Privacy policy

Last updated: October 17, 2025

1. Introduction

Welcome to Pracownia projektowo-krawiecka Julia Kolasa (the “Store”, “we”, “us”, or “our”). This Privacy & Cookie Policy explains how we collect, use, disclose, and protect your personal data when you visit, use, or make purchases through our Shopify-based online store (the “Services”).

We are committed to protecting your privacy in accordance with the General Data Protection Regulation (EU 2016/679, GDPR), Polish data protection law, and the ePrivacy Directive.

By accessing or using our Services, you acknowledge that you have read and understood this Privacy & Cookie Policy.


2. Data Controller

The data controller responsible for your personal data is:

Pracownia projektowo-krawiecka Julia Kolasa
ul. Cechowa 77, 30-685 Kraków, Poland
NIP: 6793193059
REGON: 384976261
Email: genowstudio@gmail.com

For customers outside Poland, we ensure your data is handled according to applicable international data protection laws.


3. Personal Data We Collect

We may collect or process the following categories of personal data, depending on your interaction with our Services:

  • Contact information: name, billing and shipping addresses, phone number, email address.

  • Account information: username, password, preferences, account settings.

  • Transaction data: products purchased, items viewed, added to cart or wishlist, returns, exchanges, order history.

  • Payment details: payment method, card or bank account information, transaction confirmation (processed securely via Shopify).

  • Communications: customer support inquiries, emails, messages.

  • Technical information: IP address, browser type, device type, network information, unique identifiers, cookies.

  • Usage data: interactions with the Services, navigation, clicks, searches.

  • Marketing and profiling data: newsletter subscription, preferences, interests, behavior across our Services.


4. Sources of Personal Data

We may collect personal data from:

  • Directly from you: when you create an account, make purchases, contact us, or subscribe to the newsletter.

  • Automatically: through cookies, tracking technologies, or device data while using our Services.

  • From service providers: including Shopify, payment processors, shipping providers, and email marketing platform (Shopify Email).

  • From third parties: such as social media integrations, partners, or publicly available information.


5. Purposes and Legal Bases

We process your personal data for the following purposes, with the corresponding legal basis under GDPR:

  • Providing and fulfilling orders, shipping, and payment processing
    Legal basis: Performance of a contract (Art. 6(1)(b))

  • Managing customer accounts
    Legal basis: Performance of a contract (Art. 6(1)(b))

  • Customer support and communication
    Legal basis: Legitimate interest (Art. 6(1)(f))

  • Marketing communications, newsletters, and promotional offers
    Legal basis: Consent (Art. 6(1)(a))

  • Fraud prevention, security, and risk management
    Legal basis: Legitimate interest (Art. 6(1)(f))

  • Legal obligations (tax, accounting, reporting)
    Legal basis: Legal obligation (Art. 6(1)(c))

  • Analytics and service improvement
    Legal basis: Legitimate interest (Art. 6(1)(f))

You may withdraw your consent for marketing at any time by clicking the “unsubscribe” link in emails or contacting us at genowstudio@gmail.com.

We maintain a record of consents in accordance with GDPR requirements.


6. Disclosure of Personal Data

We may share your personal data with:

  • Shopify and other platform service providers

  • Payment processors (Stripe, PayPal, Przelewy24)

  • Shipping and courier services (InPost, DPD, DHL, Poczta Polska)

  • Email marketing providers (Shopify Email)

  • IT, analytics, and advertising providers (Google Analytics, Meta Ads)

  • Affiliates or corporate group entities

  • Legal or regulatory authorities, when required by law

  • Third parties with your consent

All third parties are bound by confidentiality agreements and GDPR-compliant data processing obligations.


7. International Transfers

Your data may be transferred outside the European Economic Area (EEA), including the USA, UK, or other countries, as part of Shopify, payment, or marketing services.

Transfers rely on:

  • European Commission Standard Contractual Clauses (SCC), or

  • Other GDPR-approved safeguards.

We ensure that your data enjoys adequate protection even when processed internationally.


8. Security and Retention of Your Information

Please be aware that no security measures are perfect or impenetrable, and we cannot guarantee "perfect security." In addition, any information you send to us may not be secure while in transit. We recommend that you do not use unsecure channels to communicate sensitive or confidential information to us.

How long we retain your personal information depends on different factors, such as whether we need the information to maintain your account, to provide you with Services, comply with legal obligations, resolve disputes or enforce other applicable contracts and policies.


9. Your Rights

Under GDPR and Polish law, you have the right to:

  • Access your personal data

  • Correct inaccurate data

  • Request deletion (“right to be forgotten”)

  • Restrict processing

  • Data portability

  • Object to processing based on legitimate interest or marketing

  • Withdraw consent at any time

To exercise these rights, contact genowstudio@gmail.com. You may also lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland.


10. Cookies and Tracking Technologies

Our Services use cookies and similar technologies to:

  • Ensure functionality of the website

  • Analyze traffic and performance (e.g., Google Analytics)

  • Personalize content and recommendations

  • Deliver marketing and advertising (Google Ads, Meta Ads)

Types of cookies:

  • Essential: necessary for website operation

  • Performance: analyze traffic and usage

  • Functional: remember preferences

  • Marketing: targeted advertising and personalization

You can manage or withdraw consent for cookies via the cookie banner or browser settings.


11. Email Marketing & Newsletter

If you subscribe to our newsletter or marketing communications, we process your name and email address to send:

  • Product offers

  • Promotions and discounts

  • Updates and news about our Store

Legal basis: consent (Art. 6(1)(a) GDPR).
You can unsubscribe at any time via the link in emails or by contacting genowstudio@gmail.com.
All consents are recorded in accordance with GDPR.


12. Security

We implement technical and organizational measures to protect your data, including encryption and secure storage.
No system is completely secure, so avoid transmitting sensitive data over unsecured channels.


13. Links to Third-Party Websites

Our Services may contain links to third-party websites. We are not responsible for their privacy practices.
Please review their privacy policies before providing any personal data.


14. Changes to This Policy

We may update this Privacy & Cookie Policy to reflect changes in practice, law, or operational needs.
The “Last updated” date will indicate the latest version.


15. Contact

Should you have any questions about our privacy practices or this Privacy Policy, or if you would like to exercise any of the rights available to you, please call or email us at genowstudio@gmail.com. For the purpose of applicable data protection laws, we are the data controller of your personal information.