Privacy Policy

1. Data controller

The controller of your personal data is:

Multi House Weronika Płotka
registered office: ul. Zbigniewa Burzyńskiego 8H/22, 80-462 Gdańsk, Poland
VAT ID (NIP): 5842884692, REGON: 544725199
e-mail: [email protected]
phone: +48 518 892 482

2. What data we collect

While operating the Store we collect the following data:

• Data provided at registration and checkout: first name, last name, e-mail address, phone number, delivery address, billing address.
• Payment data: card details are processed directly by the payment provider Stripe, Inc. and are never stored on our servers.
• Technical data: IP address, browser type, visit time – collected automatically for analytics and security purposes.
• Contact form data: name, e-mail, message content.

3. Purposes of processing

We process your data for the following purposes:

• Fulfilling orders – Article 6(1)(b) GDPR (performance of a contract).
• Processing payments – Article 6(1)(b) GDPR.
• Handling complaints and returns – Article 6(1)(c) GDPR (legal obligation).
• Contact and support – Article 6(1)(f) GDPR (legitimate interest).
• Accounting – Article 6(1)(c) GDPR.
• Direct marketing – Article 6(1)(a) GDPR (consent), where given.

4. Data recipients

Your data may be shared with the following entities:

• Stripe, Inc. – online payment provider (data required to process the transaction).
• Courier companies / InPost – in order to deliver your order.
• Accounting office – for bookkeeping purposes.
• Hosting provider – the servers the Store runs on.

Data may be transferred outside the EEA (e.g. to the USA – Stripe) on the basis of standard contractual clauses or a European Commission adequacy decision.

5. Data retention

• Order-related data – for 5 years from the end of the tax year in which the transaction took place (tax obligation).
• User account data – until the account is deleted or consent is withdrawn.
• Contact form data – up to 12 months after correspondence ends.
• Marketing data – until consent is withdrawn.

6. Your rights

You have the right to:

• Access your personal data.
• Rectify inaccurate data.
• Erase your data (“right to be forgotten”).
• Restrict processing.
• Data portability.
• Object to processing based on legitimate interest.
• Withdraw consent at any time (without affecting the lawfulness of processing before withdrawal).

To exercise these rights, contact us at [email protected].

You also have the right to lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, Poland).

7. Cookies

1. The Store uses cookies to ensure the site works correctly and for analytics and personalisation.
2. Cookie types:
   a) Essential – required for the Store to work (login session, cart).
   b) Analytics – anonymous visit statistics.
   c) Functional – remembering user preferences.
3. You can manage cookies in your browser settings. Disabling cookies may limit Store functionality.

8. Data security

We apply appropriate technical and organisational measures to protect your data, including:

• Encrypted connections (SSL/TLS).
• Hashing of user passwords.
• Regular software updates.
• Restricted access to personal data.

9. Changes to this policy

The controller reserves the right to update this Privacy Policy. We will inform you about material changes via the Store or by e-mail.