Privacy policy

What information is needed and how it is handled.

Controller

Seller

To be completed before sales open

Polish tax ID

To be completed before sales open

Business address

To be completed before sales open

Returns address

To be completed before sales open

Email

To be completed before sales open

Contact the controller above about personal data. This policy describes the current store and planned order processing when sales open.

Purposes and legal bases

• Answering correspondence: legitimate interest in communication under GDPR Article 6(1)(f), or pre-contract steps under Article 6(1)(b) where relevant.
• Fulfilling orders after launch: customer name, email, delivery address and necessary contact details under Article 6(1)(b).
• Tax, accounting and consumer-law obligations: Article 6(1)(c).
• Security and establishing, exercising or defending claims: Article 6(1)(f).

Providing data is voluntary, but necessary order or contact data are required to fulfil that request. There is currently no newsletter or advertising profiling.

Recipients and international transfers

Authorised staff and providers of technical, payment, delivery and accounting services may receive data as needed. The site is hosted by Vercel Inc. (USA). Hosting processes technical connection data, including IP address, browser and request information, to deliver the site and maintain security. See the provider’s privacy notice and data processing terms. The store does not currently transmit payment orders. Shopify and payment and delivery providers will be documented according to the actual configuration before sales open.

Transfers outside the EEA require a valid GDPR Chapter V safeguard, such as an adequacy decision or standard contractual clauses with any necessary additional measures. Ask the controller for details and a copy of applicable safeguards.

Retention

Correspondence is retained as needed to resolve the matter and, where justified, until applicable claim limitation periods expire. Order records are retained to fulfil the contract and legal duties; Polish tax records are generally retained for five years from the end of the year in which the payment deadline fell. Unneeded data are deleted.

Your rights

You may request access, rectification, erasure, restriction and, where applicable, portability. You may object on grounds relating to your situation to processing based on legitimate interests. Where consent applies, you may withdraw it without affecting prior lawful processing. You may complain to the Polish supervisory authority at uodo.gov.pl.

Browser storage

Your basket and intro preference are saved locally; they are not sent to advertising systems. See Cookies & browser storage. No solely automated decision-making with legal or similarly significant effects is used.