Privacy policy

1. Data controller

The controller of the personal data of users and customers of the paradisesociety online store (www.paradisesociety.com) is:

FOUMA KAMIL LAREK
ul. Kobielska 23/216, 04-359 Warszawa, Poland
VAT ID: PL5552124211

For any matters concerning personal data, write to contact@paradisesociety.com or call +48 690 672 470.

We process data in accordance with the GDPR (Regulation (EU) 2016/679 of the European Parliament and of the Council) and the Polish Electronic Communications Law.

2. What data we process

Depending on how you use the store, we may process:

  • first and last name,
  • e-mail address and phone number,
  • delivery and billing address,
  • invoice details, including VAT ID,
  • history of orders, payments, returns and complaints,
  • the content of messages sent to the store,
  • IP address, cookie identifiers and device and browser data,
  • activity in the store, e.g. pages visited or products added to the cart.

We do not process special categories of data, such as health data, political opinions, religion or ethnic origin.

3. Purposes and legal bases

a) Orders, payments and delivery

Accepting and confirming orders, handling payments, preparing and delivering parcels.

Legal basis: Article 6(1)(b) GDPR – performance of a contract.

b) Customer account

Logging in, viewing orders and saved addresses.

Legal basis: Article 6(1)(b) GDPR – performance of the customer account agreement.

c) Contact

Replying to e-mails and questions about products, orders, delivery or payments.

Legal basis: Article 6(1)(f) GDPR – our legitimate interest in handling enquiries, and Article 6(1)(b) GDPR where the question concerns an order.

d) Returns, withdrawals and complaints

Receiving and handling returns and complaints, including via the online withdrawal form.

Legal basis: Article 6(1)(c) GDPR – legal obligation, and Article 6(1)(f) GDPR – establishing, pursuing and defending claims.

e) Accounting and taxes

Issuing invoices, keeping accounting records and settling taxes.

Legal basis: Article 6(1)(c) GDPR – legal obligation.

f) Newsletter

Sending information about drops, new products, promotions and discount codes by e-mail.

Legal basis: Article 6(1)(a) GDPR – your consent.

g) Analytics and online advertising

Analysing store traffic, measuring ad performance, remarketing and ad personalisation using cookies and similar technologies.

Legal basis: Article 6(1)(a) GDPR – your consent given in the cookie banner.

h) Store security

Securing transactions, detecting abuse and preventing fraud.

Legal basis: Article 6(1)(f) GDPR – our legitimate interest.

4. Recipients of data

We share data only to the extent needed for the service concerned:

  • Shopify International Limited and other Shopify group companies – store platform, customer accounts, order handling,
  • PayPro S.A. (Przelewy24) – payments,
  • PayPal (Europe) S.à r.l. et Cie, S.C.A. – payments,
  • Stripe Payments Europe, Limited – card payments,
  • InPost sp. z o.o. and other carriers – delivery,
  • Google Ireland Limited – analytics and advertising, with consent,
  • Meta Platforms Ireland Limited – advertising on Facebook and Instagram, Meta Pixel, with consent,
  • Revoq – online withdrawal form app,
  • newsletter service provider,
  • accounting office,
  • IT and hosting service providers,
  • public authorities – where required by law.

Payment operators, carriers, Shopify, Google and Meta may also process data as separate controllers, under the terms of their own privacy policies.

5. Transfers outside the EEA

Using the services of Shopify, Google, Meta, PayPal and Stripe may involve transferring data outside the European Economic Area, in particular to Canada and the United States. Such transfers are based on European Commission adequacy decisions or standard contractual clauses.

6. Cookies

The store uses cookies and similar technologies, such as pixels, tags and online identifiers:

  • necessary – required for the store, cart and orders to work,
  • preferences – remember e.g. your language and currency,
  • analytics – show how you use the store,
  • marketing – used to measure ad performance, for remarketing and ad personalisation.

Necessary cookies work without consent. All others are set only after you give consent in the cookie banner. You can change or withdraw your consent at any time in the cookie banner or in your browser settings.

7. Analytics and advertising tools

With your consent, the store may use tools such as Meta Pixel, Google Analytics, Google Ads and Google Tag Manager. They collect data about activity in the store, e.g. pages visited, clicks, adding products to the cart, starting checkout or completing a purchase.

This data is used to measure ad performance, build audiences, run remarketing and analyse traffic. Without your consent these tools are not activated, and not consenting does not affect your ability to shop.

8. Newsletter

Subscribing to the newsletter is voluntary – for example, you can tick the consent box when placing an order. You can unsubscribe at any time via the link in each message or by writing to contact@paradisesociety.com. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

9. How long we keep data

  • order data – for the duration of the contract and then until claims become time-barred (generally up to 6 years),
  • accounting and tax records – for 5 years from the end of the year in which the tax payment deadline passed,
  • returns and complaints data – while they are being handled and then until claims become time-barred,
  • customer account – until it is deleted,
  • your messages – for as long as needed to handle the matter,
  • newsletter and other data processed on the basis of consent – until consent is withdrawn,
  • cookie data – for the period set by the given tool or until you delete cookies in your browser.

10. Your rights

You have the right to:

  • access your data and receive a copy,
  • rectify your data,
  • erase your data,
  • restrict processing,
  • data portability,
  • object to processing,
  • withdraw consent at any time,
  • lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warszawa, Poland) or the supervisory authority in your country.

You may object at any time to processing based on our legitimate interest. We always honour an objection to direct marketing.

To exercise your rights, write to contact@paradisesociety.com.

11. Do you have to provide data

Providing data is voluntary, but without the data needed for an order we cannot accept or fulfil it. Without newsletter consent you will not receive marketing messages. Not consenting to analytics and marketing cookies does not affect your ability to shop.

12. Profiling

If you consent to marketing cookies, data about your activity in the store may be used for advertising profiling, e.g. ad personalisation and building audiences in Meta and Google. Profiling does not produce legal effects concerning you or similarly significantly affect you (Article 22 GDPR).

13. Security

We use appropriate technical and organisational measures to protect data against loss, unauthorised access, disclosure or alteration. The connection to the store is encrypted and payments are handled by payment operators – the store does not store payment card details.

14. External links

The store contains links to other services, e.g. Instagram, payment operators or carriers. We are not responsible for how they process data – we recommend reading their privacy policies.

15. Changes to this privacy policy

We may update this policy, e.g. when the law, our service providers or the way the store works change. The current version is always available in the store.

Last updated: 18 October 2026.