Privacy policy
PRIVACY AND COOKIE POLICY
Last updated: 26 September 2026
1. DATA CONTROLLER
The controller of personal data is Weronika Wolińska, a natural person carrying out unregistered activity under Polish law under the Płomień brand, address: ul. Śliczna 2, 56-320 Krośnice, Poland, email: contact@plomien.eu, phone: +48 506 000 105 (the “Controller”).
For matters concerning personal data, contact contact@plomien.eu.
2. DATA WE PROCESS
We may process data provided when placing an order or contacting us, including name, billing and delivery addresses, email address, phone number, order details, selected payment method and its status, correspondence, and data required to handle returns and complaints. Payment providers process payment data; as a rule, the Controller does not receive the full card number.
When the Store is used, technical data may also be processed, including IP address, device and browser identifiers, session information, Store events and cookie data.
3. PURPOSES AND LEGAL BASES
We process data for:
- concluding and performing a contract and handling payment, delivery, returns and order-related contact—Article 6(1)(b) GDPR;
- compliance with legal obligations, including tax, accounting and consumer obligations—Article 6(1)(c) GDPR;
- handling enquiries, ensuring Store security, preventing abuse, and establishing, pursuing or defending claims—Article 6(1)(f) GDPR, the Controller's legitimate interests;
- newsletters and electronic marketing—on the basis of consent under Article 6(1)(a) GDPR; consent may be withdrawn at any time;
- analytics, personalisation and marketing based on optional cookies—on the basis of consent under Article 6(1)(a) GDPR.
4. RECIPIENTS
Data may be disclosed, to the extent necessary, to entities that help operate the Store, including:
- Shopify, the store platform and hosting provider;
- payment providers available at checkout;
- carriers and delivery providers, including InPost where its service is selected;
- email, IT, security, analytics and marketing providers, in accordance with consents given;
- accounting, legal or customer-support providers;
- public authorities where disclosure is required by law.
We do not sell personal data.
5. TRANSFERS OUTSIDE THE EEA
Some providers, in particular Shopify group companies and technology providers, may process data outside the European Economic Area. In such cases, transfers are based on safeguards provided by law, such as an adequacy decision of the European Commission or Standard Contractual Clauses. Information about safeguards may be requested from the Controller.
6. RETENTION
Order data and records required by law are retained for periods required by tax and accounting rules. Data needed for complaints and claims is retained until the applicable limitation periods expire. Correspondence is retained for the time needed to close the matter and then for the time necessary to protect against claims. Marketing data is processed until consent is withdrawn or an effective objection is made. Cookie duration depends on cookie type and is shown in cookie preference settings.
7. RIGHTS
To the extent provided by the GDPR, you have the right of access, rectification, erasure, restriction, data portability, objection, and withdrawal of consent at any time without affecting the lawfulness of earlier processing.
Requests may be sent to contact@plomien.eu. You also have the right to lodge a complaint with the President of the Polish Personal Data Protection Office (UODO).
8. WHETHER DATA IS REQUIRED
Data marked as required during checkout is necessary to conclude and perform the contract. Data for newsletters or optional forms is voluntary. Without data necessary for an order, fulfilment may be impossible.
9. PROFILING AND AUTOMATED DECISIONS
After consent to marketing or analytics cookies, data may be used to tailor content or advertising. The Controller does not make decisions based solely on automated processing that produce legal or similarly significant effects for the user.
10. COOKIES
The Store uses cookies necessary for operation, the cart, checkout and security. Optional analytics, functional and marketing cookies are used only after the appropriate consent where required.
Consent can be changed or withdrawn at any time through the “Cookie preferences” link in the Store footer. Browser settings can also be changed, although blocking necessary cookies may impair Store functionality.
11. SHOPIFY
The Store runs on Shopify. Shopify processes data to provide platform services in accordance with its privacy rules. More information: https://www.shopify.com/legal/privacy.
12. CHANGES
This Policy may be updated when the law, Store functions or processing practices change. The current version is published in the Store together with its update date.