PRIVACY POLICY
- Data Controller
The controller of your personal data is:
MAJUMA, Justyna Grodzińska
ul. Czartoryskiego 10, 95-030 Stara Gadka, Poland
Email: sklep@doctornap.com
- Legal Basis for Processing
Your personal data is processed in accordance with RODO (GDPR) and, where applicable, the UK GDPR.
Legal bases for processing:
- Article 6(1)(b) GDPR – performance of a contract (order fulfilment),
- Article 6(1)(c) GDPR – legal obligations (e.g. accounting),
- Article 6(1)(f) GDPR – legitimate interests (e.g. claims handling),
- Article 6(1)(a) GDPR – consent (marketing purposes).
- Purposes of Data Processing
Personal data is processed for the following purposes:
- order fulfilment,
- handling returns and complaints,
- managing customer accounts,
- customer communication,
- marketing (newsletter, SMS – with consent),
- fulfilling legal obligations,
- pursuing or defending legal claims.
- Scope of Data
We may process the following data:
- name and surname,
- delivery address,
- email address,
- phone number,
- billing details,
- IP address and technical data.
- Data Recipients
Your data may be shared with:
- courier and logistics providers,
- payment service providers (e.g. PayU, PayPal),
- IT service providers (hosting, e-commerce platform),
- accounting service providers,
- marketing tools (e.g. email systems).
We do not sell your personal data.
- International Data Transfers
If we use tools provided by entities outside the European Economic Area or the United Kingdom (e.g. the United States), your data may be transferred outside the EEA/UK.
Such transfers are based on:
- Standard Contractual Clauses approved by the European Commission or equivalent safeguards under UK law.
- Data Retention
Your data is stored:
- for the duration of contract performance,
- as required by law (e.g. tax obligations),
- until consent is withdrawn (for marketing),
- until the limitation period for claims expires.
- Your Rights
You have the right to:
- access your data,
- rectify your data,
- erase your data,
- restrict processing,
- data portability,
- object to processing,
- lodge a complaint with a supervisory authority (e.g. ICO in the UK or relevant EU authority).
- Voluntary Provision of Data
Providing personal data is voluntary but necessary to process orders.
- Cookies
The Store uses cookies to:
- ensure proper functioning of the website,
- analyse traffic,
- conduct marketing activities.
Cookies may also be used by third parties (e.g. Google, Meta).
Users can manage cookie preferences via browser settings or a cookie banner.
- Profiling
Your data may be used for profiling for marketing purposes (e.g. personalised ads), only with your consent.
- Data Security
We implement appropriate technical and organisational measures to protect personal data.
- Changes to Privacy Policy
We reserve the right to update this Privacy Policy.
Changes take effect upon publication on the website.
- Contact
For any data protection inquiries, please contact:
sklep@doctornap.com