Privacy & Cookie Policy

1. Who is responsible

The controller under the EU General Data Protection Regulation (GDPR) is [COMPANY NAME], [STREET AND NUMBER], [POSTAL CODE] [CITY], Poland, email: [SUPPORT EMAIL].

2. What data we process and why

Orders: name, email, shipping and billing address, phone number (if given), items ordered, order history. Purpose: processing and delivering your order and handling returns. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
Payment: payments are processed by our payment providers. We do not store your full card details. Legal basis: Art. 6(1)(b) GDPR.
Accounting and tax: invoices and order records. Legal basis: legal obligation (Art. 6(1)(c) GDPR).
Security and fraud prevention: IP address, device and browser data. Legal basis: legitimate interest in a secure store (Art. 6(1)(f) GDPR).
Newsletter: your email address, only if you sign up. Legal basis: consent (Art. 6(1)(a) GDPR). You can unsubscribe at any time via the link in every email.
Customer service: the content of your messages. Legal basis: Art. 6(1)(b) and (f) GDPR.

3. Who receives your data

Shopify (our store platform), which hosts the store and processes order data on our behalf.
Payment providers for processing payments.
Fulfilment partners and suppliers who pack and ship your order. They receive your name, shipping address, phone number (if given) and the ordered items.
Shipping carriers for delivery and tracking.

Some of these recipients are located outside the European Economic Area (for example in the USA or China). In these cases data is transferred only on the basis of an adequacy decision of the European Commission or the EU Standard Contractual Clauses (Art. 46 GDPR).

4. How long we keep data

We keep order and accounting data for as long as required by tax and accounting law (in Poland generally 5 years from the end of the year in which the tax obligation arose). Other data is deleted when it is no longer needed for its purpose or when you withdraw your consent.

5. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection, and the right to withdraw consent at any time with effect for the future. To exercise your rights, email [SUPPORT EMAIL]. You also have the right to lodge a complaint with a supervisory authority, for example the President of the Personal Data Protection Office (UODO) in Poland or the authority in your country of residence.

6. Cookies

Our store uses cookies and similar technologies.

Necessary cookies are required for the store to work (for example the shopping cart, checkout and security). They are used without consent (Art. 6(1)(f) GDPR and the applicable telecommunications law).
Analytics and marketing cookies help us understand how the store is used and show relevant ads. They are only set if you give your consent in the cookie banner (Art. 6(1)(a) GDPR).

You can change or withdraw your cookie consent at any time using the cookie settings link at the bottom of every page, or by deleting cookies in your browser.