Privacy Policy

What Data We Collect

We collect only the data necessary to operate the store, process orders, support customer service, and maintain website security and performance.

• Identity and contact data, such as name, email, phone number, and address
• Order and billing data, including order history and invoice details
• Technical data, such as IP address, browser information, cookie IDs, and device-related identifiers
• Communication data, including support messages and enquiries

Why We Process Data

We process personal data only where a valid legal basis exists.

• To fulfil orders and provide customer service
• To comply with accounting and tax obligations
• To ensure security, improve performance, and maintain legitimate business operations
• To provide newsletters or marketing communications where consent has been given

Who May Receive Data

We share personal data only with trusted service providers who support the operation of the store, under appropriate contractual and security arrangements.

• Store platform and store infrastructure providers
• Payment providers, including Stripe, Przelewy24, and Autopay
• Shipping and logistics partners, including carriers used to deliver orders
• Analytics, advertising, support, hosting, IT, and accounting providers where required

Cookies, Analytics & Marketing

We use cookies and similar technologies to keep the website secure, improve performance, and — where you consent — measure analytics and display relevant marketing.

Analytics and marketing cookies are activated only after the appropriate consent choice has been made through the cookie banner.

Transfers & Safeguards

Where external providers process data outside the EEA, we rely on recognised legal mechanisms such as EU adequacy decisions or Standard Contractual Clauses, together with contractual, organisational, and technical safeguards.

Your Rights

Under GDPR, you may request access to your data, correction, deletion, restriction of processing, portability, or object to specific processing activities.

You may also withdraw consent at any time where processing is based on consent, without affecting the lawfulness of earlier processing.

You also have the right to lodge a complaint with a competent supervisory authority, including the Polish UODO where applicable.

Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, or for as long as legal obligations require.

• Orders and invoices: typically in line with accounting and tax retention periods
• Account data: until account deletion or account closure
• Marketing data: until consent is withdrawn or objection is made
• Claims-related data: for the period required to establish, defend, or pursue legal claims

Contact

If you have any questions about privacy, data processing, or your rights, please contact us at kontakt@pronaturin.com.