Privacy Policy

This privacy policy explains what personal data we collect when you visit or buy from suaviusatelier.com, how we use it, and what rights you have. We follow the EU General Data Protection Regulation (GDPR) and Polish data protection law.

Data controller

The data controller is Wellmade Sławomir Kasprzak, with correspondence address in Bielawa, Poland. You can reach us for any privacy matter at orders@suaviusatelier.com.

What we collect

When you place an order, we collect your name, email address, shipping address, and phone number. Payment details (card number, expiry, CVC) are entered directly with Stripe and never reach our servers. We store a reference to the Stripe payment intent so we can match your order to the payment.

We use Vercel Web Analytics and Speed Insights, a privacy-friendly, cookieless analytics service that measures aggregate traffic and page performance. It does not set cookies, does not collect personal data, and does not track you across other websites or build advertising profiles. We use no other analytics, advertising, or behavioural tracking tools. You can switch analytics off at any time using the "Disable analytics" control in the site footer, and we automatically honour your browser's Global Privacy Control signal.

Legal basis and purpose

We process your data on the following legal bases: (a) performance of the contract of sale (Art. 6(1)(b) GDPR), in order to dispatch the goods, send order confirmations, and handle returns or complaints; (b) compliance with legal obligations (Art. 6(1)(c) GDPR), in particular bookkeeping and tax retention rules.

Retention

Order records are kept for the period required by Polish tax law (currently five years from the end of the calendar year in which the tax liability arose, typically meaning seven calendar years for safety). After that period, we anonymise or delete order data.

Sharing

We share the minimum personal data necessary with the following service providers, each of which acts as our processor or controller in their own right:

Stripe Payments Europe Limited (payment processing). Vercel Inc. (website hosting and content delivery). Neon Database Inc. (database hosting in EU region). Cloudflare Inc. (DNS and image delivery). SEOhost.pl (email delivery). Shipping carriers selected for your order (carrier name will be visible in your shipment notification). InFakt (accounting and invoicing system used for tax compliance).

Your rights

Under the GDPR you have the right to: access your data, correct inaccurate data, request deletion (right to be forgotten), restrict or object to processing, request portability, and withdraw consent. To exercise any of these rights, email orders@suaviusatelier.com. We will respond within one month.

You also have the right to lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (UODO, uodo.gov.pl).

International transfers

Some of our processors (notably Stripe, Vercel, Cloudflare) may transfer data outside the European Economic Area. In each case, transfers are governed by Standard Contractual Clauses approved by the European Commission or equivalent safeguards.

Changes to this policy

We will update this policy when our practices change. The current version is always the one published on this page.