Privacy Policy

Effective from: 10 October 2026

Introduction

This Privacy Policy explains how personal data is collected, processed and used by the Fadaria online store at fadaria.com (the "Website"), operated by Maciej Krawczyk as a sole proprietorship (the "Online Store").

This Privacy Policy is for information purposes and fulfils the information obligation under Article 13 GDPR.

Who is the controller of your data?

The controller of personal data collected through the Online Store or other communication channels (email, phone, WhatsApp, Intercom chat, contact form) is:

Fadaria Maciej Krawczyk
ul. Szlak 77, lok. 222, 31-153 Kraków, Poland

NIP (Tax ID): 9452315095
REGON: 542362290
Email: support@fadaria.com
Phone: +48 455 578 467

(the "Controller", who is also the Seller)

Why and on what legal basis do we process your data?

Concluding and performing the sales contract (order, payment, shipping, contacting you about your order) – Art. 6(1)(b) GDPR.
Running your Customer Account – Art. 6(1)(b) GDPR.
Handling complaints, returns and withdrawals – Art. 6(1)(b) and (c) GDPR.
Correspondence (email, phone, WhatsApp, contact form, Intercom chat) – Art. 6(1)(b) or (f) GDPR (legitimate interest: answering enquiries).
Website security and stability (server logs, error reporting, bot protection for forms) – Art. 6(1)(f) GDPR.
Sending Fadaria emails (news about new designs and collections) – only after you sign up and confirm your subscription via the link we email you – Art. 6(1)(a) GDPR. You can unsubscribe at any time using the link in every Fadaria email or by contacting us.
Statistics and analysis of Website use – only after you consent in the cookie banner – Art. 6(1)(a) GDPR.
Tax and accounting obligations – Art. 6(1)(c) GDPR.
Establishing, exercising or defending legal claims – Art. 6(1)(f) GDPR.

We do not make decisions about you based solely on automated processing, including profiling, within the meaning of Article 22 GDPR.

What data do we process?

Data provided when ordering or registering an Account – name, email address, phone number, delivery and billing address, invoice details, order history.
Correspondence data – data provided in the contact form, emails, phone calls, WhatsApp messages and Intercom chat (including message history and, for WhatsApp, your phone number and profile name).
Mailing list data – your email address, language, and the date and method of your consent.
Technical data – IP address, browser and device type, pages visited, application error information.
Analytics data – information about how you use the Website collected by analytics tools, only with your consent.

Providing data is voluntary but necessary to conclude and perform the contract (without it we cannot accept your order or answer your enquiry).

Who do we share your data with?

We share data only with entities that process it on our behalf or that are necessary to perform the contract:

Store platform, checkout, Customer Accounts and the Fadaria mailing list – Shopify International Limited (Ireland)
Payments – PayPal (Europe) S.à r.l. et Cie, S.C.A. (Luxembourg) and PayU S.A. (Poland)
Carriers – UPS, InPost
Hosting – Sevalla / Kinsta Inc. (Google Cloud infrastructure in the EU)
Chat and customer support – Intercom R&D Unlimited Company (Ireland) / Intercom, Inc. (USA)
WhatsApp messages (if you contact us on WhatsApp) – WhatsApp Ireland Limited (Ireland) / Meta Platforms, Inc. (USA)
Error reporting – Sentry (Functional Software, Inc., USA)
Contact form and subscription confirmation email delivery – Resend (Plus Five Five, Inc., USA)
Bot protection for forms – Cloudflare Turnstile (Cloudflare, Inc., USA)
Cookie consent management – CookieYes Limited (United Kingdom)
Analytics (only with your consent) – Google Analytics (Google Ireland Limited), Shopify analytics
Public authorities – where required by law

Some of these entities are based outside the European Economic Area. We transfer data only to countries for which the European Commission has issued an adequacy decision (for the USA – to entities certified under the EU–US Data Privacy Framework) or on the basis of Standard Contractual Clauses approved by the European Commission.

Cookies

Cookies are small text files stored on your device. We use them in accordance with Article 399 of the Polish Electronic Communications Law of 12 July 2024.

Strictly necessary cookies are used without consent because the Website cannot work without them (cart, login, country and language selection, remembering your cookie banner choices). Analytics cookies are set only after you consent in the CookieYes banner. You can change or withdraw your consent at any time via the cookie settings available on the Website; withdrawal does not affect the lawfulness of processing before it.

Cookie	Provider	Purpose	Category
horizon-cart-id	Fadaria	Shopping cart	Necessary
shopify-country, i18n_redirected	Fadaria	Remembering country and language	Necessary
fd-announcement-dismissed	Fadaria	Remembering a dismissed announcement bar	Necessary
cookieyes-consent	CookieYes	Remembering your consent choices	Necessary
_shopify_essential	Shopify	Store and checkout operation	Necessary
_shopify_analytics	Shopify	Store statistics	Analytics
_ga, _ga_*	Google Analytics	Visit statistics	Analytics

Intercom chat and Sentry error reporting operate independently of analytics cookie consent, based on our legitimate interest (customer support, Website stability). You can also block or delete cookies in your browser settings, but this may stop some features, such as the cart, from working.

How long do we keep data?

Contract data – for the duration of the contract and then until the limitation period for related claims expires.
Tax and accounting data – for 5 years from the end of the calendar year in which the tax obligation arose.
Customer Account data – until the Account is deleted.
Correspondence – until the matter is resolved, or, if it concerns a contract, until the limitation period for claims expires.
Data processed on the basis of consent – until consent is withdrawn.

What are your rights?

Right of access to your data and to receive a copy.
Right to rectification of inaccurate data.
Right to erasure or restriction of processing in the cases provided for in the GDPR.
Right to data portability for data processed on the basis of a contract or consent.
Right to object to processing based on legitimate interest.
Right to withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.
Right to lodge a complaint with the President of the Personal Data Protection Office (UODO, ul. Stawki 2, 00-193 Warsaw, Poland) or the supervisory authority in your country of residence.

To exercise your rights, email support@fadaria.com.

Security

We use appropriate technical and organisational measures to protect data against unauthorised access, loss or destruction. All communication with the Website, including payments, takes place over an encrypted connection (HTTPS).

Other websites

The Website may contain links to other websites that operate independently of us and have their own privacy policies. We are not responsible for how those websites process data.

Questions

Questions about this Privacy Policy can be sent to support@fadaria.com or by phone: +48 455 578 467.