1. General Information

1. This Privacy Policy outlines the principles of processing and protecting personal data of users using the online store CurveWear.
2. The Data Controller of personal data collected through the Store is CurveWear, and other registration details, hereinafter referred to as the “Controller” or “Seller.”
3. The Controller processes Users’ personal data in compliance with applicable laws, including the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679).

2. What Data We Collect

1. The Controller may collect the following types of personal data:

• Name and surname,
• Address (billing and shipping),
• Email address,
• Phone number,
• Payment details (processed via secure payment gateways),
• Purchase history,
• IP address and device data (via cookies and analytical tools).

1. Providing personal data is voluntary but necessary to complete the order, provide services, or respond to inquiries.

3. Purpose and Legal Basis of Processing

We process personal data for the following purposes:

1. Order fulfillment and delivery – processing data is necessary for performing the sales contract (Art. 6(1)(b) GDPR).
2. Customer support and communication – responding to inquiries and complaints (Art. 6(1)(b) GDPR).
3. Accounting and tax obligations – fulfilling legal requirements (Art. 6(1)(c) GDPR).
4. Marketing and newsletter – sending promotional offers (Art. 6(1)(a) GDPR – consent).
5. Website security and statistics – ensuring the Store’s proper functioning (Art. 6(1)(f) GDPR – legitimate interest).

4. Data Sharing and Transfers

1. Personal data may be shared with:

• Courier and shipping companies,
• Payment service providers,
• IT and hosting providers,
• Accounting services.

1. Personal data will not be transferred outside the European Economic Area (EEA), unless required by the order fulfillment (e.g., delivery outside the EU), in which case Users will be informed.

5. User Rights

Under the GDPR, Users have the following rights:

1. Access to their personal data.
2. Rectification of incorrect or outdated data.
3. Erasure of data (“right to be forgotten”), if legally possible.
4. Restriction of processing.
5. Data portability.
6. Objection to data processing based on legitimate interest or for marketing purposes.
7. Withdrawal of consent (if data is processed based on consent).
8. Lodging a complaint with the supervisory authority (e.g., the President of the Personal Data Protection Office in Poland).

6. Data Retention

1. Personal data is stored for as long as necessary to fulfill the purposes for which it was collected, including:

• For the duration of the contract (order processing),
• For the period required by law (e.g., tax obligations – up to 5 years),
• Until the withdrawal of consent (in the case of marketing communications).

7. Cookies

1. The Store uses cookies to improve User experience, analyze website traffic, and ensure the Store’s functionality.
2. Users may manage cookies via their browser settings. Disabling cookies may affect certain functionalities of the Store.

8. Data Security

1. The Controller applies appropriate technical and organizational measures to protect personal data against unauthorized access, modification, or loss.
2. All payment transactions are secured and processed via trusted payment providers.

9. Contact

For any questions related to this Privacy Policy or data processing, please contact: furvitto@gmail.com