PRIVACY POLICY

Last updated: September 26, 2026.

This Privacy Policy sets out the rules for the processing and protection of personal data of individuals using the Frankovska online store, including visitors to the website, those making purchases, holding a Customer account, subscribing to the newsletter, and contacting us.

The Frankovska online store operates on the Shopify platform and conducts sales within Poland and other member states of the European Union.

We care about the privacy of our Customers and exercise due diligence to ensure that their personal data is processed in accordance with applicable laws, in particular with the Regulation (EU) 2016/679 of the European Parliament and of the Council ("GDPR").

1. Personal Data Controller

The Controller of personal data is:

Julia Frankowska conducting business under the name Frankovska Julia Frankowska

Address: Osiedle Letnie 46, 62-200 Wełnica, Poland

NIP (Tax ID): 7842542716

REGON (National Business Registry Number): 529163468

E-mail: kontakt@frankovska.com

Phone: +48 888 745 071

The Controller is responsible for the lawful processing of personal data of individuals using the Frankovska online store.

For matters regarding personal data protection, exercising your rights, and any questions related to this Privacy Policy, you may contact the Controller via the contact details provided above.

2. Scope of processed personal data

Depending on how you use the online store, we may process the following categories of personal data:

  • Identification and contact data, including first and last name, e-mail address, phone number, delivery address, and data necessary for issuing sales documents.

  • Data concerning orders, including information on purchased products, order value, selected payment method, delivery, returns, and complaints.

  • Payment data, including transaction status and ID, and information necessary for processing payments and refunds.

  • Customer account data, including identification information, e-mail address, order history, and account settings.

  • Data related to communication, including the content of messages sent via e-mail and other available contact channels.

  • Technical data and information about store activity, including IP address, device IDs, browser type, visited subpages, and information about interactions with products and advertisements.

  • Marketing data, including e-mail address provided when subscribing to the newsletter, information about granted consents, and interactions with sent messages.

Providing personal data is voluntary, however, certain data is necessary to enter into and perform a sales contract, create a Customer account, or use certain store functions.

We do not require you to provide full payment card numbers. Data necessary for payment authorization is processed by appropriate payment service providers in accordance with their terms of service.

3. Sources of personal data collection

We obtain personal data:

  • Directly from Customers, in particular when placing orders, creating an account, subscribing to the newsletter, or contacting us.

  • Automatically when using the store, via cookies and similar technologies, in accordance with the user's privacy settings.

  • From entities providing services to Frankovska, including payment, logistical, technical, and marketing service providers, to the extent necessary to achieve specific purposes.

4. Purposes and legal bases for data processing

We process personal data for the following purposes and on the indicated legal bases:

Order fulfillment and payment processing

We process personal data for the purpose of receiving and fulfilling orders, processing payments, and organizing delivery.

Legal basis: Article 6(1)(b) of the GDPR – processing necessary for the performance of a contract.

Creation and management of Customer account

We process data for the purpose of creating an account, providing access to its features, and managing order history.

Legal basis: Article 6(1)(b) of the GDPR.

Handling returns and complaints

We process data for the purpose of exercising Customer rights related to withdrawal from the contract, returns, and complaints.

Legal basis: Article 6(1)(b) or (c) of the GDPR, depending on the nature of the request.

Fulfillment of legal obligations

We process data for the purpose of fulfilling obligations arising from legal regulations, in particular tax and accounting laws.

Legal basis: Article 6(1)(c) of the GDPR.

Handling inquiries and correspondence

We process data for the purpose of responding to messages and maintaining communication with Customers.

Legal basis: Article 6(1)(b) or (f) of the GDPR, depending on the purpose of the contact.

Newsletter and marketing communication

We process data for the purpose of sending information about products, new collections, promotions, and events related to the Frankovska brand.

Legal basis: Article 6(1)(a) of the GDPR – consent.

Analytics and advertising

We process data for the purpose of analyzing store traffic, measuring the effectiveness of advertising campaigns, and displaying advertisements tailored to user interests.

In terms of data processing using technologies requiring consent, the legal basis is Article 6(1)(a) of the GDPR.

Store security

We process data for the purpose of ensuring store security, preventing fraud, and protecting IT systems.

Legal basis: Article 6(1)(f) of the GDPR – legitimate interest of the Controller.

Establishment, assertion, and defense of claims

Data may be processed for the purpose of protecting the Controller's rights and the establishment, assertion, or defense of claims.

Legal basis: Article 6(1)(f) of the GDPR.

If data processing is based on consent, the user may withdraw it at any time, without affecting the lawfulness of processing carried out before its withdrawal.

5. Order fulfillment and payment processing

We use personal data provided during the order placement process for the purpose of entering into and performing a sales contract, processing payments, preparing and delivering the order, and fulfilling obligations related to after-sales service.

The following payment methods are available in the Frankovska store:

  • Shopify Payments,

  • PayPal,

  • Klarna – deferred payments.

Depending on the selected payment method, data necessary for transaction processing may be transferred to the appropriate payment operator.

Payment service providers may also process personal data as independent controllers, in accordance with their own privacy policies and applicable laws.

In the case of choosing deferred payments, Klarna may conduct an assessment of eligibility for the chosen form of financing on terms defined by that provider. Frankovska does not make credit decisions on behalf of Customers.

Data necessary for delivery is transferred to selected carriers and entities handling shipments, solely to the extent necessary to deliver the order.

6. Customer Accounts

The Frankovska store allows Customers to create an individual account, which facilitates the management of orders and the use of available store features.

We process data related to the account for the purpose of creating it, managing it, ensuring its security, and enabling the use of functionalities available to registered Customers.

A Customer may request that the Controller delete their account. Deleting an account does not automatically mean the deletion of all data related to completed purchases if further retention is required by law or necessary for the establishment, assertion, or defense of claims.

7. Newsletter and marketing communication

Customers may voluntarily subscribe to the Frankovska newsletter to receive information about new collections, products, promotions, and events related to the brand.

The newsletter is handled via the Shopify platform. For the purpose of sending it, we process the Customer's e-mail address, information about the consent granted, and data regarding interactions with sent messages, to the extent provided by Shopify.

We process personal data based on voluntarily granted consent. Signing up for the newsletter is not a condition for making a purchase in the store.

Consent can be withdrawn at any time by clicking the unsubscribe link found in the email or by contacting us at kontakt@frankovska.com.

Upon withdrawal of consent, we will cease sending the newsletter. Data may still be stored solely to the extent necessary to demonstrate compliance with applicable legal regulations.

8. Cookies and tracking technologies

The Frankovska online store uses cookies and similar technologies to ensure the proper functioning of the website, support the shopping cart, process orders, analyze traffic, and conduct advertising activities.

The following categories of cookies may be used in the store:

Necessary cookies – these enable the proper functioning of the store, shopping cart support, account login, and transaction security.

Analytical cookies – these are used to analyze how the store is used, including the number of visits, traffic sources, and user interactions with the site.

Marketing cookies – these enable the analysis of the effectiveness of advertising campaigns, conversion measurement, and the display of advertisements tailored to users' interests.

We use the following tools for analytical and advertising purposes:

  • Meta Pixel – Facebook and Instagram,

  • Google Analytics and Google Ads,

  • TikTok Pixel,

  • Pinterest Tag.

These tools may process information about user activity in the store, including data regarding visited pages, viewed products, interactions with ads, and purchases made.

A banner is available in the Frankovska store that allows you to accept or reject non-essential cookies.

The use of cookies and similar technologies that are not necessary for the proper functioning of the store occurs after obtaining the required user consent.

Users can change their preferences or withdraw consent via the privacy settings available in the store.

Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.

Detailed information regarding the cookies used, their duration, and how to manage consents is available in the store's privacy settings.

9. Data processing by Shopify

The Frankovska online store uses the Shopify platform, which provides the technical infrastructure necessary to conduct online sales, handle orders, manage customer accounts, and process payments.

In connection with using the store, users' personal data may be transferred to and processed by Shopify and entities cooperating with this platform.

Our store has the Shopify Network Intelligence feature enabled, which allows Shopify to use certain data regarding users' interactions with our store, other stores using the Shopify platform, and Shopify services.

This data may be used by Shopify to develop and improve services, personalize shopping experiences, analyze ad effectiveness, and provide advanced platform features.

To the extent that Shopify independently determines the purposes and means of processing personal data within these functions, it acts as an independent data controller and is responsible for fulfilling associated obligations arising from applicable law.

Data processing requiring user consent occurs after it is obtained. Users can manage their privacy preferences via settings available in the store and tools provided by Shopify.

Detailed information regarding the processing of personal data by Shopify and how to exercise your rights can be found in the Shopify Privacy Policy and the Shopify Privacy Portal .

10. Recipients of personal data

To ensure the proper functioning of the store and to fulfill orders, personal data may be transferred to entities providing services to Frankovska, in particular:

  • Shopify – provider of the e-commerce platform and store technical infrastructure.

  • Shopify Payments, PayPal, and Klarna – payment service providers.

  • Courier companies and logistics operators – to the extent necessary for delivery.

  • Marketing and analytical service providers, including Meta, Google, TikTok, and Pinterest.

  • Entities providing accounting, IT, legal, and technical services.

  • Public authorities, if the obligation to disclose data results from applicable law.

We transfer personal data only to the extent necessary to achieve specific purposes, in accordance with applicable law.

Entities receiving data may act as processors on behalf of the Controller or as independent data controllers, depending on the nature of the services provided.

11. Personal data retention period

We store personal data for the period necessary to achieve the purposes for which it was collected, taking into account applicable law.

In particular:

  • Data related to order fulfillment is stored for the period necessary to perform the contract and resolve potential claims.

  • Accounting and tax documentation is stored for the period required by applicable law.

  • Data related to a Customer account is stored for the duration of its activity, and after deletion, only to the extent justified by legal obligations or the need to defend against claims.

  • Data used for sending the newsletter is stored until consent is withdrawn, subject to information necessary to demonstrate it was previously granted.

  • Data processed for analytical and marketing purposes is stored for the period resulting from the purpose of processing, consents granted, and individual tool settings.

  • Data related to complaints and returns is stored for the period necessary for their resolution and to fulfill legal obligations and defend against claims.

After the appropriate storage period, data is deleted or anonymized, unless further processing is required by applicable law.

12. Rights of data subjects

Individuals whose personal data we process have the rights specified in applicable data protection regulations, in particular:

  • The right to access their personal data and obtain a copy.

  • The right to rectify incorrect or complete incomplete data.

  • The right to have personal data deleted in cases provided for by law.

  • The right to restrict the processing of data.

  • The right to data portability, if the conditions specified in the regulations are met.

  • The right to object to processing based on the Controller's legitimate interest.

  • The right to withdraw consent at any time, if data processing is based on it.

  • The right to lodge a complaint with the appropriate supervisory authority.

In the case of processing data for direct marketing purposes, the user may object to such processing at any time.

To exercise your rights, please contact the Controller at kontakt@frankovska.com.

The Controller shall respond to the request without undue delay, and as a rule, no later than one month after its receipt. In cases provided for by law, this time limit may be extended, of which the person making the request will be informed.

13. Right to lodge a complaint

If you believe that your personal data is being processed in violation of applicable laws, you have the right to lodge a complaint with the competent supervisory authority.

In Poland, the competent authority for personal data protection is:

The President of the Personal Data Protection Office (UODO)

Website: https://uodo.gov.pl

Individuals located in other countries of the European Economic Area may also exercise the right to lodge a complaint with the competent supervisory authority in accordance with applicable regulations.

14. International transfer of personal data

In connection with the use of external technology providers, personal data may be transferred to countries outside the European Economic Area, including the United States.

When transferring personal data outside the European Economic Area, we use appropriate data protection mechanisms provided for by applicable law.

These may include, in particular, European Commission decisions stating an adequate level of data protection in the recipient country, standard contractual clauses, and other legally permissible data transfer mechanisms.

Information regarding the safeguards used and the possibility of obtaining a copy thereof can be obtained by contacting the Controller at kontakt@frankovska.com.

15. Personal data protection

We exercise due diligence to ensure the security of processed personal data and protect it against unauthorized access, loss, destruction, disclosure, or unlawful use.

To this end, we apply appropriate technical and organizational measures, taking into account the nature of the data being processed and the risks associated with their processing.

Access to personal data is restricted to individuals and entities that require it to perform specific duties.

Despite the use of appropriate safeguards, no IT system or method of data transmission via the Internet can guarantee the complete elimination of security risks.

16. Children's personal data

The Frankovska online store is intended primarily for adults.

We do not knowingly collect personal data of children for marketing purposes without the consent required by law.

If a parent or legal guardian believes that a child's personal data has been submitted to our store in violation of applicable laws, they may contact the Controller to clarify the situation and exercise appropriate rights regarding personal data protection.

17. Automated data processing and profiling

In connection with the use of analytical and advertising tools, data regarding user activity in the store may be used to create audience groups, analyze shopping preferences, and match advertising content to user interests.

Such actions may constitute profiling within the meaning of personal data protection regulations.

Profiling used by Frankovska for marketing purposes is not used by the Controller to make decisions that produce legal effects for users or similarly significantly affect them based solely on automated data processing.

Notwithstanding the above, external payment service providers may use their own mechanisms for the automatic assessment of transactions or the ability to use specific forms of payment, in accordance with their own data processing policies and applicable law.

18. Changes to the Privacy Policy

We reserve the right to update this Privacy Policy in the event of changes in applicable laws, the functioning of the store, the technologies used, or the principles of personal data processing.

The current version of the Privacy Policy will be published on the Frankovska website each time, along with the date of the last update.

In the event of changes requiring additional notification to users or obtaining their consent, we will take appropriate steps in accordance with applicable law.

19. Contact

If you have any questions regarding this Privacy Policy, the principles of personal data processing, or the exercise of your rights, please contact us:

Frankovska Julia Frankowska

Osiedle Letnie 46

62-200 Wełnica, Poland

E-mail: kontakt@frankovska.com

Phone: +48 888 745 071