Privacy Policy
Effective from 2 October 2026.
1. Data controller
The controller of your personal data is Ivan Karpinets, ul. Wita Stwosza 50, 02-661 Warsaw, Poland, email: amunelle@gmail.com.
2. Purposes and legal bases
- Fulfilling your order and contract (name, delivery address, email, phone number, order details) – Art. 6(1)(b) GDPR.
- Legal obligations, including accounting and tax – Art. 6(1)(c) GDPR.
- Handling enquiries and complaints, establishing and defending claims – Art. 6(1)(f) GDPR (legitimate interest).
- Newsletter and marketing – only with your consent, Art. 6(1)(a) GDPR. You can withdraw consent at any time.
- Analytics and advertising using cookies and similar technologies – with your consent.
3. Recipients
Data may be shared with Shopify (store and payment processing), suppliers and couriers, order management tools, email and IT providers and accounting service providers. Suppliers and couriers may be located outside the European Economic Area (for example in China). Data needed for delivery (name, address, phone number) is transferred only as necessary to perform the contract with you (Art. 49(1)(b) GDPR).
4. Retention
We keep data for the duration of the contract, then for the period required by law (for example accounting and tax rules) and until claims expire. Data processed on the basis of consent is kept until you withdraw it.
5. Your rights
You have the right to access, rectify, erase, restrict and port your data, and to object to processing based on legitimate interest. You may withdraw consent at any time. To use these rights, email amunelle@gmail.com. You may lodge a complaint with the President of the Polish Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, or with your local supervisory authority.
6. Cookies
The Shop uses cookies that are necessary for the cart and checkout and, with your consent, analytics and advertising cookies. You can manage consent in the cookie banner and in your browser settings.
7. Changes
We will announce material changes on this page.