Privacy policy

Effective from [DATE] October 2026. – Details in square brackets must be completed before publishing.

1. Controller

[COMPANY NAME], [ADDRESS], VAT number: [VAT NUMBER], e-mail: kontakt@ciekawki.pl (the "Controller"). Personal data is processed in accordance with Regulation (EU) 2016/679 (GDPR) and, for UK customers, the UK GDPR.

2. What data we process, why and for how long

Order fulfilment – name, delivery and billing address, e-mail, phone number, order details. Legal basis: performance of a contract (Art. 6(1)(b) GDPR). Kept until the contract is fulfilled and any claims are time-barred.
Invoicing and accounting – billing details. Legal basis: legal obligation (Art. 6(1)(c)). Kept for the period required by accounting law.
Customer service and complaints – name, e-mail, message content. Legal basis: legitimate interest or legal obligation. Kept for up to 3 years.
Newsletter (if you subscribe) – e-mail address. Legal basis: consent (Art. 6(1)(a)), which you can withdraw at any time via the link in each e-mail.
Cookies and measurement – cookies necessary for the store to work and, only with your consent, statistics and marketing cookies (e.g. Meta Pixel). You can change your consent at any time in the cookie banner.

3. Processors and recipients

Shopify International Limited (store platform, hosting), Dublin, Ireland
Shopify Payments / Stripe (card payments)
Carriers (e.g. GLS, DHL, PostNord, Royal Mail) – data needed for delivery
Meta Platforms Ireland Ltd. – only with your consent, for ad measurement
[OTHER PROVIDERS, e.g. fulfilment partner, e-mail service, accountant]

Some providers may process data outside the EEA (e.g. USA, Canada); in that case transfers are based on an adequacy decision of the European Commission or standard contractual clauses.

4. Your rights

You can request information about and access to your data, rectification, erasure, restriction of processing and data portability, object to processing based on legitimate interest, and withdraw your consent at any time. Send your request to kontakt@ciekawki.pl – we reply within one month.

5. Complaints

You can lodge a complaint with the data protection authority in your country of residence or with the authority of the Controller's country of establishment [e.g. UODO, Poland], or go to court.