Privacy policy


1. Personal Data

1.1 Providing personal data is voluntary but necessary to complete an order or create a customer account.

1.2 Personal data you provide directly to us (such as name, address, email, and phone number) is collected when you place an order, register an account, or contact us.

1.3 Additional data such as IP address, browser type, and usage data may be collected automatically for analytical and security purposes.

2. Purposes and Legal Bases for Processing

2.1 We process your personal data for the following purposes:

  • To process and fulfill your orders, including payments, returns, and warranties.

  • To provide customer support and communicate about your orders.

  • To send marketing updates or promotions, if you have given consent.

  • To analyze and improve our website and services.

  • To comply with legal obligations such as accounting and tax requirements.

  • To prevent fraud and ensure the security of our website.

2.2 We process your data on the following legal bases:

  • To perform a contract with you.

  • To comply with our legal obligations.

  • Based on our legitimate interests (for improving our services and preventing fraud).

  • Based on your consent (for newsletters and marketing).

3. Data Sharing with Third Parties

3.1 We share personal data only when necessary for order fulfillment, payment processing, or when you have provided explicit consent.

3.2 Our online store is powered by Shopify Inc., which securely stores your data in accordance with GDPR and PCI-DSS standards.

3.3 Some service providers (including Shopify) may transfer data outside the European Economic Area (EEA). Where this occurs, we ensure appropriate safeguards such as Standard Contractual Clauses or adequacy decisions are in place.

4. Data Retention

4.1 Your personal data is stored only as long as necessary to fulfill the purposes for which it was collected (e.g., order fulfillment or account maintenance).

4.2 Data may be retained longer if required to meet legal, accounting, or reporting obligations, or to establish or defend legal claims.

4.3 Personal data processed for accounting and tax purposes is retained for five years from the end of the calendar year in which the tax obligation arose.

5. Rights of the Data Subject

5.1 You have the right to:

  • Access your personal data.

  • Correct inaccurate or incomplete data.

  • Request deletion of your data (“right to be forgotten”).

  • Restrict or object to processing.

  • Data portability.

  • Withdraw consent at any time (without affecting prior processing).

  • Lodge a complaint with the President of the Personal Data Protection Office (UODO) in Poland.

5.2 To exercise these rights, contact us at contact@joinsunsetsociety.com.

5.3 We will respond to requests promptly and in accordance with GDPR timelines.

6. Cookies and Analytics

6.1 Our website uses cookies to provide a better browsing experience, analyze site traffic, and improve services.

6.2 Cookies are small text files stored on your device that help us recognize you on future visits.

6.3 You can manage or disable cookies in your browser settings. Restricting cookies may affect website functionality.

6.4 We may use third-party analytics and advertising services, such as Google Analytics and Meta (Facebook), to understand website usage, measure marketing effectiveness, personalize advertising, and improve our services. These providers may use cookies or similar technologies to collect aggregated information about interactions with our website, subject to your consent preferences.

7. Data Security

7.1 We use appropriate technical and organizational measures to protect your data, including SSL encryption, access controls, and secure hosting.

7.2 Payments are processed by PCI-DSS compliant providers.

7.3 While no system is completely risk-free, we work to safeguard your data against unauthorized access, disclosure, or loss.

8. Policy Updates

8.1 We may update this Privacy Policy from time to time.

8.2 Updated versions will be posted on our website.

8.3 We encourage you to review this policy periodically to stay informed about how we protect your personal data.

9. Contact

9.1 If you have any questions, concerns, or requests regarding your personal data, please contact us at contact@joinsunsetsociety.com

10. Data Controller

Elżbieta Laskowska-Przybył EP
ul. Jana III Sobieskiego 39D
96-100 Skierniewice, Poland
Email: contact@joinsunsetsociety.com