Privacy policy

Last updated: October 7, 2026

Privacy Policy

1. Data controller

The controller of your personal data is the operator of the BY INCH online store, Deotymy 7/9, 01-407 Warszawa, Poland ("we", "us"). You can contact us about personal data at official.byinch@gmail.com or by phone at +48 577 582 808.

2. What data we collect

  • Contact and delivery details: name, email address, phone number, shipping and billing address.
  • Order and transaction data: products purchased, order history, returns and complaints.
  • Payment data: payment status and method. Full card details are handled by our payment providers and are not stored by us.
  • Account data: if you create an account — your login details and preferences.
  • Communications: messages you send us.
  • Device and usage data: IP address, browser and device information, pages visited, collected through cookies and similar technologies.

3. Purposes and legal bases

  • Processing orders and delivering products — performance of a contract (Art. 6(1)(b) GDPR).
  • Handling returns, complaints and customer service — performance of a contract and compliance with legal obligations (Art. 6(1)(b) and (c) GDPR).
  • Accounting and tax obligations — compliance with legal obligations (Art. 6(1)(c) GDPR).
  • Newsletter and marketing emails — your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
  • Analytics, store security, fraud prevention and establishing or defending claims — our legitimate interests (Art. 6(1)(f) GDPR).
  • Non-essential cookies (analytics, marketing) — your consent given through the cookie banner.

4. Who we share data with

We share personal data only as needed with: Shopify (our e-commerce platform and hosting provider), payment providers, shipping carriers (e.g. InPost, DPD), IT, email and analytics service providers, and our accounting office. We may also disclose data where required by law. Shopify's handling of data is described in the Shopify Privacy Policy.

5. Transfers outside the EEA

Some of our providers (including Shopify) may process data outside the European Economic Area. In such cases, transfers are protected by appropriate safeguards, such as a European Commission adequacy decision or Standard Contractual Clauses.

6. How long we keep data

  • Order data — for the duration of the contract and then until claims expire, and as long as required by tax and accounting law (generally 5 years from the end of the calendar year in which the tax obligation arose).
  • Marketing data — until you withdraw consent or unsubscribe.
  • Account data — until you delete your account.
  • Cookies — for the periods described in the cookie banner or your browser settings.

7. Your rights

You have the right to access your data, rectify it, request its erasure, restrict processing, data portability, and to object to processing based on our legitimate interests. Where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of processing before withdrawal. To exercise your rights, email official.byinch@gmail.com.

You also have the right to lodge a complaint with the supervisory authority — in Poland, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl).

8. Is providing data required?

Providing personal data is voluntary but necessary to place and fulfil an order. Without it, we cannot conclude or perform the contract.

9. Automated decision-making

We do not make decisions that produce legal effects for you solely by automated means, including profiling.

10. Cookies

Our store uses cookies that are necessary for it to work (e.g. the shopping cart) and, with your consent, analytics and marketing cookies. You can change your cookie preferences at any time through the cookie banner or your browser settings.

11. Changes

We may update this Privacy Policy. The current version is always available in the store, with the date of the last update shown at the top.