Privacy Policy — WrapGuard

Last revised: 26 October 2026. Effective: Upon publication on getwrapguard.com.

1. Who we are

This Privacy Policy explains how we collect, use, share and retain personal information when you visit https://getwrapguard.com, place an order, request a free visualization, provide photographs for a custom cover or otherwise communicate with us (together, the “Services”).

For the processing described here, the data controller is Matěj Merunka, trading as WrapGuard, a sole trader registered in the Czech Republic, Company Identification Number (IČO) 29686024, address Kosí 187, Zdiměřice, 252 42 Jesenice, Czech Republic (“WrapGuard”, “we”, “us” or “our”). You can contact us at info@getwrapguard.com or +420 776 371 311.

Our store runs on Shopify. Certain technology partners may act as independent controllers for some processing, as explained in their own privacy notices. This Policy complements our Terms of Service. Merely visiting the Store or purchasing does not mean that you consent to optional marketing or tracking.

2. Information we collect

Depending on your interactions with the Services and applicable law, we may process:

• Identity and contact details: name, email address, phone number, billing and delivery address and business identification details when relevant.
• Order and payment information: ordered products, amounts, currency, order status, payment method, payment confirmation, transaction identifiers and information necessary for invoicing, dispatch, customer support and claims. Full payment-card numbers are normally handled by payment providers rather than stored directly by WrapGuard.
• Customer-account information: contact details, preferences, purchase history and account settings, with authentication functions potentially operated by Shopify.
• Custom design and visualization information: vehicle manufacturer, model, year, body style, dimensions, photographs, uploaded files, selected colors, graphics and logos, design instructions, revision requests and records of final approval.
• Communications: emails, messages, customer-service requests, disputes, returns and related correspondence.
• Technical and usage data: IP address, device and browser information, cookie identifiers, website events, visited pages and approximate location inferred from technical data, where collection is enabled and lawful.
• Marketing information: newsletter choices, subscription status, email interactions and, where lawful and enabled, analytics or advertising events.

Vehicle photographs may incidentally show license plates, people, private property or other identifying details. Please obscure details that are unnecessary for the requested design and avoid sharing sensitive personal information or material you are not authorized to provide.

3. Where information comes from

We obtain data directly from you when you browse, purchase, request a design or contact us; automatically from use of the Store and lawful tracking technologies; and from service providers and partners necessary to complete transactions or provide requested services, including Shopify, payment processors, delivery partners and design or production suppliers. We may also receive information from a person legitimately acting on your behalf.

4. Why we use information and our legal bases

Where the EU or UK GDPR or similar legislation applies, our typical legal bases are:

Purpose	Typical legal basis
Processing orders, payment, delivery, customer accounts and related support	Performance of a contract or steps requested before entering a contract (GDPR Art. 6(1)(b))
Preparing requested free visualizations and custom design or manufacturing work	Pre-contractual steps at your request or contract performance; another appropriate basis when the circumstances require it
Keeping legally required business, tax and accounting records	Compliance with a legal obligation (Art. 6(1)(c))
Preventing fraud, protecting website security, handling disputes and defending legal claims	Legitimate interests (Art. 6(1)(f)), or a legal obligation as relevant
Sending newsletters or promotional emails	Consent (Art. 6(1)(a)) or another basis expressly allowed for particular existing-customer communications under applicable direct-marketing law
Non-essential analytics and marketing tracking through cookies or similar technologies	Consent where required by applicable law

Our relevant legitimate interests include safeguarding the Store, preventing misuse, establishing or defending claims, and proportionately improving our services. Where processing relies on legitimate interests, you may have the right to object.

5. Vehicle photos, free AI visualizations and professional designs

When you request a free visualization or purchase a customized cover, we use the specifications, photos and design instructions you submit to respond to your request, prepare and revise artwork, manufacture the cover, communicate with you and fulfill related obligations.

We use third-party forms (including Tally where embedded in our Services), authorized designers, production suppliers and technical services to collect or process the information needed for your request. Only data reasonably necessary for the relevant work should be shared. If AI-based design tools are used, selected inputs may need to be processed by a relevant service provider; the actual service, contractual terms and data-handling arrangements must correspond to our deployed systems.

Submitting a photo or design for a visualization or an order does not, by itself, authorize us to publish it in public advertising or on social media. Any such promotional use must have an appropriate separate permission or other valid legal basis.

6. Shopify and our operational partners

Shopify provides our e-commerce infrastructure and may process personal information to operate checkout, account features, payments, fraud prevention, analytics and related commerce functions. Depending on the relevant feature, Shopify may act as a processor or as an independent controller.

We also share necessary data with payment providers, accountants or tax service providers, customer-support services, design and manufacturing partners, cloud storage providers and delivery carriers, subject to the roles and safeguards required by law. We restrict the data shared to what is appropriate for each purpose.

For more details see the Shopify Privacy Policy and Shopify Privacy Portal.

7. Email marketing — Klaviyo

We use Klaviyo, Inc. to manage newsletters, subscriber lists and automated email communications, such as welcome emails and permitted abandoned-cart or browse-reminder messages. Depending on configuration and the applicable legal basis, Klaviyo may process email addresses, subscription preferences, order history and interactions with emails and the Store on our behalf.

We send marketing messages only where permitted by the applicable law. You can opt out of marketing emails using the unsubscribe link in a message or by contacting info@getwrapguard.com. You may still receive essential transactional messages about your order after unsubscribing.

8. Cookies, analytics and advertising

Strictly necessary technologies support functions such as the shopping cart, checkout security, login sessions and language preferences. Depending on the current Store configuration, optional analytical or advertising technologies may include Google Analytics, Meta Pixel, and related functions of Shopify or Klaviyo.

Where local law requires consent, optional analytics, advertising cookies and comparable tracking must not be activated before valid consent. Where legally required, visitors must be able to accept or reject optional categories and withdraw their consent later through our privacy or cookie-preference controls. Declining optional tracking does not prevent ordinary shopping. This statement must be reflected in the Store's actual cookie banner and technical blocking behavior.

Some regions give residents additional rights to opt out of targeted advertising or the “sale” or “sharing” of personal information as those terms are defined by local law. Where such rules apply to our activities, we will honor those rights and provide the legally required means to exercise them.

9. Recipients of personal information

We may disclose personal information, as reasonably necessary and legally allowed, to contracted processors, Shopify and other technical partners, payment and accounting providers, delivery companies, authorized graphic designers and manufacturers, legally operating advertising partners where applicable, and authorities where required by law. Relevant information may also be transferred in a lawful business reorganization with appropriate safeguards.

10. International transfers

Service providers, including Shopify, Klaviyo and other technology partners, may process information in countries other than where you live, including the United States. When the EU or UK GDPR applies, transfers outside the EEA or UK are subject to an appropriate legal transfer mechanism, where required. This may include an adequacy decision, an applicable certified EU–US Data Privacy Framework arrangement, European Commission Standard Contractual Clauses, UK-approved safeguards or another legally permitted mechanism, as relevant to the provider and current law. You can contact us for information about the applicable safeguards.

11. How long we keep information

We retain information for as long as reasonably needed for the relevant purpose and legal requirements. Order, tax and accounting documents are kept for their applicable statutory retention periods (up to 10 years for certain tax documents). Design files, communications and customer-service records are kept for order completion and for a reasonable period related to defect claims, dispute resolution and the protection of legal rights. Marketing information is kept while the relevant basis for processing exists, with limited records of opt-outs where necessary to honor preferences. Technical and security logs and cookies have retention periods appropriate to their function and the applicable service configuration.

We delete, anonymize or lawfully archive information when it is no longer needed. Contact us if you would like details about the criteria or period applied to a particular category of personal information.

12. Your rights

Subject to the applicable data protection law, you may have the right to access, correct, delete or obtain a portable copy of your personal information, restrict or object to certain processing, and withdraw consent at any time where consent is the basis for processing. Withdrawal does not invalidate processing lawfully carried out before withdrawal. Rights may be subject to lawful exceptions, such as mandatory tax-record retention.

To exercise your rights, contact info@getwrapguard.com. We may reasonably verify your identity before responding. Where the GDPR applies, we ordinarily respond within one month, subject to any lawful extension. We will not unlawfully discriminate against you for exercising privacy rights. Authorized representatives may submit requests where permitted by law.

13. Complaints and regulators

If you have a concern, contact info@getwrapguard.com with a description of your complaint. We will review the matter, request any information reasonably needed to investigate, and respond within the period required by applicable law. You may also have the right to lodge a complaint with a competent data protection authority. In the Czech Republic, this is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů) at https://uoou.gov.cz. A list of EEA supervisory authorities is available from the European Data Protection Board. Privacy rights under other applicable national or state laws are not excluded by this Policy.

14. Security

We take proportionate technical and organizational steps to protect personal information from unauthorized access, misuse and accidental loss. No online system is perfectly secure. Please avoid sending unnecessary sensitive information through unsecured channels. Access to custom-design materials is limited to those who reasonably need them to process the request or order.

15. Children

The Store is not intended for children who cannot lawfully enter into purchases under the applicable law. We do not knowingly target personal-data collection toward children. If you believe that a child has improperly submitted personal information, please contact us so we can review and take appropriate action.

16. Third-party sites

Our Services may link to independent third-party websites and services that operate under their own privacy policies. We are not responsible for their independent processing beyond what applicable law requires.

17. Information you need to provide and automated processing

We need certain information to process your order or requested visualization, particularly contact details, the relevant vehicle and design specifications, a delivery address where an item must be shipped, and information needed for payment. If you do not provide essential details, we may be unable to prepare a requested visualization, complete a custom design or fulfill an order. Newsletter subscriptions and optional advertising or analytics tracking are not required to purchase.

We may use automated rules, segmentation, recommendations and fraud-detection signals in our commerce or marketing systems. We do not intend to make decisions about customers based solely on automated processing that produce legal or similarly significant effects without complying with any applicable notification, review and other legal requirements.

18. Additional rights in specific countries

EEA, United Kingdom and Switzerland: Where the respective data protection rules apply, your rights include the rights described in Section 12. You may also complain to the competent supervisory authority. Applicable rules on international transfers, consent and direct marketing will be respected.

Australia: Where the Australian Privacy Principles apply to our activities, individuals may request access to or correction of personal information and complain to us using the contact details below. We will investigate and respond within a reasonable time. If a complaint remains unresolved, the individual may be able to contact the Office of the Australian Information Commissioner (https://www.oaic.gov.au). Personal information may be disclosed to providers outside Australia, including providers in the Czech Republic, the United States and other locations relevant to the selected service or shipping destination; the actual countries depend on the providers involved.

United States: Where a state privacy law applies to our activities, residents may have additional rights to know, access, correct or delete personal information and to opt out of certain uses, including sales, sharing for cross-context behavioral advertising, or targeted advertising as legally defined. Such terms may apply to some advertising integrations even if data are not sold for money. Rights and opt-out mechanisms will be provided where legally required. To request a review or exercise an applicable right, contact our privacy address below. We will not unlawfully discriminate against you for exercising these rights.

The availability of rights varies according to your location, our activities and the legal thresholds that apply to us. This section does not claim that every privacy law applies to every visitor.

19. Changes to this Policy

We may update this Policy when our practices, providers or legal requirements change. The current version will be posted on the Store and significant changes will be communicated where required by applicable law.

20. Contact

Controller: Matěj Merunka, trading as WrapGuard
Czech Company ID (IČO): 29686024
Address: Kosí 187, Zdiměřice, 252 42 Jesenice, Czech Republic
Privacy contact: info@getwrapguard.com
Phone: +420 776 371 311