if relevant

  • the content of your message and any information you choose to provide

When you purchase an item

  • name

  • billing address

  • delivery address

  • email address

  • telephone number, where required for delivery

  • order and invoice information

  • payment and transaction information

  • correspondence relating to your purchase, delivery, return or complaint

When you visit our website

Depending on the cookies and other technologies enabled on the website, we may collect:

  • IP address

  • browser and device information

  • approximate location derived from IP address

  • pages visited and interactions with the website

  • date and time of visits

  • referring website or source

  • information collected through cookies and similar technologies

We only collect information that is reasonably necessary for the relevant purpose.

3. Why do we process your personal data?

We may process your personal data for the following purposes:

3.1. Processing and fulfilling orders

We use your personal data to:

  • process and confirm purchases;

  • communicate with you about your order;

  • issue invoices and payment instructions;

  • arrange delivery;

  • provide information about the status of your order;

  • process returns, refunds and complaints;

  • provide customer support.

The legal basis for this processing is the performance of a contract or taking steps at your request before entering into a contract.

3.2. Legal and accounting obligations

We may process and retain personal data where necessary to comply with legal obligations, including accounting, tax, consumer protection and other statutory requirements.

The legal basis is compliance with a legal obligation.

3.3. Protecting our legitimate interests

We may process personal data where necessary for our legitimate interests, including:

  • protecting the security of our website and systems;

  • preventing fraud or misuse;

  • establishing, exercising or defending legal claims;

  • maintaining business records;

  • communicating with existing customers about relevant products or services where permitted by law.

Where we rely on legitimate interests, we will consider the interests and rights of the individual concerned.

3.4. Direct marketing

Where permitted by applicable law, we may use your contact details to send information about By Barnabas, new arrivals, selected products, exhibitions, news or other relevant updates.

You may object to receiving marketing communications at any time by contacting us or using the unsubscribe option provided in the relevant communication.

We will respect your request to stop receiving direct marketing.

3.5. Website analytics and improvement

Where you have provided the required consent, we may use analytics and similar technologies to understand how visitors use our website and to improve its content, performance and user experience.

The relevant legal basis is consent where consent is required.

4. Cookies and Similar Technologies

By Barnabas uses cookies and similar technologies on its website, including cookies provided by Squarespace and, where enabled, third-party services.

Some cookies are strictly necessary for the website to function. Other cookies, including certain analytics and performance cookies, are non-essential and may require your consent under applicable law.

Squarespace may use analytics and performance cookies to provide website statistics and help us understand how visitors use the website. These may include information about visits, traffic sources, page views and website interactions.

Where required by law, non-essential cookies will only be placed on your device after you have provided the appropriate consent through our cookie banner.

You can manage or withdraw your cookie preferences at any time through the cookie settings available on our website.

For more information about the cookies used by Squarespace, please see Squarespace's own documentation concerning cookies and privacy.

5. Service Providers and Recipients

We use selected third-party service providers to operate By Barnabas and provide services to our customers.

Depending on how you interact with us, these providers may include:

Squarespace

Our website is hosted and operated using Squarespace. Squarespace may process information relating to visitors and customers in order to provide website hosting, security, analytics, e-commerce and related services.

Stripe

We use Stripe to process certain payments. When you pay using Stripe, payment and transaction information is processed by Stripe in accordance with its privacy policy and applicable data protection requirements.

By Barnabas does not store complete payment card details on its own systems.

PayPal

We may also accept payments through PayPal. Where PayPal is used, payment and transaction information is processed by PayPal in accordance with its privacy policy and applicable data protection requirements.

Mailchimp

We use Mailchimp to send newsletters and other marketing communications.

If you subscribe to our newsletter, your name and email address and, where applicable, information concerning your interaction with our emails may be processed by Mailchimp on our behalf.

Mailchimp is headquartered in the United States and may process personal data in the United States and other countries. Mailchimp states that it uses appropriate safeguards for European data transfers, including the EU-U.S. Data Privacy Framework and Standard Contractual Clauses where applicable.

You can unsubscribe from our marketing emails at any time by using the unsubscribe link contained in the relevant email or by contacting us directly.

Delivery and logistics providers

We may provide your name, delivery address, telephone number and email address to courier, freight, customs and logistics providers where this is necessary to deliver your purchase.

Depending on the destination and shipping method, these providers may include international courier and freight companies such as FedEx, UPS, GLS or other logistics providers.

Professional and business service providers

Where necessary, personal data may also be shared with our accountant, legal advisers, IT providers, insurers, payment providers or other professional service providers.

We only provide information that is reasonably necessary for the relevant purpose.

6. International transfers

Because By Barnabas operates internationally and uses online service providers and delivery partners, personal data may in some circumstances be processed outside the European Economic Area (EEA).

Where personal data is transferred outside the EEA, we will take appropriate measures to ensure that the transfer is carried out in accordance with applicable data protection law, including the use of an adequacy decision or appropriate safeguards where required.

Where relevant, further information about specific international transfers and the safeguards used may be requested by contacting us at info@bybarnabas.com.

7. How long do we keep your personal data?

We keep personal data only for as long as reasonably necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by law.

Different types of information may therefore be retained for different periods.

For example:

  • Order and transaction information may be retained for the period required by applicable accounting, tax and legal requirements.

  • Customer correspondence may be retained for as long as reasonably necessary to deal with the enquiry, order, complaint or potential legal claim.

  • Marketing information is retained until you unsubscribe or otherwise object, unless we have another lawful reason to retain it.

  • Website and cookie information is retained according to the relevant cookie or analytics provider's settings and applicable legal requirements.

When personal data is no longer required, it will be securely deleted or anonymised where appropriate.

8. Your rights

Subject to the conditions and limitations set by applicable law, you have the following rights in relation to your personal data:

Right of access

You may ask whether we process personal data concerning you and request a copy of that data.

Right to rectification

You may ask us to correct inaccurate or incomplete personal data.

Right to erasure

You may ask us to delete your personal data where there is no longer a lawful reason for us to retain it.

This right is not absolute. For example, we may need to retain certain information to comply with legal obligations or to establish, exercise or defend legal claims.

Right to restriction of processing

You may ask us to restrict the processing of your personal data in certain circumstances.

Right to data portability

Where applicable, you may request personal data that you have provided to us in a structured, commonly used and machine-readable format, or ask us to transmit it to another controller.

Right to object

You may object to processing based on our legitimate interests in certain circumstances.

You have an absolute right to object to the processing of your personal data for direct marketing purposes.

Right to withdraw consent

Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

9. How to exercise your rights

To exercise any of the rights described above, please contact:

Martin Dohnálek – By Barnabas
Email: info@bybarnabas.com
Address: Špitálka 81/18b, 602 00 Brno, Czech Republic

Please provide sufficient information for us to identify you and understand your request.

We may need to verify your identity before providing personal data or making changes to your information, particularly where this is necessary to protect your privacy and security.

We will respond to requests within the period required by applicable data protection law.

10. Security

We take reasonable technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

Access to personal data is limited to persons and service providers who need it for legitimate business purposes.

Where personal data is transmitted through our website, appropriate security measures such as encrypted connections are used where supported by the relevant service.

However, no method of transmission or storage can be guaranteed to be completely secure.

11. Payments

Payments made through Stripe or PayPal are processed by the relevant payment provider.

When you make a payment, the payment provider may collect and process information such as your name, billing information, payment details, transaction information, IP address and other information necessary to process and secure the transaction.

By Barnabas does not intentionally store complete payment card details on its own systems.

The processing of payment information by Stripe or PayPal is also governed by the respective provider's privacy policy and terms.

12. Third-party websites and services

Our website may contain links to third-party websites, including social media platforms, marketplaces, shipping services or other external websites.

Once you leave the By Barnabas website, the processing of your personal data is governed by the privacy policy and terms of the relevant third party.

We are not responsible for the privacy practices, security or content of third-party websites.

13. Third-Party Websites, Social Media and External Services

Our website may contain links to or integrations with third-party websites and services, including social media platforms, marketplaces, payment providers, delivery services and other external websites.

These may include Instagram, Facebook, Pinterest, Pamono, Vinterior, Selency, Whoppah and other platforms on which By Barnabas may operate or display products.

If you interact directly with a third-party platform, that platform may process your personal data as an independent controller under its own privacy policy.

We are not responsible for the privacy practices, security or content of third-party websites or services.

We recommend reviewing the privacy policy of any third-party service before providing personal information through it.

14. Children's privacy

Our website and services are intended for adults and are not directed at children.

We do not knowingly collect personal data from children for the purpose of selling goods or providing services.

If you believe that a child has provided us with personal data without appropriate consent, please contact us at info@bybarnabas.com.

15. Complaints

If you believe that your personal data has been processed unlawfully, please contact us first at info@bybarnabas.com so that we can investigate the matter.

You also have the right to lodge a complaint with the competent supervisory authority.

In the Czech Republic, the supervisory authority is:

Office for Personal Data Protection (Úřad pro ochranu osobních údajů)
Pplk. Sochora 27
170 00 Prague 7
Czech Republic
Email: posta@uoou.gov.cz
Website: https://uoou.gov.cz/

16. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business, the services we use or applicable legal requirements.

The latest version will always be published on this page, together with the date of the most recent update.

17. Contact

If you have any questions about this Privacy Policy or the way By Barnabas handles personal data, please contact:

Martin Dohnálek – By Barnabas
Špitálka 81/18b
602 00 Brno
Czech Republic

IČO: 05997798
Email: info@bybarnabas.com
Phone: +420 720 940 500
Website: www.bybarnabas.com