Polityka prywatności

Privacy Policy

Last updated: 8 September 2026

This Privacy Policy explains how Stefan Popczyński Holding, operating as KRAVX ("we", "us", "our"), collects, uses, stores, and protects your personal data when you visit or make a purchase from kravx.online.

We are committed to protecting your privacy in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable Polish data protection law.

---

1. Data Controller

The controller of your personal data is:

Stefan Popczyński Holding operating as KRAVX Goleszowska 3/97, 01-249 Warszawa, Poland Email: officekravx@gmail.com Website: kravx.online

---

2. What Personal Data We Collect

We collect and process the following categories of personal data:

a) Data you provide directly:

• Name and surname
• Delivery address and billing address
• Email address
• Phone number (if provided at checkout)
• Order details and purchase history
• Messages you send us via contact forms or email

b) Data collected automatically:

• IP address and approximate location
• Browser type and device information
• Pages visited and time spent on our website
• Referring URLs
• Cookie identifiers (see Section 7)

c) Data from third-party services:

• Payment data processed by our payment providers (we do not store your full card details)
• Data shared by Shopify as our e-commerce platform provider

---

3. How We Use Your Personal Data

We process your personal data for the following purposes and on the following legal bases:

---

4. How We Share Your Data

We do not sell your personal data. We share your data only where necessary with the following categories of recipients:

Shopify Inc. — our e-commerce platform provider, which hosts our store and processes data on our behalf. Shopify is certified under EU-US data transfer frameworks. For details, see Shopify's Privacy Policy.

Fulfilment suppliers and logistics partners — when you place an order, your delivery address and order details are passed to the relevant supplier or warehouse to fulfil your order. KRAVX operates a dropshipping model, which means products may be shipped directly from external suppliers. These suppliers receive only the data necessary to fulfil your order.

Payment providers — your payment is processed by our payment provider(s) (such as Shopify Payments or other processors available at checkout). We do not store your full payment card details.

Courier and shipping companies — your name and delivery address are shared with the carrier responsible for delivering your order.

Analytics and marketing tools — we may use tools such as Google Analytics to understand how our store is used. These tools may set cookies and process data in accordance with their own privacy policies.

Legal authorities — where required by law or to protect our rights.

All third-party processors are bound by data processing agreements and are required to handle your data in accordance with GDPR.

---

5. International Data Transfers

Some of our service providers (including Shopify and analytics tools) may process your data outside the European Economic Area (EEA). Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, or adequacy decisions.

---

6. How Long We Keep Your Data

We retain your personal data for as long as necessary for the purposes described in this policy:

• Order data: retained for 5 years from the date of purchase to comply with Polish and EU accounting and tax obligations
• Customer account data: retained for as long as your account is active, plus 2 years after your last activity
• Marketing consent data: retained until you withdraw your consent
• Contact and complaint records: retained for 3 years from resolution

After these periods, your data is securely deleted or anonymised.

---

7. Cookies

Our website uses cookies — small text files stored on your device — to operate the store, remember your preferences, analyse traffic, and, with your consent, deliver relevant advertising.

Types of cookies we use:

• Strictly necessary cookies — required for the store to function (e.g. shopping cart, login session). These cannot be disabled.
• Analytics cookies — help us understand how visitors use our store. Used only with your consent.
• Marketing cookies — used to show relevant advertisements. Used only with your consent.

You can manage your cookie preferences at any time using the cookie banner displayed when you visit our store, or by adjusting your browser settings. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

---

8. Your Rights Under GDPR

As a data subject in the European Union, you have the following rights:

• Right of access — you may request a copy of the personal data we hold about you
• Right to rectification — you may ask us to correct inaccurate or incomplete data
• Right to erasure — you may ask us to delete your data in certain circumstances
• Right to restriction of processing — you may ask us to limit how we use your data
• Right to data portability — you may request your data in a structured, machine-readable format
• Right to object — you may object to processing based on legitimate interest or for direct marketing purposes
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing

To exercise any of these rights, contact us at officekravx@gmail.com. We will respond within 30 days. We may need to verify your identity before processing your request.

If you believe we have not handled your data correctly, you have the right to lodge a complaint with the Polish supervisory authority:

Urząd Ochrony Danych Osobowych (UODO) ul. Stawki 2, 00-193 Warszawa, Poland Website: uodo.gov.pl

---

9. Children's Privacy

Our store is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us at officekravx@gmail.com and we will delete it promptly.

---

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of our store after changes are published constitutes acceptance of the updated policy.

---

11. Contact

For any questions or requests regarding your personal data:

Stefan Popczyński Holding operating as KRAVX Email: officekravx@gmail.com Website: kravx.online

---

Kontrola zgodności: