Privacy policy

This is a translation. The Polish version is binding.

Last updated: 9 October 2026

1. Data controller

The controller of your personal data is the seller running the KYN online store at kynstores.com, NIP (tax ID) 5273189499 ("we"). Contact for data matters: support@kynstores.com.

2. What data we collect

Contact and delivery data: name, delivery and billing address, phone number, email address, and the delivery method and pickup point chosen in the cart (locker or point code and address).
Payment data: payments are processed by Shopify Payments. We don't have access to your full card details; we only see transaction information (payment method, status, amount).
Account data: if you create an account – email address, order history, saved addresses.
Order data: products ordered, returns, complaints and your correspondence with us.
Sign-ups and newsletter: the email address entered in the "Notify me" (restock), "Join the list" (waitlist) and newsletter forms.
Technical data: IP address, device and browser type, and how you use the site, collected among other things through cookies.
Wishlist: items saved to the wishlist are stored only in your browser (localStorage). They are not sent to us and not linked to your identity.

3. Purposes and legal bases

Concluding and performing the sales contract, including payment, delivery and your account (Art. 6(1)(b) GDPR).
Handling returns and complaints and meeting legal obligations, such as tax and accounting rules (Art. 6(1)(c) GDPR).
Emails about drops, restocks and the waitlist, only with your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time via the "Unsubscribe" link in any email or by writing to support@kynstores.com. Withdrawal doesn't affect emails sent before.
Replying to messages sent through the contact form or by email, store security and fraud prevention, and establishing and defending legal claims – our legitimate interest (Art. 6(1)(f) GDPR).
Site statistics and analytics – with your consent given in the cookie banner (Art. 6(1)(a) GDPR).

Providing data is voluntary, but we can't fulfil an order without the data it needs. We don't make decisions about you based solely on automated processing that have legal effects.

4. Who we share data with

Shopify (Shopify International Limited, Ireland) – the store platform, hosting, payment processing (Shopify Payments) and email sending (Shopify Email).
Furgonetka.pl (Furgonetka sp. z o.o.) – the shipping platform we use to create labels and track parcels. The cart also uses the Furgonetka.pl pickup-point map. It loads only after you choose delivery to a pickup point, and the address or town you type into it is sent to Furgonetka.pl to find points.
Carriers, depending on the delivery you choose: InPost sp. z o.o. (InPost parcel lockers), DPD Polska sp. z o.o. (DPD Pickup), ORLEN Paczka sp. z o.o. (ORLEN Paczka).
Public authorities, where the law requires it.

These parties process data as our processors, or as independent controllers for the services they provide, such as postal, courier and payment services.

5. Relationship with Shopify

The store runs on Shopify, which processes data about your use of the store to provide and improve its services. For some features, Shopify may use data about your interactions with our store, other merchants and Shopify – for that processing, Shopify is responsible for your data and for handling your requests. More information: Shopify Consumer Privacy Policy and the Shopify Privacy Portal.

6. Transfers outside the EEA

Some of our providers (such as Shopify) may process data outside the European Economic Area, including in Canada and the USA. This is based on a European Commission adequacy decision or on Standard Contractual Clauses approved by the European Commission.

7. How long we keep data

order data – for the duration of the contract, then until legal claims become time-barred;
accounting and tax records – for 5 years from the end of the year in which the tax obligation arose;
marketing email data – until you withdraw consent;
account data – until the account is deleted;
correspondence – as long as needed to handle the matter and any claims.

8. Your rights

You have the right to access your data, correct it, delete it, restrict processing, data portability, object to processing based on our legitimate interest, and withdraw consent at any time (without affecting processing before withdrawal). To exercise these rights, write to support@kynstores.com.

You also have the right to lodge a complaint with the supervisory authority – the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl.

9. Cookies

We use cookies that the store needs to work (such as the cart, login and security) and – with your consent – analytics and marketing cookies. You give and change consent in the cookie banner. You can also delete or block cookies in your browser settings; blocking essential cookies may prevent you from placing an order.

10. Children

The store is not intended for children. We don't knowingly collect data from anyone under 16.

11. Changes to this policy

We may update this policy, for example when laws or our services change. The current version is always available on this page, with the date of the last update.