PRIVACY POLICY
Last updated: 19 October 2026
This Privacy Policy explains how personal data is collected, processed, stored and protected when using the YULIYA BABICH online store at shop.yuliyababich.eu.
We respect the privacy of our Customers and process personal data in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation — GDPR) and applicable Polish and European Union laws.
1. DATA CONTROLLER
The controller responsible for processing personal data is:
YULIYA BABICH FASHION DESIGNER
Legal business name: BABICH FASHION DESIGNER
Registered address: ul. Leszka 1, 72-006 Mierzyn
NIP (Tax Identification Number): [NIP] 852 244 6874
Email: info@yuliyababich.pl
The Data Controller is responsible for ensuring that personal data is processed lawfully, fairly, transparently and securely.
2. PERSONAL DATA WE COLLECT
Depending on how Customers interact with our Online Store, we may collect the following categories of personal data:
-
First name and last name
-
Email address
-
Telephone number
-
Billing and delivery addresses
-
Order details and purchase history
-
Payment and transaction information
-
Customer service correspondence
-
Information relating to returns, exchanges and complaints
-
IP address, browser information and technical website usage data
-
Cookie identifiers and online activity information, where applicable
We collect only the personal data necessary for the relevant processing purposes.
3. PURPOSES AND LEGAL BASES FOR PROCESSING
Personal data is processed for the following purposes:
3.1. Order Processing and Contract Performance
Processing orders, confirming purchases, arranging payments, delivering products and managing returns or exchanges.
Legal basis: Article 6(1)(b) GDPR — performance of a contract or taking steps prior to entering into a contract.
3.2. Payment Processing
Processing payments through available payment service providers, including Przelewy24 (PayPro S.A.), and maintaining relevant transaction records.
Legal basis: Article 6(1)(b) GDPR and, where applicable, Article 6(1)(c) GDPR.
3.3. Customer Service
Responding to inquiries, providing assistance and handling customer communications.
Legal basis: Article 6(1)(b) GDPR where communication relates to a contract, or Article 6(1)(f) GDPR where processing is necessary for our legitimate interest in responding to inquiries and providing customer support.
3.4. Accounting and Legal Compliance
Maintaining financial records, issuing invoices and fulfilling tax and accounting obligations.
Legal basis: Article 6(1)(c) GDPR.
3.5. Complaints and Legal Claims
Handling statutory consumer complaints, establishing, exercising or defending legal claims.
Legal basis: Article 6(1)(c) GDPR where processing is required by law, or Article 6(1)(f) GDPR for legitimate interests relating to legal claims.
3.6. Marketing and Advertising
Where applicable, personal data may be processed for marketing activities, including advertising campaigns, measuring their effectiveness and communicating promotional offers.
Legal basis: Article 6(1)(a) GDPR where consent is required, or Article 6(1)(f) GDPR where processing is lawfully based on legitimate interests.
Marketing communications and non-essential tracking technologies are subject to applicable consent requirements.
3.7. Website Analytics
Where enabled, we may use analytics tools, including Google Analytics, to understand website traffic, measure performance and improve the shopping experience.
Where consent is legally required for analytics cookies or similar technologies, these will be activated only after the appropriate consent has been obtained.
4. RECIPIENTS OF PERSONAL DATA
We may share personal data with trusted service providers where necessary for the operation of our Online Store.
These may include:
-
Payment service providers, including Przelewy24 (PayPro S.A.)
-
Courier and logistics companies responsible for order delivery and returns
-
IT service providers and website hosting companies
-
E-commerce platform and technical support providers
-
Accounting, tax and legal service providers
-
Marketing and analytics service providers, where applicable
-
Public authorities where disclosure is required by law
Service providers acting as data processors are required to process personal data in accordance with applicable data protection laws and relevant contractual obligations.
We do not sell Customers' personal data.
5. PAYMENT SECURITY
Payments made through our Online Store are processed using the payment methods available at checkout.
Where Customers select Przelewy24, payment information is processed by PayPro S.A. in accordance with its applicable privacy and security policies.
The Online Store does not require Customers to disclose their payment card security codes directly to our customer service team.
Payment service providers may process personal data as independent controllers or processors, depending on their respective roles.
6. DATA RETENTION
We retain personal data only for as long as necessary for the purposes for which it was collected or as required by applicable law.
In particular:
-
Order and contract data: for the duration of the contract and any applicable limitation periods for legal claims.
-
Accounting and tax documentation: for the periods required under applicable Polish accounting and tax legislation.
-
Customer service correspondence: for the time necessary to resolve inquiries and, where justified, establish or defend legal claims.
-
Marketing data: until consent is withdrawn, an effective objection is made, or the relevant processing purpose ends, as applicable.
-
Analytics and cookie data: according to the applicable retention settings and information provided in our Cookies Policy.
When personal data is no longer required, it will be deleted or anonymised unless continued retention is required by law.
7. CUSTOMERS' RIGHTS UNDER GDPR
Customers have the following rights, subject to the conditions set out in the GDPR:
-
Right of Access — to obtain confirmation of whether personal data is processed and to access that data.
-
Right to Rectification — to request correction of inaccurate or incomplete personal data.
-
Right to Erasure — to request deletion of personal data where the legal conditions are met.
-
Right to Restriction — to request restriction of processing in certain circumstances.
-
Right to Data Portability — to receive certain personal data in a structured, commonly used, machine-readable format and, where applicable, transmit it to another controller.
-
Right to Object — to object to processing based on legitimate interests, including an unconditional right to object to processing for direct marketing purposes.
-
Right to Withdraw Consent — to withdraw previously given consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
-
Right to Lodge a Complaint — to lodge a complaint with a competent supervisory authority, including the President of the Personal Data Protection Office (UODO) in Poland.
To exercise these rights, Customers may contact us using the email address provided in Section 1.
We will respond to requests within the time limits established by the GDPR, generally within one month.
8. VOLUNTARY PROVISION OF PERSONAL DATA
Providing personal data is generally voluntary.
However, certain information, such as name, delivery address and contact details, is necessary to place and fulfil an order.
Failure to provide the information required for contract performance may prevent us from processing the order or providing the requested service.
Where personal data is required by law, the relevant obligation will apply.
Providing data for optional marketing activities is not a condition of purchasing products.
9. AUTOMATED DECISION-MAKING AND PROFILING
We do not use automated decision-making that produces legal effects concerning Customers or similarly significantly affects them within the meaning of Article 22 GDPR, unless separately disclosed in accordance with applicable law.
Where enabled, advertising and analytics technologies may involve audience segmentation, personalised advertising or profiling based on online activity.
Such processing is subject to applicable GDPR requirements, including consent where required.
10. SECURITY OF PERSONAL DATA
We implement appropriate technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure, destruction or loss.
These measures may include:
-
Secure website connections using HTTPS/TLS
-
Access restrictions and authentication controls
-
Appropriate protection of customer and order information
-
Secure payment processing through authorised payment providers
-
Technical maintenance and security updates
-
Access to personal data limited to authorised persons
Security measures are reviewed and adapted where appropriate, taking into account the nature of the data and the risks associated with processing.
11. INTERNATIONAL DATA TRANSFERS
Personal data is primarily processed within the European Economic Area (EEA).
Where the use of service providers involves transferring personal data outside the EEA, such transfers will take place only where a lawful transfer mechanism under Chapter V GDPR applies.
Depending on the circumstances, this may include:
-
An adequacy decision issued by the European Commission
-
Standard Contractual Clauses approved by the European Commission, together with any necessary supplementary safeguards
-
Another lawful transfer mechanism permitted by the GDPR
Where applicable, Customers may request information about the relevant transfer safeguards by contacting the Data Controller.
12. COOKIES AND TRACKING TECHNOLOGIES
Our Online Store may use cookies and similar technologies to ensure website functionality, maintain shopping cart sessions, analyse website performance and support marketing activities.
Cookies may include:
Essential Cookies
Necessary for the operation of the Online Store, including shopping cart functionality, checkout and security.
Analytics Cookies
Used to understand website traffic and improve website performance, where enabled and lawfully permitted.
Marketing Cookies
Used to measure advertising performance and deliver relevant advertisements, where enabled and lawfully permitted.
Non-essential cookies and similar tracking technologies will be used only where the required consent has been obtained.
Customers may manage or withdraw their cookie preferences through the cookie settings mechanism available on the website.
Further details, including information about specific cookies, their providers and retention periods, are provided in our separate Cookies Policy.
13. THIRD-PARTY SERVICES
Our Online Store may integrate services provided by external companies, including payment providers, analytics platforms, advertising services and logistics partners.
Where such providers act as independent data controllers, their own privacy policies may also apply.
We encourage Customers to review the privacy information provided by relevant third-party services.
14. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy to reflect changes in applicable legislation, technical solutions or our business operations.
The current version will be published on our Online Store.
Where required by law, Customers will be informed of material changes or asked to provide renewed consent.
15. CONTACT
For any questions concerning this Privacy Policy or the processing of personal data, please contact:
YULIYA BABICH FASHION DESIGNER
Email: info@yuliyababich.pl
Registered address: ul. Leszka 1, 72-006 Mierzyn
Website: https://shop.yuliyababich.eu
Customers may also contact the Polish supervisory authority:
President of the Personal Data Protection Office (UODO)
Website: https://uodo.gov.pl
This Privacy Policy is governed by the applicable provisions of the GDPR and Polish data protection legislation.
|
Questions? Contact us! Customer service e-mail support 24H info@yuliyababich.eu |
