Last updated: September 13, 2026

THEFOUR operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the "Services"). THEFOUR is operated by IVMA UNIT Kft. and is powered by Shopify, which enables us to provide the Services to you.

This Privacy Policy describes how we collect, use, disclose and otherwise process your personal information when you visit, use, or make a purchase or other transaction using the Services, subscribe to our marketing communications or THEFOUR Inner Circle, or otherwise communicate with us.

If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing and disclosure of your personal information.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use and disclosure of your information as described in this Privacy Policy.

Data Controller and Contact Information

For the purposes of applicable data protection laws, including the General Data Protection Regulation (EU) 2016/679 ("GDPR"), the data controller is:

IVMA UNIT Kft.
Operating under the brand THEFOUR
Registered office: 1105 Budapest, Halom utca 36. C. lház. 2. em. 10. ajtó, Hungary
Business premises / THEFOUR Budapest Store: 1065 Budapest, Lázár utca 18., Hungary
Company registration number: 01-09-972814
Tax number: 23589973-2-42
Website: https://thefour.hu
Email: contact@thefour.hu

Personal Information We Collect or Process

When we use the term "personal information," we are referring to information that identifies or can reasonably be linked to you or another person. Personal information does not include information that is collected anonymously or that has been de-identified so that it cannot identify or reasonably be linked to you.

We may collect or process the following categories of personal information, including inferences drawn from this personal information, depending on how you interact with the Services, where you live, and as permitted or required by applicable law:

• Contact details, including your name, address, billing address, shipping address, phone number and email address.
• Financial information, including payment and transaction information, payment method and payment confirmation. Payment card information is generally processed directly by Shopify and/or the applicable payment service provider.
• Account information, including account credentials, preferences and settings where applicable.
• Transaction information, including the items you view, put in your cart, add to a wishlist or purchase, return, exchange or cancel, as well as your past transactions.
• Communications with us, including information that you include in communications with us, for example when sending a customer support inquiry.
• Device information, including information about your device, browser or network connection, IP address and other unique identifiers.
• Usage information, including information regarding your interaction with the Services, such as how and when you interact with or navigate the Services.
• Marketing and subscription information, including your marketing subscription status, the date and source of your subscription, consent records, communication preferences and, where permitted, information about your interaction with our marketing communications.

Personal Information Sources

We may collect personal information from the following sources:

• Directly from you, including when you create an account, make a purchase, subscribe to THEFOUR Inner Circle or other marketing communications, visit or use the Services, communicate with us, or otherwise provide us with your personal information.
• Automatically through the Services, including from your device when you use our products or services or visit our website, and through the use of cookies and similar technologies.
• From our service providers, including when we engage them to enable certain technology or services and when they collect or process your personal information on our behalf.
• From our partners or other third parties, where permitted by applicable law.

How We Use Your Personal Information

Depending on how you interact with us or which of the Services you use, we may use personal information for the following purposes:

• Provide, Tailor and Improve the Services. We use your personal information to provide you with the Services, including to perform our contract with you, process payments, fulfil orders, remember preferences and items you are interested in, send notifications related to your account or order, process purchases, returns and exchanges, create and manage your account, arrange shipping, and improve the Services and your shopping experience.
• Marketing and Advertising. Where permitted by applicable law and, where required, with your consent, we use your personal information for marketing and promotional purposes, such as sending marketing and promotional communications and showing advertisements for our products or services on the Services or other websites.
• THEFOUR Inner Circle. If you choose to join THEFOUR Inner Circle, we may use your contact details to send you information about selected product drops, early access opportunities, THEFOUR events, invitations, behind-the-scenes content, brand news, offers, surveys, polls and other Inner Circle communications. Participation is voluntary, and you may unsubscribe at any time.
• Security and Fraud Prevention. We use your personal information to authenticate accounts, provide a secure payment and shopping experience, detect, investigate or take action regarding possible fraudulent, illegal, unsafe or malicious activity, and protect our Services, customers and business.
• Communicating with You. We use your personal information to provide customer support, respond to you, provide effective Services and maintain our business relationship with you.
• Legal Reasons. We use personal information to comply with applicable laws and legal obligations, respond to valid legal processes, establish, exercise or defend legal claims, and enforce or investigate potential violations of our terms or policies.

Legal Bases for Processing in the EEA and UK

If you are located in the European Economic Area ("EEA") or the United Kingdom, we process your personal information only where we have an appropriate legal basis.

Depending on the processing activity, we rely on one or more of the following legal bases:

• Performance of a contract under Article 6(1)(b) GDPR, including to process and fulfil purchases, payments, delivery, returns, exchanges and customer account services.
• Compliance with a legal obligation under Article 6(1)(c) GDPR, including accounting, taxation, consumer protection and other statutory obligations.
• Your consent under Article 6(1)(a) GDPR, including for email marketing, THEFOUR Inner Circle and non-essential cookies, analytics or advertising technologies where consent is required by law.
• Our legitimate interests under Article 6(1)(f) GDPR, where those interests are not overridden by your fundamental rights and freedoms, including maintaining the security of our Services, preventing fraud, providing customer support, improving our operations and establishing or defending legal claims.

Where processing is based on your consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before your consent was withdrawn.

Marketing Communications and THEFOUR Inner Circle

If you choose to subscribe to our marketing communications or THEFOUR Inner Circle, we may send you marketing emails containing information such as new collections, selected drops, early access opportunities, THEFOUR events, invitations, behind-the-scenes content, brand news, promotions, surveys and polls.

The legal basis for sending such communications to subscribers in the EEA is your consent.

You can withdraw your consent and unsubscribe at any time by clicking the unsubscribe link included in our marketing emails or by contacting us at contact@thefour.hu.

If you unsubscribe, we may retain limited information necessary to record and respect your preference and ensure that marketing communications are no longer sent to you.

Even if you opt out of marketing communications, we may continue to send you non-promotional communications where necessary, such as order confirmations, shipping updates, account communications or information relating to purchases you have made.

Cookies and Similar Technologies

We and our service providers use cookies and similar technologies in connection with the Services.

These technologies may include:

• Strictly necessary technologies that are required for essential functions such as navigation, checkout, cart functionality, authentication, security and remembering your privacy choices.
• Preference technologies that help remember your choices and improve your experience.
• Analytics technologies that help us understand how visitors use the Services and measure website performance.
• Advertising and marketing technologies that may be used to measure advertising performance and, where permitted, provide more relevant advertising.

Where applicable law requires prior consent, including in the EEA and the United Kingdom, non-essential cookies and similar technologies are used only after the required consent has been provided.

You can accept, decline or manage applicable cookie and tracking preferences using the privacy and cookie controls available on the Site. You may change or withdraw your consent at any time through these controls.

How We Disclose Personal Information

In certain circumstances, we may disclose your personal information to third parties for legitimate purposes subject to this Privacy Policy. Such circumstances may include:

• With Shopify, vendors and other third parties who perform services on our behalf, such as IT management, payment processing, data analytics, customer support, cloud storage, fulfilment and shipping.
• With business and marketing partners to provide marketing services and advertise to you where permitted by applicable law. For example, we use Shopify to support personalised advertising with third-party services based on online activity. Depending on where you reside, you may have a right to direct us not to share information about you for targeted advertising. You can exercise applicable rights to opt out of those uses here.
• When you direct, request or otherwise consent to our disclosure of certain information to third parties, such as when we share information with delivery providers in order to ship your products.
• With our affiliates or otherwise within our corporate group, where applicable.
• In connection with a business transaction such as a merger, acquisition or restructuring, or where necessary to comply with applicable legal obligations, respond to lawful requests, enforce applicable terms or policies, or protect or defend the Services, our rights, or the rights of our users or others.

We do not sell personal information for monetary consideration. However, certain disclosures may be considered a "sale", "sharing" or use for "targeted advertising" under the broader definitions contained in some United States privacy laws. Where applicable, you may exercise relevant opt-out rights through the privacy controls described in this Privacy Policy.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve the Services.

Information you submit to the Services will be transmitted to and shared with Shopify, as well as third parties that may be located in countries other than where you reside, in order to provide and improve the Services.

In addition, to help protect, grow and improve our business, we use certain Shopify enhanced features, including Shopify Network Intelligence, that may incorporate data and information obtained from your interactions with our Store along with interactions with other merchants and with Shopify.

To provide these enhanced features, Shopify may use personal information collected about your interactions with our Store, other merchants and Shopify. In these circumstances, Shopify is responsible for the processing of your personal information for these purposes, including responding to requests to exercise applicable rights relating to Shopify's use of your information.

To learn more about how Shopify uses your personal information and the rights you may have, please visit the Shopify Consumer Privacy Policy.

Depending on where you live, you may also exercise certain rights relating to Shopify's processing of your personal information through the Shopify Privacy Portal.

Google Maps and Google Services

Our Site may use services provided by Google, including Google Maps and Google Places, in order to display our store location and provide map and location-related functionality.

When these services are used, Google may receive technical information such as your IP address, browser or device information and information about your interaction with the relevant Google service.

We may also use other Google services for analytics, measurement or advertising where these services are enabled.

Where applicable law requires consent, non-essential Google technologies are used only after the required consent has been obtained.

For more information about how Google processes personal information, please see the Google Privacy Policy.

Third Party Websites and Links

The Services may provide links to websites or other online platforms operated by third parties. If you follow links to sites not affiliated with or controlled by us, you should review their privacy and security policies and other terms and conditions.

We do not guarantee and are not responsible for the privacy or security of such sites, including the accuracy, completeness or reliability of information found on these sites.

Information you provide on public or semi-public venues, including information you share on third-party social networking platforms, may also be viewable by other users of those platforms. Our inclusion of such links does not, by itself, imply any endorsement of the content on such platforms or of their owners or operators.

Children's Data

The Services are not intended to be used by children, and we do not knowingly collect personal information about children under the age at which they may independently consent to the relevant processing under applicable law.

If you are the parent or guardian of a child who has provided us with personal information and you believe that information has been collected unlawfully, you may contact us using the contact details below to request its deletion.

As of the effective date of this Privacy Policy, we do not have actual knowledge that we "share" or "sell", as those terms are defined under applicable law, personal information of individuals under 16 years of age.

Security and Retention of Your Information

Please be aware that no security measures are perfect or impenetrable, and we cannot guarantee absolute security. We use appropriate technical and organisational measures designed to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

How long we retain personal information depends on the purpose for which it was collected, our contractual relationship with you, applicable limitation periods, and legal or regulatory obligations.

In particular:

• Order and accounting information: information that forms part of accounting records or supporting accounting documentation is retained for at least 8 years in accordance with applicable Hungarian accounting legislation.
• Other transaction information: may be retained for as long as necessary to fulfil contractual, consumer protection, warranty and other legal obligations, and to establish, exercise or defend legal claims.
• Marketing and THEFOUR Inner Circle: personal information used for marketing is generally processed until you withdraw your consent, unsubscribe or the relevant marketing service is discontinued. Limited suppression information may be retained after an unsubscribe request in order to respect your preference.
• Customer service communications: are retained only for as long as reasonably necessary to deal with the relevant matter, comply with legal requirements or establish, exercise or defend legal claims.
• Cookies and similar technologies: retention periods depend on the particular technology and its purpose.

When personal information is no longer required, we delete, anonymise or otherwise securely dispose of it unless continued retention is required or permitted by law.

Your Rights and Choices

Depending on where you live, you may have some or all of the rights listed below in relation to your personal information. These rights are not absolute, may apply only in certain circumstances and, in some cases, we may decline a request where permitted by applicable law.

• Right to Access / Know. You may have a right to request access to personal information that we hold about you.
• Right to Delete. You may have a right to request that we delete personal information we maintain about you, subject to applicable legal exceptions and retention obligations.
• Right to Correct. You may have a right to request that we correct inaccurate or incomplete personal information that we maintain about you.
• Right of Portability. You may have a right to receive certain personal information in a structured, commonly used and machine-readable format and, where applicable, request that it be transferred to another controller.
• Right to Opt Out of Sale or Sharing for Targeted Advertising. Depending on where you reside, you may have a right to opt out of the "sale" or "sharing" of personal information or processing for purposes considered to be "targeted advertising". You can exercise applicable opt-out rights here.
• Managing Communication Preferences. You may opt out of promotional emails at any time by using the unsubscribe option displayed in our emails. If you opt out, we may still send non-promotional emails, such as communications about your account or orders.

If you visit our website with a recognised Global Privacy Control opt-out preference signal enabled, Shopify may automatically treat this, where applicable, as a request to opt out for the device and browser used to visit the website. To learn more about Global Privacy Control, visit https://globalprivacycontrol.org/.

Other than recognised legally applicable preference signals such as Global Privacy Control where supported, we do not necessarily respond to other "Do Not Track" signals that may be sent by a web browser or device.

Additional Rights for EEA and UK Residents

If you reside in the EEA or United Kingdom, and subject to exceptions and limitations provided by applicable law, you may have the following additional rights:

• Right to restriction of processing. You may have the right to ask us to restrict the processing of your personal information in certain circumstances.
• Right to object. Where we process personal information on the basis of legitimate interests, you may have the right to object to such processing.
• Withdrawal of consent. Where we rely on consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
• Right to data portability. Where the applicable legal requirements are met, you may have the right to receive personal information that you provided to us in a structured, commonly used and machine-readable format.

You may exercise applicable rights by contacting us using the details provided below. We may need to verify your identity before processing a request, as permitted or required by applicable law.

We will not discriminate against you for exercising applicable privacy rights.

Complaints

If you have complaints about how we process your personal information, please contact us using the details provided below so that we can try to resolve your concern.

If you are located in Hungary, you also have the right to lodge a complaint with the Hungarian data protection supervisory authority:

Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH)
1055 Budapest, Falk Miksa utca 9–11.
Postal address: 1363 Budapest, Pf. 9.
Hungary
Email: ugyfelszolgalat@naih.hu
Telephone: +36 (1) 391 1400
Website: https://www.naih.hu/
Information on GDPR complaint procedures: NAIH GDPR complaint procedure

If you are located elsewhere in the EEA, you may also lodge a complaint with the competent supervisory authority in the country of your habitual residence, place of work or the place of the alleged infringement. A current list of EEA data protection authorities is available from the European Data Protection Board.

International Transfers

We and our service providers may transfer, store and process personal information outside the country where you live.

If personal information is transferred outside the European Economic Area or the United Kingdom to a country that has not been recognised as providing an adequate level of data protection, we rely on recognised transfer mechanisms where required, such as the European Commission's Standard Contractual Clauses, the applicable UK transfer mechanisms, or another lawful safeguard.

Our service providers may also rely on applicable adequacy decisions or other legally recognised international data transfer mechanisms.

Automated Decision-Making

THEFOUR does not make decisions about you based solely on automated processing that produce legal effects concerning you or similarly significantly affect you within the meaning of Article 22 GDPR.

Shopify, payment service providers or security providers may use automated systems for purposes such as fraud prevention, transaction security and risk assessment.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices, Services, technologies or for operational, legal or regulatory reasons.

We will post the revised Privacy Policy on this website, update the "Last updated" date and provide any additional notice required by applicable law.

Contact

If you have any questions about our privacy practices or this Privacy Policy, or if you would like to exercise any rights available to you, please contact us:

IVMA UNIT Kft. / THEFOUR
1105 Budapest, Halom utca 36. C. lház. 2. em. 10. ajtó
Hungary
Email: contact@thefour.hu
Telephone: +36 30 268 7666
Website: https://thefour.hu

For the purposes of applicable data protection laws, IVMA UNIT Kft. is the data controller of your personal information, except where another party, such as Shopify, acts as an independent controller for processing described in its own privacy documentation.