Privacy & Cookies Policy

21 May 2026

This Privacy and Cookies Policy explains how Minoti Sp. z o. o. ("we", "the Controller") collects, uses and protects your personal data when you use our online store. Your privacy matters to us.

1. Data controller

The controller of your personal data is Minoti Sp. z o. o., ul. Grochowska 306/308, 03-844 Warsaw, Poland, registered in the National Court Register (KRS) under number 0000785854, Tax ID (NIP): 1132998007.
Data protection contact: cs@minoti.com

2. What data we collect

We collect the following categories of personal data:

• Identity and contact data — name, e-mail address, telephone number, delivery and billing address.
• Order data — purchase history, order details, payment method (we do not store full card details).
• Account data — login credentials (password encrypted), communication preferences.
• Technical data — IP address, browser type, operating system, cookie identifiers and similar technologies.
• Marketing data — newsletter consent, communication preferences, interactions with our content.

3. Purposes and legal bases

We process your personal data on the following legal bases under the UK GDPR and the General Data Protection Regulation (EU 2016/679):

• Performance of a contract (Art. 6(1)(b)) — order fulfilment, delivery, customer account management.
• Legitimate interests (Art. 6(1)(f)) — web analytics, fraud prevention, service improvement, legal claims.
• Consent (Art. 6(1)(a)) — direct marketing (newsletter), marketing cookies and tracking pixels (Meta Pixel, TikTok Pixel, Pinterest Tag).
• Legal obligation (Art. 6(1)(c)) — accounting and tax compliance.

4. Who we share data with

Your data may be shared with the following categories of recipients:

• Payment service providers — Shopify Payments, Stripe, PayPal, Klarna.
• Delivery carriers — DHL.
• Analytics and marketing providers — Google (Google Analytics), Meta Platforms (Facebook/Instagram Pixel), TikTok, Pinterest.
• IT infrastructure — Shopify (store hosting), e-mail service providers.
• Accountants and legal advisers.

We do not sell your personal data to third parties.

5. International data transfers

Some of our technology partners (Google, Meta, Shopify) may process data on servers located in the United States. Where this occurs, transfers are safeguarded by:

• An adequacy decision of the European Commission (EU–US Data Privacy Framework), or
• Standard Contractual Clauses (SCCs) approved by the European Commission.

6. Data retention

• Order data — retained for the period required by tax and accounting legislation (5 years from the end of the tax year).
• Account data — until account deletion or 3 years from last activity.
• Marketing data — until consent is withdrawn.
• Cookies — in accordance with the expiry periods shown in the table below (from session to a maximum of 13 months).

7. Cookies and similar technologies

Our store uses cookies and similar technologies (pixels, web beacons). We group them into the following categories:

Category	Provider	Purpose
Strictly necessary	Shopify	Shopping basket, session, security, login. No consent required.
Analytics	Google Analytics	Anonymous traffic analysis, visit sources, user behaviour. Activated after consent.
Marketing	Meta Pixel (Facebook / Instagram)	Remarketing, audience building, ad performance measurement. Activated after consent.
Marketing	TikTok Pixel	Remarketing, campaign optimisation. Activated after consent.
Marketing	Pinterest Tag	Remarketing, conversion measurement. Activated after consent.

You can manage your cookie preferences via the cookie banner displayed on your first visit. You may also change your browser's cookie settings at any time.

Strictly necessary cookies do not require consent and are essential for the store to function. Analytics and marketing cookies are activated only after you give your consent.

8. Your rights

Under the GDPR, you have the following rights:

• Right of access (Art. 15).
• Right to rectification (Art. 16).
• Right to erasure (Art. 17).
• Right to restriction of processing (Art. 18).
• Right to data portability (Art. 20).
• Right to object to processing based on legitimate interests (Art. 21).
• Right to withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please e-mail us at cs@minoti.com. We will respond within 30 days.

9. Right to lodge a complaint

You have the right to lodge a complaint with the relevant data protection authority. In Poland, this is:

President of the Personal Data Protection Office (UODO)
ul. Stawki 2, 00-193 Warsaw, Poland
uodo.gov.pl

If you are based in the UK, you may also contact the Information Commissioner's Office (ICO) at ico.org.uk.

10. Changes to this policy

We may update this Privacy Policy to reflect changes in our practices or applicable law. We will notify you of material changes by e-mail or a prominent notice on our website.

11. Contact us

Minoti Sp. z o. o.
ul. Grochowska 306/308, 03-844 Warsaw, Poland
E-mail: cs@minoti.com

We aim to respond to all enquiries within 24 hours on working days (Monday to Friday).

Minoti Sp. z o. o. · KRS 0000785854 · NIP: 1132998007