Your Data, Handled With Care
Privacy Policy
This Privacy Policy explains how we collect, use, and protect information when you browse, shop, or create an account with Fluffiverse.
1. Data Controller
The administrator of personal data processed through the online shop available at https://fluffiverse.com/ is Patrycja Mancewicz, conducting business activity under the name Patrycja Mancewicz, as a sole proprietor (Jednoosobowa Działalność Gospodarcza) registered in Poland. The Controller's business address is ul. Jurowiecka 15/11, 15-101 Białystok, Poland. The Controller's tax identification number (NIP) is 9662122770, and the registration number (REGON) is 380923300. For any questions regarding personal data processing, the Controller can be contacted by email at fluffiverse@proton.me or by phone at +48 692 727 929. The Controller processes personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and applicable Polish data protection regulations.
2. Personal Data We Process
The Controller processes personal data provided by customers when using the online shop. Depending on the purpose, this may include: first and last name; email address; telephone number; delivery address; billing address; information related to placed orders; payment information processed by external payment providers; correspondence with the Controller. The shop processes only data necessary for providing shop functionality, processing orders, and customer communication.
3. Purposes and Legal Bases of Processing
Personal data is processed for order processing and fulfilment, accounting and legal obligations, customer support and complaints, and defense of legal claims. Legal basis for order processing: Article 6(1)(b) GDPR. Legal basis for accounting and legal obligations: Article 6(1)(c) GDPR. Legal basis for customer support and complaint handling: Article 6(1)(f) GDPR. Legal basis for defense of legal claims: Article 6(1)(f) GDPR.
4. Recipients of Personal Data
Personal data may be transferred only to trusted service providers necessary for operating the online shop. Payment processing is handled by Mollie B.V., which processes payment data as an independent controller according to its own privacy policy. Delivery services may include DPD Polska Sp. z o.o., DHL Parcel Polska Sp. z o.o., InPost Sp. z o.o., Poczta Polska S.A., and other carriers. Hosting and technical services are provided by Hetzner Online GmbH for server infrastructure and technical operation.
5. Cookies and Similar Technologies
The online shop does not use advertising cookies, analytical cookies, or tracking technologies. The shop does not use tools such as Google Analytics, Meta Pixel, or similar marketing tracking systems. Only technically necessary mechanisms required for the operation of the online shop may be used, such as maintaining website functionality, shopping cart operation, and secure customer sessions. Such technologies do not require consent where they are strictly necessary to provide the service requested by the customer.
6. Data Retention Period
Personal data is stored only for the period necessary to fulfil the purposes described in this Privacy Policy. Order data is retained for the period required by accounting and tax regulations. Customer correspondence is stored for the time necessary to handle the request and for limitation periods related to possible claims. Customer account data is stored until the account is deleted or processing is no longer necessary.
7. Transfers Outside the European Economic Area
Personal data is generally processed within the European Economic Area (EEA). If any service provider processes personal data outside the EEA, such processing will take place only in accordance with GDPR requirements and appropriate safeguards.
8. Customer Rights
Under GDPR, customers have the right to access their personal data, correct inaccurate personal data, request deletion of personal data, request restriction of processing, object to processing based on legitimate interests, request transfer of personal data where applicable, and withdraw consent where processing is based on consent. Requests should be sent to fluffiverse@proton.me. The Controller will respond within the legally required period.
9. Complaint to Supervisory Authority
If you believe that your personal data is processed unlawfully, you have the right to lodge a complaint with the competent supervisory authority. For Poland: President of the Personal Data Protection Office (UODO). You may also contact the data protection authority in your country of residence within the European Union.
10. Automated Decision-Making and Profiling
The Controller does not use automated decision-making or profiling that produces legal effects or significantly affects customers.
11. Providing Personal Data
Providing personal data is voluntary, but necessary for placing an order, completing payment, delivering purchased products, and handling customer requests. Failure to provide required data may prevent completion of the order.
12. Data Security
The Controller applies appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure.
13. Changes to This Privacy Policy
The Controller may update this Privacy Policy when necessary due to changes in legal requirements, changes in shop functionality, or changes in used service providers. The current version is always available at https://fluffiverse.com/.
14. Contact Regarding Personal Data
For questions regarding personal data processing, please contact Patrycja Mancewicz at fluffiverse@proton.me.