Information
Privacy policy
Last updated 29 October 2026
Draft for legal review. Prepared under Regulation (EU) 2016/679 (GDPR) and Polish law. It must be reviewed by a lawyer before use. Parts marked [PLACEHOLDER] need your details.
Controller
The controller of your personal data is [PLACEHOLDER: registered business name], [PLACEHOLDER: street and number], [PLACEHOLDER: postcode] Warszawa, Poland, NIP [PLACEHOLDER: NIP]. Contact: [PLACEHOLDER: contact email].
What we collect and why
| Purpose | Data | Legal basis | How long |
|---|---|---|---|
| Selling and delivering a watch | Name, email, phone, delivery address, InPost locker code, order details | Performing the contract (Art. 6(1)(b)) | For the limitation period of claims, at least [PLACEHOLDER] years |
| Accounting and tax | Order and payment records | Legal obligation (Art. 6(1)(c)) | 5 years from the end of the tax year |
| Withdrawals and complaints | Order number, email, name, the content of your request | Legal obligation and legitimate interest (Art. 6(1)(c) and (f)) | Until the matter is closed and claims expire |
| Messages through the contact form | Name, email, topic, order number, message | Legitimate interest in answering you (Art. 6(1)(f)) | Up to 12 months after the conversation ends |
| Email when new watches are ready | Email address | Consent (Art. 6(1)(a)) | Until you withdraw consent |
| Anonymous visit statistics | No personal data; no cookies | Legitimate interest (Art. 6(1)(f)) | Aggregated |
You can withdraw consent at any time by writing to [PLACEHOLDER: contact email] or using the link in any email. Withdrawal does not affect processing before it.
Who processes data for us
- Stripe Payments Europe Ltd (Ireland): payments. Stripe is also an independent controller for some payment data.
- Vercel Inc. (USA): website hosting and anonymous statistics.
- Upstash Inc. (USA): storing orders, stock and the email list. [PLACEHOLDER: confirm the database region.]
- Resend (USA): sending emails.
- InPost / courier: delivery.
- [PLACEHOLDER: accounting office, if any.]
Where data is transferred outside the European Economic Area, it is protected by the EU–US Data Privacy Framework or standard contractual clauses. [PLACEHOLDER: verify for each provider.]
Your rights
You have the right to access, rectify and erase your data, to restrict processing, to data portability, and to object to processing based on legitimate interest. To use them, write to [PLACEHOLDER: contact email]. You may lodge a complaint with the President of the Personal Data Protection Office (Prezes UODO), ul. Stawki 2, 00-193 Warszawa.
Providing data is voluntary, but without it we cannot sell or deliver a watch.
We do not make decisions based solely on automated processing, including profiling.