Privacy Policy

This Privacy Policy defines the rules for processing personal data of Users using the online store available at lawaleather.com (hereinafter referred to as the “Store”).

The administrator of personal data is LawaLeather Yuliia Osadchuk (hereinafter referred to as the “Administrator”).

By using the Store, the User accepts the rules for data processing described in this Privacy Policy.

The Administrator processes personal data in accordance with applicable legal regulations, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and the Personal Data Protection Act.

1. Scope of processed data

The Administrator may process the following categories of personal data:
● first and last name,
● residential address and delivery address,
● e-mail address,
● phone number,
● invoicing details,
● data relating to orders and transactions,
● data relating to communication with the Store,
● technical data (IP address, device type, browser, cookies),
● data relating to activity in the Store.

Providing data is voluntary, but necessary to conclude a contract and fulfill an order.

2. Data sources

Personal data come from:
● directly from the User (e.g. when placing an order, registering an account, contacting),
● automatically – via the website (cookies, server logs),
● from entities cooperating with the Administrator (e.g. payment operators, courier companies).

3. Purposes and legal bases for data processing

Personal data are processed for the following purposes:
● order fulfillment and sales contracts – Article 6(1)(b) GDPR,
● handling payments and deliveries – Article 6(1)(b) GDPR,
● maintaining a customer account – Article 6(1)(b) GDPR,
● contacting the Customer – Article 6(1)(b) and (f) GDPR,
● fulfilling legal obligations (tax, accounting) – Article 6(1)(c) GDPR,
● pursuing or defending claims – Article 6(1)(f) GDPR,
● marketing activities (newsletter, offers) – Article 6(1)(a) GDPR,
● statistical analysis and improvement of service quality – Article 6(1)(f) GDPR.

4. Data recipients

Data may be transferred only to entities cooperating with the Administrator, in particular:
● payment operators,
● courier and logistics companies,
● IT and hosting service providers,
● accounting and legal offices,
● Shopify platform – as the Store’s infrastructure provider.

Data are transferred only to the extent necessary to achieve the purpose.

5. Shopify and data transfer outside the EU

The Store operates based on the Shopify platform. Personal data may be processed outside the European Economic Area, in particular in the USA.

The Administrator applies standard contractual clauses approved by the European Commission to ensure an adequate level of data protection.

6. Data retention period

Data are stored:
● for the duration of the contract and after its termination – in accordance with legal regulations,
● until the limitation period for claims expires,
● in the case of data processed based on consent – until consent is withdrawn,
● marketing data – until an objection is raised.

After this period, data are deleted or anonymized.

7. User rights

The User has the right to:
● access their data,
● rectify data,
● erase data,
● restrict processing,
● data portability,
● object to processing,
● withdraw consent,
● lodge a complaint with the President of the Personal Data Protection Office (UODO).

Requests may be sent to: kontakt.lawaleather@gmail.com

8. Cookies

The Store uses cookies for:
● technical purposes,
● statistical purposes,
● functional purposes,
● marketing purposes.

The User may manage cookies in the browser settings.

9. Data security

The Administrator applies appropriate technical and organizational measures to protect data. However, no system guarantees 100% security.

10. Changes to the Privacy Policy

The Administrator may amend this Policy, in particular in the event of changes in law or the functioning of the Store. The current version is always available on the Store’s website.