Privacy policy

1. Data controller and contact details

The controller of Website users’ personal data is Paweł Pawelec — a sole trader operating under the business name Paweł Pawelec Projects, registered in Poland’s Central Registration and Information on Business (CEIDG), tax identification number (NIP): 8262233169, business registration number (REGON): 545286030. The controller determines the purposes and means of processing personal data.

Contact details

For privacy enquiries, contact the email address above. We will reply as soon as possible.

2. What data we collect

Data provided by users

• contact and order fulfilment details (such as full name, email, delivery address and phone number),
• the content of messages you send us (for example about an order, return or complaint),
• information needed to process a return (such as the order number and, where needed, a bank account number for the refund).

Technical data (collected automatically)

• IP address, identifiers and device/browser data,
• information about Website usage (such as pages visited and visit duration),
• data stored in cookies or similar technologies.

The scope of data may vary depending on which Website features you use.

3. Purposes and legal bases for processing

We process data only to the extent necessary to operate the Website and serve its users. Depending on the circumstances, the legal basis may be: performance of a contract, a legal obligation, our legitimate interest or consent.

Main purposes

• processing orders and arranging delivery,
• communication about orders, returns, complaints and enquiries,
• ensuring Website security (such as sign-in and protection against abuse),
• collecting visitor statistics through Google Analytics, only with voluntary consent (Article 6(1)(a) GDPR),
• measuring advertising effectiveness and tailoring communications through Meta Pixel, only with voluntary consent (Article 6(1)(a) GDPR),
• email marketing, only with separate consent; consent to cookies does not constitute consent to email marketing.

Analytics and advertising tools are enabled only after the relevant consent has been given in the cookie panel. Refusing consent does not prevent purchases.

4. Cookies and similar technologies

What cookies are

Cookies are small text files stored on your device that help the Website function correctly, remember user choices and improve security.

Which cookies we use

• Necessary – support sign-in, the cart, security and saving cookie preferences. They are essential for the Website to function.
• Analytics (optional) – Google Analytics (G-XB4HKMXNE6), which helps analyse how the shop is used. It runs only with your consent.
• Marketing (optional) – Meta Pixel, used to measure advertising effectiveness and for marketing. It runs only with your consent.

How to manage cookies

On your first visit, you can accept all optional cookies, reject them, or choose analytics and marketing separately. Optional categories are disabled by default. You can change or withdraw consent at any time by clicking “Cookie settings” in the footer. You can also delete cookies in your browser, but restricting necessary cookies may make shopping difficult.

We save your choice for up to 180 days in the necessary pk_cookie_consent_v1 cookie. The pokemonki_session shop session cookie may be renewed for up to 30 days after your last activity. With your consent, Google and Meta may store their own identifiers under their respective policies. Withdrawing consent prevents the tools from running again and removes recognised cookies from these services on our domain.

5. Who we may share data with

Where necessary, data may be shared with providers supporting the Website’s operation, in particular:

• the hosting and IT infrastructure provider,
• the email service provider,
• the payment provider handling BLIK and card payments (an external entity, usually a separate data controller for transactions),
• delivery providers (such as couriers and parcel lockers) to deliver your parcel,
• Google Ireland Limited (Google Analytics) — if you consent to analytics,
• Meta Platforms Ireland Limited (Meta Pixel) — if you consent to marketing.

We do not sell personal data. Google and Meta may also process data outside the EEA, under the terms and safeguards described in their privacy policies. More information: Google and Meta.

6. How long we retain data

• order fulfilment data — for as long as needed to process the order and handle after-sales matters (returns/complaints),
• correspondence — for as long as needed to handle the matter and, where applicable, until claims become time-barred,
• technical data — for a period justified by Website security and operation,
• shop session — up to 30 days after the last activity; cookie consent record — up to 180 days,
• optional Google and Meta cookies — depending on the expiry periods set by those providers and the consent choices made.

In the event of a dispute or a need to defend against claims, data may be retained for as long as necessary to establish, pursue or defend those claims.

7. Your rights

You have the right to:

• access your data,
• rectify your data,
• erase your data (in certain cases),
• restrict processing,
• object to processing based on legitimate interests,
• data portability (where processing is based on a contract or consent and carried out by automated means),
• withdraw consent (where processing is based on it),
• lodge a complaint with the President of the Polish Personal Data Protection Office (PUODO) if you believe processing violates the law.

To exercise your rights, email us at: kontakt@pokemonki.pl.

8. Changes to this policy

This policy may be updated, for example when Website features or the tools we use change. The current version will always be available on this page.