Privacy policy

Draft — not legally reviewed. This page is a structured template. Highlighted fields must be completed by the store owner, and the full text must be reviewed by a qualified adviser for the business's establishment country (Poland), product types and target markets before launch.

Controller

The controller is the seller named in our Legal notice. Contact for privacy matters: privacy contact email.

What we process and why

Contact form

Name, email address, optional subject and your message — to answer your enquiry. Legal basis: Art. 6(1)(b) GDPR (pre-contractual steps) or Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries). Retention: e.g. 12 months after the enquiry is closed.

Orders (once ordering opens)

Name, email, delivery and billing address, order contents and payment status — to perform the contract (Art. 6(1)(b)) and meet tax and accounting obligations (Art. 6(1)(c)). Retention: statutory accounting period under Polish law. We never store card details; payments are handled by the payment provider.

Cart

Your cart contents (product references and quantities only) are kept in your browser's local storage so they survive a page reload. No personal data is stored there.

Recipients

Hosting and database provider (data processor)
Payment provider — name once connected
Delivery carriers — names once confirmed
Email delivery provider — name once connected

International transfers: describe any transfers outside the EEA and safeguards.

Your rights

You have the right to access, rectification, erasure, restriction, data portability and to object to processing based on legitimate interests. You can lodge a complaint with a supervisory authority, in Poland the President of the Personal Data Protection Office (UODO), or the authority in your country of residence.

Marketing

We do not send marketing emails. If a newsletter is introduced, it will require separate, optional consent.

Cookies

See our Cookie policy.