SkarbyPRLu Privacy Policy

• Orders and contract fulfilment: name, email, phone number, delivery address, order data and selected delivery options. The basis is taking steps at the customer's request and performance of a contract (Article 6(1)(b) GDPR).
• Payments: email address, amount, description and order or payment-link identifier. Data is processed to perform the contract and confirm and secure the payment (Article 6(1)(b) and (f) GDPR).
• Accounting and invoices: data required by tax law, including company details and tax number when an invoice is requested. The basis is the controller's legal obligation (Article 6(1)(c) GDPR).
• Enquiries and individual quotations: name, email, optional phone number, message, photos and furniture details. The basis is pre-contractual steps or the legitimate interest in handling correspondence (Article 6(1)(b) or (f) GDPR).
• Newsletter: email address and selected language. The basis is voluntary consent (Article 6(1)(a) GDPR), which may be withdrawn at any time.
• Website security: basic technical information such as IP address, request time and error information where necessary to protect the service and diagnose problems. The basis is the controller's legitimate interest (Article 6(1)(f) GDPR).

Online payments are processed through Paynow. Online card payments are processed by Autopay S.A. We provide payment operators only with the information necessary to create, settle, confirm and secure the transaction, in particular the email address, amount, description and payment identifier.

The customer enters card data directly in the payment operator's environment. SkarbyPRLu does not receive or store the full card number, CVC/CVV code or online banking authentication credentials.

Data may be entrusted or disclosed only as necessary to the following categories of recipients:

• Paynow and Autopay S.A. — online and card payment processing;
• Supabase — database and application data storage;
• Google Cloud — website and server-service hosting;
• Brevo and email providers — transactional email and newsletter delivery;
• accounting service providers or public authorities where required by law;
• the selected carrier — information required to carry out the accepted delivery.

Processors acting on our behalf operate under appropriate agreements and our documented instructions.

• order data — for the duration of the contract and then until the applicable limitation periods expire;
• accounting records — for the period required by tax law, generally 5 years;
• enquiries — until correspondence ends, and longer only where necessary to establish or defend claims;
• newsletter data — until consent is withdrawn or the newsletter service ends;
• security logs — for the period necessary to protect and diagnose the website.

Where provided by the GDPR, you have the right to:

• access your data and receive a copy;
• rectify your data;
• request erasure or restriction of processing;
• data portability;
• object to processing based on legitimate interests;
• withdraw consent at any time without affecting prior lawful processing.

Requests may be sent to kontakt@skarbyprlu.pl. You may also lodge a complaint with the President of the Polish Personal Data Protection Office.

The website uses cookies necessary for operation, including maintaining the cart, selected language and secure administrator session. Additional analytics or marketing cookies may be used only in accordance with the information shown to the user and their choice. Cookies can also be deleted or limited in browser settings, but blocking essential cookies may impair store functionality.

This policy may be updated when the law, service providers or website operation changes. The current version and effective date are always published on this page.