Privacy policy

Last updated: September 19, 2026

ANOVARD respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, disclose, store and protect your personal data when you visit our website, use our services, create an account, contact us, or purchase products from our online store.

Our online store is powered by Shopify, which provides the e-commerce platform that enables us to offer our products and services to you.

Please read this Privacy Policy carefully to understand how your personal data is processed and the rights available to you.

1. DATA CONTROLLER

For the purposes of applicable data protection laws, including the General Data Protection Regulation (GDPR), the controller of your personal data is:

ANOVARD
Operated by: [LEGAL BUSINESS NAME]
Business type: Sole proprietorship registered in Poland
Address: Józefa Chełmońskiego 72D
31-340 Kraków
Poland

NIP / VAT: 6423192955
REGON: [REGON NUMBER]
Email: info@gopolanda.com
Phone: +48 570 606 399

Throughout this Privacy Policy, “ANOVARD”, “we”, “us” and “our” refer to the business identified above.

2. PERSONAL DATA WE COLLECT

Depending on how you interact with our website and services, we may collect or process the following categories of personal data:

Contact Information

This may include:

• your first and last name;
• billing address;
• shipping address;
• email address;
• telephone number.

Order and Transaction Information

This may include:

• products ordered;
• order value;
• order history;
• returns;
• refunds;
• exchanges;
• cancellations;
• delivery information;
• transaction details.

Payment Information

Payments may be processed by Shopify and/or third-party payment providers.

Depending on the payment method used, payment-related information may include:

• payment method;
• payment confirmation;
• transaction reference;
• billing information.

We generally do not directly store complete payment card numbers when payments are processed by an authorised payment service provider.

Account Information

If you create a customer account, we may process information such as:

• your name;
• email address;
• account credentials;
• saved addresses;
• account preferences;
• previous orders.

Communications

When you contact us, we may process information contained in your correspondence, including:

• customer service inquiries;
• emails;
• complaints;
• return requests;
• product questions;
• other communications.

Device and Technical Information

When you use our website, certain technical information may be collected automatically, including:

• IP address;
• browser type;
• device type;
• operating system;
• device identifiers;
• network information;
• website usage information;
• pages viewed;
• interactions with our website.

Marketing and Preference Information

Where applicable, we may process:

• marketing preferences;
• newsletter subscriptions;
• advertising preferences;
• cookie consent preferences;
• interactions with promotional communications.

3. HOW WE COLLECT PERSONAL DATA

We may collect personal data:

Directly from You

For example, when you:

• place an order;
• create an account;
• complete a form;
• subscribe to marketing communications;
• contact customer service;
• submit a return or complaint;
• communicate with us.

Automatically

Certain information may be collected automatically through:

• cookies;
• pixels;
• similar technologies;
• server logs;
• Shopify technology;
• analytics technologies.

From Service Providers

We may receive information from companies that assist us in operating the store, such as:

• Shopify;
• payment processors;
• shipping and delivery providers;
• fraud-prevention services;
• analytics providers;
• marketing providers;
• IT service providers.

4. HOW WE USE YOUR PERSONAL DATA

We may use your personal data for the following purposes.

Processing and Fulfilling Orders

We use personal data to:

• accept and process orders;
• process payments;
• prepare products for shipment;
• arrange delivery;
• provide order confirmation;
• provide shipping and tracking information;
• handle returns and refunds.

Providing Customer Service

We use your information to:

• answer questions;
• resolve order issues;
• process complaints;
• respond to return requests;
• provide information about our products and services.

Managing Customer Accounts

Where customer accounts are available, we may use personal data to create and maintain your account and provide account-related functionality.

Security and Fraud Prevention

We may process information to:

• detect fraudulent transactions;
• prevent misuse of our website;
• protect customer accounts;
• maintain website security;
• investigate suspicious or unlawful activity.

Legal and Administrative Purposes

We may process personal data where necessary to:

• comply with tax and accounting obligations;
• comply with consumer protection obligations;
• maintain business records;
• respond to lawful requests from authorities;
• establish, exercise or defend legal claims;
• comply with other applicable legal requirements.

Improving Our Services

We may use information to understand how customers interact with our website and to improve:

• website functionality;
• customer experience;
• store performance;
• product presentation;
• our services.

Marketing

Where permitted by applicable law, we may use your personal data to:

• send newsletters;
• provide promotional offers;
• inform you about new products;
• show relevant advertising.

Where consent is legally required, we will conduct such marketing only after obtaining the appropriate consent.

You may unsubscribe from marketing emails at any time by using the unsubscribe link included in the communication or by contacting us.

5. LEGAL BASES FOR PROCESSING

Where the GDPR applies, we process personal data on one or more of the following legal bases:

Performance of a Contract

Processing may be necessary to perform a contract with you or take steps at your request before entering into a contract.

This includes processing necessary for:

• orders;
• payments;
• delivery;
• returns;
• refunds;
• customer service related to your purchase.

Legal Obligation

We may process information where necessary to comply with legal obligations, including:

• tax requirements;
• accounting requirements;
• consumer protection law;
• regulatory obligations;
• lawful requests from public authorities.

Legitimate Interests

We may process personal data where necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms.

This may include:

• preventing fraud;
• securing our website;
• improving our services;
• managing our business;
• defending legal claims;
• understanding store performance.

Consent

Where legally required, we rely on your consent, including for certain:

• marketing communications;
• advertising technologies;
• analytics technologies;
• non-essential cookies.

You may withdraw your consent at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

6. COOKIES AND SIMILAR TECHNOLOGIES

Our website may use cookies and similar technologies.

Some cookies are necessary for the website and online store to function correctly. These may be used for functions such as:

• shopping cart operation;
• checkout;
• security;
• authentication;
• remembering essential preferences.

Other cookies may be used for:

• analytics;
• advertising;
• personalisation;
• measuring website performance.

Where required by applicable law, non-essential cookies will only be activated after you have provided the required consent.

You can manage your cookie preferences through the cookie consent tools available on our website where provided.

You may also be able to manage cookies through your browser settings.

Disabling certain cookies may affect some website functionality.

7. MARKETING AND ADVERTISING

Where permitted by law, we may use information about your interactions with our website to understand customer interests and provide relevant marketing.

Where consent is required, personalised advertising, analytics or non-essential tracking technologies will only be used after the appropriate consent has been obtained.

You may withdraw marketing consent at any time.

We may continue to send non-marketing communications where necessary, including:

• order confirmations;
• delivery information;
• security notices;
• customer service communications;
• legally required information.

8. HOW WE SHARE PERSONAL DATA

We may disclose personal data to third parties where reasonably necessary to operate our business and provide our services.

These may include:

Shopify

Our online store is hosted by Shopify.

Shopify processes information in connection with operating and providing the Shopify e-commerce platform.

Payment Providers

We may share information with payment providers where necessary to:

• authorise payments;
• process transactions;
• prevent fraud;
• issue refunds.

Shipping and Logistics Providers

We may provide necessary information to:

• courier companies;
• parcel-locker operators;
• fulfilment providers;
• logistics providers.

Information shared may include your:

• name;
• address;
• telephone number;
• email address;
• delivery information.

IT and Technology Providers

We may use companies that provide:

• website hosting;
• technical support;
• cloud services;
• security;
• communications technology.

Analytics and Marketing Providers

Where permitted by law and subject to required consent, we may work with analytics, advertising and marketing providers.

Professional Advisers

Where necessary, information may be disclosed to:

• accountants;
• lawyers;
• tax advisers;
• other professional advisers.

Public Authorities

We may disclose personal data where required by law, court order or a lawful request from an authorised public authority.

9. RELATIONSHIP WITH SHOPIFY

Our store is hosted by Shopify.

Shopify collects and processes certain personal data relating to your access to and use of our store in order to provide its services.

Information submitted through our store may therefore be transmitted to and processed by Shopify and its authorised service providers.

Where Shopify acts as a processor of customer data, Shopify processes such data on behalf of the merchant in accordance with the applicable contractual arrangements.

In certain circumstances, Shopify may process personal data for its own purposes as described in Shopify's privacy documentation.

If Shopify Network Intelligence or other Enhanced Services are enabled for our store, Shopify may process certain information relating to interactions with our store together with information from interactions with other merchants in accordance with Shopify's applicable terms and privacy documentation.

More information about Shopify's processing of personal data is available in the:

Shopify Consumer Privacy Policy:
https://www.shopify.com/legal/privacy/app-users

You may also access Shopify's privacy portal at:

https://privacy.shopify.com/

Shopify states that merchants are generally responsible as controllers for their customers' personal data, while Shopify may act as processor or, for certain services and purposes, as a separate controller.

10. INTERNATIONAL DATA TRANSFERS

Some of our service providers, including Shopify and other technology providers, may process personal data outside Poland or outside the European Economic Area.

Where personal data is transferred outside the European Economic Area to a country that has not been recognised as providing an adequate level of data protection, appropriate safeguards will be used where required by applicable law.

Such safeguards may include:

• European Commission Standard Contractual Clauses;
• adequacy decisions;
• other legally recognised transfer mechanisms.

11. DATA RETENTION

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected or where retention is required by law.

The retention period may depend on factors including:

• whether you maintain an account;
• whether we have an ongoing contractual relationship with you;
• tax and accounting requirements;
• consumer protection obligations;
• warranty and complaint periods;
• dispute resolution requirements;
• the establishment, exercise or defence of legal claims.

When personal data is no longer required, we will delete, anonymise or otherwise dispose of it as appropriate and where legally permitted.

12. DATA SECURITY

We take reasonable technical and organisational measures designed to protect personal data against:

• unauthorised access;
• unlawful processing;
• accidental loss;
• destruction;
• alteration;
• disclosure.

However, no method of electronic transmission or storage can be guaranteed to be completely secure.

You are responsible for keeping your customer account credentials confidential and should not disclose your password to other people.

13. YOUR GDPR RIGHTS

If the GDPR applies to you, you may have the following rights, subject to applicable legal conditions and exceptions:

Right of Access

You may request information about whether we process your personal data and request access to the personal data we hold about you.

Right to Rectification

You may request correction of inaccurate or incomplete personal data.

Right to Erasure

In certain circumstances, you may request deletion of your personal data.

Right to Restriction of Processing

In certain circumstances, you may request that processing of your personal data be restricted.

Right to Data Portability

Where applicable, you may request personal data you provided to us in a structured, commonly used and machine-readable format and may have the right to transmit that data to another controller.

Right to Object

You may object to certain processing based on our legitimate interests.

You also have the right to object to processing of personal data for direct marketing purposes.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw that consent at any time.

Right to Lodge a Complaint

You have the right to lodge a complaint with a competent data protection supervisory authority.

To exercise your rights, please contact us using the information provided at the end of this Privacy Policy.

We may need to verify your identity before processing a request where permitted or required by law.

14. POLISH DATA PROTECTION AUTHORITY

If you believe that your personal data has been processed in violation of applicable data protection law, you have the right to lodge a complaint with the Polish supervisory authority:

Prezes Urzędu Ochrony Danych Osobowych (UODO)
President of the Personal Data Protection Office
Poland

The Polish UODO confirms that individuals may lodge complaints concerning infringements of personal-data-protection rules.

Further information is available at:

https://uodo.gov.pl/

15. MARKETING COMMUNICATION PREFERENCES

You may unsubscribe from promotional emails at any time by selecting the unsubscribe option included in our emails.

You may also contact us to request that direct marketing communications stop.

Opting out of promotional communications does not prevent us from sending transactional or service-related messages relating to:

• your order;
• payment;
• delivery;
• returns;
• account;
• security;
• customer support.

16. CHILDREN'S DATA

Our online store is intended for adults purchasing products and is not specifically directed at children.

We do not knowingly seek to collect personal data directly from children who do not have the legal capacity to provide such information.

If you are a parent or guardian and believe that a child has provided personal data to us improperly, please contact us so that we can take appropriate action.

17. THIRD-PARTY WEBSITES

Our website may contain links to websites or services operated by third parties.

We do not control the privacy practices of independent third-party websites.

If you follow a link to another website, you should review that website's privacy policy before providing personal data.

18. AUTOMATED PROCESSING AND FRAUD PREVENTION

Certain service providers, including payment or fraud-prevention providers, may use automated technologies to identify potentially fraudulent or suspicious transactions.

Such processing may consider information relating to:

• transactions;
• payment behaviour;
• device information;
• account activity;
• network information.

Where applicable law grants rights in relation to automated decision-making, those rights will be respected.

ANOVARD does not intentionally use solely automated decision-making to make decisions producing legal or similarly significant effects about customers unless disclosed and permitted by applicable law.

19. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in:

• our business practices;
• our website;
• technology;
• service providers;
• legal or regulatory requirements.

The latest version will be published on this website.

Where appropriate or legally required, we will provide additional notice of material changes.

The “Last updated” date at the top of this Privacy Policy indicates when it was most recently revised.

20. CONTACT US

If you have questions about this Privacy Policy, our privacy practices, or wish to exercise your data protection rights, please contact:

ANOVARD
Operated by: ANOVARD

Józefa Chełmońskiego 72D
31-340 Kraków
Poland

Email: info@gopolanda.com
Phone: +48 570 606 399
NIP / VAT: 6423192955
REGON: 367611191

For the purposes of applicable data protection law, including the GDPR, the business identified above is the controller of your personal data.