Data controller
The controller of your personal data is [Company name – to be completed], ul. Dostawcza 3, 93-231 Łódź, Poland. Contact: contact form.
What we collect and why
- Orders – name, address, email, phone, order details and uploaded designs, to perform the contract (Art. 6(1)(b) GDPR) and meet tax and accounting obligations (Art. 6(1)(c)).
- Group orders – participant name, chosen size, personal text and payment status, so the organiser can complete the group order.
- Customer account – data needed to sign in (also via Google sign-in, if you choose it).
- Newsletter – your email, only with your consent (Art. 6(1)(a)); you can unsubscribe at any time.
- Analytics and cookies – only with your consent, set in the cookie banner.
Who receives your data
Service providers who help us run the store: Shopify (store platform), payment providers, courier companies, Supabase (group order database) and Google (optional sign-in). Some providers may process data outside the EEA under appropriate safeguards (e.g. EU standard contractual clauses).
How long we keep it
For as long as needed to fulfil the order and handle complaints, and then for the periods required by tax law (usually 5 years). Newsletter data – until you withdraw consent.
Your rights
You have the right to access, rectify, delete, restrict processing, data portability, object, and withdraw consent at any time. You may lodge a complaint with the President of the Personal Data Protection Office (PUODO).