Privacy Policy

April 2026  |  Kreacja Obrazu Kamila Wilk

1. Data Controller

The data controller responsible for processing your personal data is:

Business name

Kreacja Obrazu Kamila Wilk

Address

ul. Witosa 58, 38-400 Krosno, Poland

E-mail

contact@igibee.com

Privacy contact

iod@igibee.com

Phone

+48 535 550 885 (Mon–Fri, 08:00–16:00 CET)

Website

www.igibee.com

2. Data Processors & Third-Party Services

We use the following third-party services that process personal data on our behalf. Each has been selected for GDPR compliance and, where applicable, has signed a Data Processing Agreement (DPA) with us.

2.1 Shopify Inc. — e-commerce platform

Role

Data Processor (DPA signed)

Purpose

Hosting the online store, processing orders and payments, storing customer data

Data

Name, address, e-mail, phone, payment data (tokenised), order history

Location

USA (Shopify uses Standard Contractual Clauses — SCCs — for EU data transfers)

Privacy info

https://www.shopify.com/legal/privacy

Data transfer to USA: Shopify Inc. is established in the USA. Transfers of your personal data to the USA are safeguarded by Standard Contractual Clauses (SCCs) approved by the European Commission pursuant to Art. 46 GDPR.

2.2 Payment providers

Depending on the payment method selected at checkout, your payment data is processed by one of the following providers. We do not store full card numbers — payments are tokenised by the respective provider.

  • PayPal (Europe) S.à r.l. — PayPal Privacy Policy: https://www.paypal.com/en/webapps/mpp/ua/privacy-full

  • Stripe Payments Europe Ltd — Stripe Privacy Policy: https://stripe.com/en-pl/privacy

  • Klarna Bank AB — Klarna Privacy Policy: https://www.klarna.com/en/privacy/

2.3 Postal & courier services

Your name and delivery address are shared with the relevant postal operator or courier service solely for the purpose of fulfilling your order (e.g. InPost, DPD, DHL, Poczta Polska).

2.4 Hosting & email

Provider

20i Ltd, The Eco Technology Park, Swindon, SN5 6QR, UK

Purpose

Web hosting and e-mail server for contact@igibee.com / iod@igibee.com

Location

UK (UK GDPR applies; adequacy decision in force)

2.5 Analytics & cookies (Google Analytics)

We use Google Analytics 4 (Google Ireland Ltd) to understand how visitors use our website. Analytics data is pseudonymous and does not directly identify you. IP addresses are anonymised before transmission. You may opt out via our cookie consent banner or the Google Analytics opt-out browser add-on.

3. What Personal Data We Collect and Why

Data

Name, surname, delivery address, e-mail, phone number, order details

Purpose

Processing and fulfilling your order; issuing invoices; handling complaints; legal obligations

Legal basis

Art. 6(1)(b) GDPR — performance of a contract

Data

E-mail address (newsletter)

Purpose

Sending marketing communications about new products and offers

Legal basis

Art. 6(1)(a) GDPR — your consent (freely given, withdrawable at any time)

Data

Contact form data (name, e-mail, message content)

Purpose

Responding to your enquiry

Legal basis

Art. 6(1)(f) GDPR — legitimate interest in handling customer communications

Data

Cookies & browsing data

Purpose

Website functionality; analytics; remembering preferences

Legal basis

Art. 6(1)(a) GDPR — consent (via cookie banner) for non-essential cookies; Art. 6(1)(f) for strictly necessary cookies

4. Cookies

We use the following categories of cookies on igibee.com:

  • Strictly necessary cookies — required for the store to function (e.g. shopping cart, login session). No consent required.

  • Analytics cookies — Google Analytics 4, used to measure traffic and improve the site. Activated only after your consent.

  • Marketing/preference cookies — e.g. remembering your language or currency selection. Activated only after your consent.

You can manage your cookie preferences at any time via the cookie consent banner on our website, or through your browser settings.

5. How Long We Keep Your Data

Order data

Duration of the contract + 10 years (accounting / tax obligations under Polish law)

Complaint data

1 year after the warranty period or complaint resolution

Marketing consent

Until you withdraw consent or object

Contact form

Until the matter is resolved, or until you object to further contact

Customer account

Active as long as you use it; deleted after 3 years of inactivity, or upon request

Cookie consent log

Up to 1 year (to demonstrate compliance)

6. Your Rights Under GDPR

You have the following rights regarding your personal data:

  • Right of access — request a copy of the personal data we hold about you (Art. 15 GDPR).

  • Right to rectification — ask us to correct inaccurate or incomplete data (Art. 16 GDPR).

  • Right to erasure ('right to be forgotten') — request deletion of your data where there is no longer a legal basis for processing (Art. 17 GDPR).

  • Right to restriction of processing — ask us to pause processing in certain circumstances (Art. 18 GDPR).

  • Right to data portability — receive your data in a structured, machine-readable format (Art. 20 GDPR).

  • Right to object — object to processing based on legitimate interests or for direct marketing purposes (Art. 21 GDPR).

  • Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at iod@igibee.com. We will respond within 30 days.

You also have the right to lodge a complaint with a supervisory authority. In Poland: Prezes Urzędu Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warsaw — https://uodo.gov.pl. In Germany: the relevant Landesbeauftragte für Datenschutz in your federal state.

7. Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significant effects on you (Art. 22 GDPR).

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction or alteration. These include SSL/TLS encryption for data in transit, access controls, and regular security reviews. In the event of a personal data breach that is likely to result in a high risk to your rights, we will notify you without undue delay in accordance with Art. 34 GDPR.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The current version with its effective date is always available at igibee.com/pages/privacy-policy. For significant changes, we will notify you by e-mail or via a prominent notice on the website.

10. Contact

For any privacy-related questions or to exercise your rights, please contact:

E-mail: iod@igibee.com  |  Postal: Kreacja Obrazu Kamila Wilk, ul. Witosa 58, 38-400 Krosno, Poland