Privacy Policy

Boski Blask Privacy Policy

Effective from 30 July 2026.

Data controller

The controller of personal data is Viacheslav Khymych – Shablya, NIP 6762650082, REGON 526218074, address: ul. Księcia Józefa 54A, 30-206 Kraków, Poland. Contact: khymspzoo@gmail.com, tel. +48 517 801 251.

Data we process

We may process identification and contact details, billing and delivery addresses, order and payment information, information concerning returns and complaints, correspondence, customer account data, and technical data relating to the device, browser, IP address, and use of the store. We do not store full payment card details.

Purposes and legal bases

  • handling orders, payments, delivery, returns, and complaints — performance of a contract or steps taken before entering into a contract;
  • accounting records and tax and consumer-law obligations — compliance with a legal obligation;
  • fraud prevention, security, establishment and defence of claims, analysis of service operation, and handling enquiries — the controller’s legitimate interests;
  • newsletters, marketing, and optional analytics or advertising technologies — consent, where required.

Recipients of data

Data may be shared with entities necessary to operate the store, in particular Shopify, payment providers, InPost and other carriers serving the destination country, hosting and IT providers, analytics or marketing tools, accounting services, and legal advisers — only to the extent necessary and on an appropriate legal basis.

Transfers outside the EEA

Shopify and some service providers may process data outside the European Economic Area. In such cases, safeguards required by the GDPR are used, such as an adequacy decision or standard contractual clauses.

Retention period

We retain data for as long as necessary to complete an order and subsequently for periods required by tax, accounting, and claims regulations. Tax and accounting records are retained for the period required by law, usually five years calculated in accordance with tax rules. Marketing data is retained until consent is withdrawn or an effective objection is made, and technical data for the lifetime of the relevant cookies.

Your rights

Within the limits provided by law, you have the right to access, rectify, erase, restrict processing, and transfer your data, to object, and to withdraw consent without affecting the lawfulness of processing carried out before withdrawal. Requests can be sent to khymspzoo@gmail.com. You also have the right to lodge a complaint with the President of the Polish Personal Data Protection Office.

Cookies and similar technologies

The store uses cookies necessary for the cart, checkout, and security. Optional analytics or advertising cookies are used in accordance with the user’s consent settings. Consent can be changed in the store’s privacy settings or in the browser; disabling essential cookies may limit the operation of the service.

Profiling and security

If the user consents, activity data may be used to tailor advertising or measure its effectiveness. Such profiling does not in itself produce legal effects or similarly significantly affect the user. We use appropriate organisational and technical measures, and access to data is limited to authorised persons and service providers.