This Privacy Policy explains how Pillac (“we”, “us”) collects, uses and protects your personal data when you visit pillac.com or place an order. We handle your data under the EU General Data Protection Regulation (GDPR) — plainly, and only as far as running the shop needs.
Who is the data controller
The controller of your personal data is Pillac, operating the store at pillac.com, based in Warsaw, Poland. Contact: contact@pillac.com. The store is operated by Prevka Studio (EU VAT ID: PL5291766056).
What data we collect
Order data: name, delivery and billing address, e-mail, phone (optional), order contents and the personalization text you provide. Payment data: handled directly by our payment provider — we never store full card numbers. Contact data: the content of messages you send us by e-mail or the contact form. Technical data: IP address, browser type, device and usage data collected through cookies and similar technologies.
Why we process it, and on what legal basis
To fulfil your order (contract, GDPR Art. 6(1)(b)) — production, payment, shipping, customer service. To meet legal obligations (Art. 6(1)(c)) — accounting, tax and consumer-law records. For our legitimate interests (Art. 6(1)(f)) — site security, fraud prevention, basic analytics, answering your enquiries. With your consent (Art. 6(1)(a)) — newsletter and marketing cookies, which you can withdraw at any time.
Who we share data with
We share data only with providers who help us run the store, acting as our processors or independent controllers:
Payments — our payment provider (card, Apple Pay, Google Pay processing). Shipping — the couriers who deliver your parcel (e.g. FedEx, UPS, InPost): name, address and phone, as needed for delivery. Hosting & IT — our hosting provider (servers in the EU) and technical service providers. Delivery & security — Cloudflare (traffic routing and protection).
We never sell your personal data.
International transfers
Your data is primarily processed within the EU/EEA. Where a provider processes data outside the EEA, it is done under appropriate safeguards (e.g. EU Standard Contractual Clauses).
How long we keep it
Order and accounting data — for the period required by tax law (generally 5 years). Contact correspondence — up to 2 years. Marketing data — until you withdraw consent. Cookies — for the lifetimes listed in our cookie banner.
Your rights
You have the right to access your data, rectify it, erase it, restrict or object to processing, and to data portability. Where processing is based on consent, you may withdraw it at any time. To exercise any right, write to contact@pillac.com. You may also lodge a complaint with the Polish Data Protection Authority (UODO, uodo.gov.pl) or your local supervisory authority.
Cookies
We use essential cookies (needed for the cart and checkout) and — with your consent — analytics and marketing cookies. You manage your choices through the cookie banner. Blocking essential cookies may affect how the store works.
Changes to this policy
We may update this policy; the current version is always published on this page with its “last updated” date.
