Privacy policy

1. Data controller

The controller of personal data is:

AKW Karol Wójcik
ul. Dębowa 12, 26-600 Radom, Poland
NIP: 9482193202
REGON: 672039036
Email: logobutik.office@gmail.com
Phone: +48 537 445 353

This Policy explains how data is processed in connection with use of the LOGOBUTIK store at https://logobutik.pl.

2. Data that may be processed

Depending on how the Store is used, the following data may be processed in particular:

  • first and last name;
  • delivery and billing address;
  • email address and phone number;
  • information about orders, payments, delivery, returns, or complaints;
  • Customer account data, if an account has been created;
  • the content of correspondence with the Store;
  • IP address, device identifiers, browser information, and activity in the Store;
  • marketing preferences and information stored in cookies;
  • data needed to issue an invoice, including business name, address, and NIP.

As a rule, the Seller does not receive full payment card details. These are processed by the relevant payment provider under its own terms.

3. Purposes and legal bases for processing

Data may be processed for the following purposes:

  1. Handling an order and performing a contract, including collecting payment, shipping, order-related contact, returns, and complaints; legal basis: Article 6(1)(b) GDPR.
  2. Compliance with legal obligations, particularly tax, accounting, and consumer-law obligations; legal basis: Article 6(1)(c) GDPR.
  3. Operating a Customer account, under the account service contract; legal basis: Article 6(1)(b) GDPR.
  4. Communication and handling enquiries, to fulfil a user's request or on the basis of the Controller's legitimate interest in communication and customer service; legal basis: Article 6(1)(b) or (f) GDPR.
  5. Establishing, pursuing, and defending claims, on the basis of the Controller's legitimate interest; legal basis: Article 6(1)(f) GDPR.
  6. Security, fraud prevention, and error analysis, on the basis of the Controller's legitimate interest; legal basis: Article 6(1)(f) GDPR.
  7. Newsletter and electronic marketing, based on consent where required; legal basis: Article 6(1)(a) GDPR. In certain cases, direct marketing may also rely on the Controller's legitimate interest, subject to electronic communications laws and the right to object.
  8. Analytics and marketing using optional cookies, based on consent; legal basis: Article 6(1)(a) GDPR.

4. Sources of data

Data is obtained:

  • directly from the data subject, for example when placing an order, creating an account, contacting the Store, or subscribing to the newsletter;
  • automatically while using the Store, through necessary technologies and, after consent, analytics and marketing tools;
  • from payment providers, carriers, and technology platforms to the extent needed to confirm payment, deliver an order, or handle a transaction.

5. Data recipients

Data may be shared with service providers that help operate the Store, including:

  • Shopify and its group entities, which provide the store platform, hosting, security, and e-commerce features;
  • Shopify Payments and parties involved in processing card, BLIK, and Klarna payments;
  • digital wallet providers such as Apple Pay and Google Pay, when selected by the Customer;
  • banks;
  • carriers and pickup-point operators, including InPost, DPD, and ORLEN Paczka;
  • email, customer-service, hosting, IT, and cybersecurity providers;
  • analytics, advertising, and marketing providers, only as permitted by law and subject to the user's consent;
  • accounting firms, law firms, and providers supporting the pursuit of claims;
  • public authorities, where disclosure is required by law.

Each recipient receives only the data needed to perform its task.

6. Shopify

The Store operates on the Shopify platform. Shopify processes data related to use of the Store, purchases, security, and operation of the platform. Details about Shopify's practices are available in Shopify's Privacy Policy: https://www.shopify.com/legal/privacy.

If a Customer chooses a payment handled by Shopify Payments, Shopify and parties involved in that payment method may process data needed to authorize and settle the payment, issue refunds, and prevent fraud. As a rule, the Seller does not receive the full payment card number.

7. Transfers outside the European Economic Area

Some technology providers, particularly Shopify and online service providers, may process data outside the European Economic Area. Where this occurs, legally recognized safeguards are used, such as an adequacy decision by the European Commission, standard contractual clauses, or other appropriate safeguards.

8. Data retention

Data is retained no longer than necessary:

  • order data: for the duration of the contract and then until claims become time-barred;
  • tax and accounting records: for the period required by law, generally five years from the end of the relevant tax year;
  • account data: until the account is deleted, and thereafter only as needed to meet legal obligations or protect claims;
  • return and complaint data: until the matter is resolved and then until claims become time-barred;
  • marketing data: until consent is withdrawn, an objection is made, or the marketing purpose ends;
  • correspondence: for as long as needed to handle the matter and protect potential claims;
  • cookie data: for the cookie's lifetime or until consent is withdrawn, depending on the technology.

9. Rights of data subjects

Under the GDPR, individuals have the right to:

  • access their data and receive a copy;
  • rectify data;
  • erase data;
  • restrict processing;
  • data portability;
  • object to processing based on legitimate interests, including direct marketing;
  • withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal;
  • lodge a complaint with the President of the Personal Data Protection Office (UODO).

To exercise these rights, email logobutik.office@gmail.com. The Controller may request additional information needed to verify the identity of the person making the request.

10. Whether providing data is voluntary

Providing data is voluntary, but some data is necessary to place and fulfil an order, create an account, receive a reply, or use a particular feature. If required data is not provided, the relevant action may not be possible.

11. Automated tools

The platform and payment providers may automatically assess fraud risk or transaction security. The Seller does not make decisions about a Customer that produce legal effects or similarly significantly affect them solely on the basis of automated processing, unless permitted by law and the required information is provided to the Customer.

12. Cookies

  1. The Store uses cookies and similar technologies.
  2. Necessary cookies support, among other things, the cart, checkout, security, saved settings, and sessions. They may be used without consent to the extent permitted by law.
  3. Analytics cookies help measure traffic and improve the Store. Marketing cookies may measure advertising, personalize messages, and reach users on external services. They are activated after consent where consent is required.
  4. On a first visit, users may accept or refuse optional cookie categories through the privacy banner. Consent can later be changed or withdrawn in the Store's privacy settings.
  5. Cookies can also be deleted or blocked in browser settings. Blocking necessary cookies may prevent some Store features from working properly.
  6. Details of specific technologies, providers, and retention periods may be shown in the privacy banner or preference panel.

13. Social media and external links

The Store may link to LOGOBUTIK social-media profiles or use tools provided by those platforms. When a user visits an external service, data is also processed under that service operator's privacy policy.

14. Security

The Controller applies appropriate organizational and technical measures to protect data against loss, unauthorized access, alteration, or disclosure. However, no method of transmission or storage can eliminate all risk.

15. Changes to this Policy

This Policy may be updated when the law, Store operations, or services used change. The current version, with the date of its latest update, will be published in the Store.