Last updated: September 2026
Privacy Policy
The controller of your personal data is NOSOCKSPOLAND P.S.A. Below we explain what we collect, why, who we entrust it to and what your rights are (GDPR, Article 13).
1. Controller
NOSOCKSPOLAND Prosta Spółka Akcyjna, ul. Błońska 13, 93-564 Łódź, Poland, KRS 0001062639, NIP 7292752063. Contact for data matters: kontakt@nosoksy.com.
2. What we collect
When you order: name, e-mail, phone, delivery address or parcel-locker code, the products ordered and the payment status (never card data — payment happens at Przelewy24). When you contact us: your message and sender details. Technically: IP address and basic device data in server logs, and — only with your consent — visit statistics (Google Analytics).
3. Purposes and legal bases
Fulfilling your order and delivery, and handling returns and complaints (Art. 6(1)(b) GDPR); tax and accounting obligations (Art. 6(1)(c)); establishing and defending claims and keeping the site secure (Art. 6(1)(f), legitimate interest); analytics (Art. 6(1)(a), consent you can withdraw at any time). Providing data is voluntary, but without it we cannot fulfil an order.
4. Recipients
We entrust data only to providers needed to fulfil your order: PayPro S.A. (Przelewy24 — payment), InPost sp. z o.o. (delivery), Resend (e-mail delivery), Upstash and Vercel (hosting and order storage) and — after your consent — Google (analytics). Some of these providers process data outside the EEA under Standard Contractual Clauses or an adequacy decision (EU–US Data Privacy Framework). We never sell your data.
5. Retention
Order data is kept for as long as tax law requires (5 years from the end of the year of purchase) and until claims are time-barred; the order remains visible in the store system for 180 days. Correspondence is kept until the matter is closed. Analytics data follows the Google Analytics setting (up to 14 months). Data processed on the basis of consent is kept until you withdraw it.
7. Your rights
You have the right to access, rectify, erase and port your data, to restrict or object to processing, and to withdraw consent — write to kontakt@nosoksy.com. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes UODO, ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl).