Last updated: May 18, 2026
1. Personal Data Administrator
The administrator of your personal data is:
SEVEN AM LIMITED LIABILITY COMPANY
ul. Ostrobramska 101A/301, 04-041 Warsaw, Poland
NIP: 1133200336 | REGON: 544550883 | KRS: 0001236640
E-mail: info@royalpopstraps.pl
In matters concerning the processing of personal data, you can contact us at the above e-mail address.
2. What Data We Collect
Depending on how you use our store, we may process the following data:
a) Data provided when placing an order
- Name and surname
- Delivery and billing address
- Email address
- Phone number
- Invoice details (including Tax Identification Number, if applicable)
b) Data collected automatically
- IP address and device data
- Browser and operating system information
- Cookies and analytics (Google Analytics)
- Pages visited and time spent on the website
c) User account details
- Login (e-mail address) and encrypted password
- Order history
- Saved delivery addresses
3. Purposes and Legal Basis of Processing
| Purpose of processing | Legal basis (GDPR) | Storage time |
|---|---|---|
| Order fulfillment and delivery of goods | Article 6, paragraph 1, letter b – performance of the contract | Until the order is fulfilled + 5 years (claims) |
| Invoicing and tax settlements | Article 6, paragraph 1, letter c – legal obligation | 5 years from the end of the tax year |
| User account management | Article 6, paragraph 1, letter b – performance of the contract | Until the account is deleted |
| Complaints and returns handling | Article 6, paragraph 1, letter b/c – contract and legal obligation | 3 years from the date of purchase |
| Direct marketing (newsletter) | Art. 6 section 1 letter a – agree | To withdraw consent |
| Traffic analysis and store optimization (Google Analytics) | Article 6 paragraph 1 letter f – legitimate interest | 26 months (Google setting) |
| Fraud prevention and security | Article 6 paragraph 1 letter f – legitimate interest | 12 months |
4. Data Recipients
Your data may be transferred to the following categories of entities:
- Payment operators – to complete transactions (e.g. Stripe, PayPal, przelewy24)
- Courier and postal companies – to deliver your order (e.g. DPD, InPost, DHL, Poczta Polska)
- IT service providers – hosting (Hostinger International Ltd.), email systems
- Google LLC – Google Analytics (analytics) and Google Translate (translations)
- Public authorities – at the request of authorized state authorities (e.g. Tax Office, Police)
We do not sell your personal data to third parties.
5. Data Transfer Outside the European Economic Area (EEA)
Some of our suppliers (including Google LLC) process data in the United States. This transfer is based on:
- Standard contractual clauses approved by the European Commission (Article 46(2)(c) of the GDPR)
- Data Privacy Framework (DPF) – US-EU Certification
You can obtain a copy of the safeguards in place by contacting us at info@royalpopstraps.pl .
6. Your Rights
Under the GDPR, you have the following rights:
- Right of access (Article 15 GDPR) – you can request information about what data we process about you
- The right to rectification (Article 16 of the GDPR) – you can request that incorrect data be corrected or incomplete data be completed
- Right to erasure (Article 17 GDPR) – you can request the deletion of your data („right to be forgotten”)
- The right to restrict processing (Article 18 of the GDPR) – you can request that the processing of your data be suspended
- The right to data portability (Article 20 of the GDPR) – you can receive your data in a structured format
- Right to object (Article 21 of the GDPR) – you can object to data processing based on legitimate interests
- The right to withdraw consent – you can withdraw your consent at any time without affecting the lawfulness of previous processing
To exercise any of the above rights, please contact us at info@royalpopstraps.pl . We will respond within 30 days of receiving your request.
You also have the right to lodge a complaint with the supervisory authority:
Personal Data Protection Office (UODO)
ul. Stawki 2, 00-193 Warsaw
Tel.: 606 950 000 | uodo.gov.pl
7. Cookies
Our store uses cookies for the following purposes:
| Type of cookie | Objective | Storage time |
|---|---|---|
| Essential | User session, shopping cart, login (WooCommerce) | Session / 2 years |
| Analytical | Google Analytics – analysis of traffic and user behavior | 26 months |
| Functional | Language Preferences (Google Translate – googtrans) |
Session |
You can manage cookies in your browser settings at any time or delete existing cookies. Disabling some cookies may affect the functionality of the store.
8. Data Security
We use appropriate technical and organizational measures to protect your personal data:
- SSL/TLS connection encryption (HTTPS protocol)
- Encrypted password storage (bcrypt)
- Regular data backups
- Limited access to data for authorized employees only
- Server security monitoring
9. Children’s Data
Our store is not directed to individuals under the age of 16, and we do not knowingly collect personal data from such individuals. If you believe a child has provided us with information, please contact us immediately.
10. Changes to the Privacy Policy
We reserve the right to change this Privacy Policy. We will notify you of any significant changes via a prominent notice on the store’s home page or by email (if we have your address). The date of the last update appears at the top of the document.
11. Contact
If you have any questions regarding the processing of your personal data or to exercise your rights, please contact us:
SEVEN AM LIMITED LIABILITY COMPANY
ul. Ostrobramska 101A/301, 04-041 Warsaw
E-mail: info@royalpopstraps.pl