PRIVACY POLICY

PRIVACY POLICY

Last updated: 20 August 2026

This Privacy Policy explains how Bambolina collects, uses, stores and protects personal data when you visit or make a purchase from bambolina.pl, contact us, create an account, subscribe to marketing communications or otherwise interact with our Store.

This Privacy Policy should be read together with our Terms & Conditions and Cookie Policy.

1. DATA CONTROLLER

The controller of your personal data is:

BAMBOLINA 
ul. Rumiankowa 64
59-220 Legnica
Poland

E-mail: bambolina@bambolina.pl

Hereinafter referred to as “Bambolina”, “we”, “us” or “the Store”.

For matters relating to privacy or personal data, you may contact us at:

bambolina@bambolina.pl

2. APPLICABLE LAW

We process personal data in accordance with applicable data protection laws, including:

  • Regulation (EU) 2016/679 – General Data Protection Regulation (GDPR),

  • the Polish Act of 10 May 2018 on Personal Data Protection,

  • applicable Polish and European Union electronic communications and consumer protection legislation.

3. WHAT PERSONAL DATA WE COLLECT

Depending on how you use the Store, we may process the following categories of personal data.

Order and customer data

When you place an order, we may collect:

  • first and last name,

  • billing address,

  • shipping address,

  • e-mail address,

  • telephone number,

  • order number,

  • Products ordered,

  • selected sizes, colours and variants,

  • order value,

  • shipping method,

  • payment status,

  • information necessary to issue invoices or other accounting documents,

  • company name and tax identification number where applicable.

Payment information

Payments are processed through payment service providers made available through Shopify Checkout.

Depending on the selected method, these may include Shopify Payments and other authorised payment providers.

Bambolina does not normally receive or store complete payment card numbers.

We may receive information concerning:

  • payment status,

  • payment method,

  • transaction identifier,

  • amount paid,

  • refunds,

  • payment confirmation.

Customer account information

If you create a customer account, we may process:

  • name,

  • e-mail address,

  • account details,

  • order history,

  • saved addresses,

  • account activity.

Communication data

When you contact us by e-mail, contact form, social media or another communication channel, we may process:

  • your contact details,

  • content of correspondence,

  • order information,

  • photographs or files you send us,

  • information necessary to respond to your enquiry or resolve a problem.

Marketing data

If you subscribe to marketing communications or otherwise lawfully receive them, we may process:

  • e-mail address,

  • marketing preferences,

  • consent information,

  • date and method of subscription,

  • information concerning interactions with marketing communications where permitted by law.

Technical and usage data

When you use the Store, certain information may be collected automatically, including:

  • IP address,

  • device type,

  • browser type,

  • operating system,

  • approximate location derived from technical data,

  • pages viewed,

  • time spent on pages,

  • referring website,

  • interactions with the Store,

  • shopping cart activity,

  • cookie and similar technology identifiers.

The use of non-essential cookies and similar technologies is governed by our Cookie Policy and your consent choices where consent is required.

4. HOW WE USE PERSONAL DATA

We may process personal data for the following purposes.

Processing and fulfilling orders

We process personal data to:

  • accept and manage orders,

  • process payments,

  • prepare Products,

  • deliver Products,

  • communicate regarding orders,

  • process returns,

  • issue refunds,

  • provide customer service.

Legal basis: performance of a contract or taking steps at your request prior to entering into a contract.

Accounting and tax obligations

We process information contained in invoices, accounting documentation and transaction records where required by law.

Legal basis: compliance with legal obligations.

Complaints, returns and legal claims

We may process personal data to:

  • handle complaints,

  • process statutory withdrawals,

  • investigate delivery issues,

  • establish, pursue or defend legal claims.

Legal basis: compliance with legal obligations and/or our legitimate interest in protecting and exercising legal rights.

Customer service

We process information provided when you contact us to answer questions and provide support.

Legal basis: performance of a contract, steps taken at your request before entering into a contract and/or our legitimate interest in providing customer service.

Fraud prevention and security

We may process information where necessary to:

  • detect fraudulent transactions,

  • prevent misuse of the Store,

  • protect customer accounts,

  • maintain the security of our website and systems.

Legal basis: our legitimate interest in protecting our business, Customers and systems.

Analytics and improvement of the Store

Where permitted by applicable law and subject to consent where required, we may use analytics and similar technologies to understand:

  • how visitors use the Store,

  • which Products and pages are popular,

  • how Customers navigate the Store,

  • how we can improve usability and performance.

Legal basis: consent where required and, in appropriate cases, our legitimate interest where such processing is permitted without consent.

Marketing communications

Where legally permitted, we may send information concerning:

  • Bambolina Products,

  • new collections,

  • product launches,

  • promotions,

  • news and other marketing communications.

Where consent is required, marketing communications are sent only after obtaining appropriate consent.

You may withdraw your consent or unsubscribe from marketing communications at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

Advertising and marketing measurement

Where you have provided the required consent, information about your use of the Store may be used for:

  • measuring advertising effectiveness,

  • creating advertising audiences,

  • showing more relevant advertising,

  • analysing marketing campaign performance.

Depending on the technologies enabled in the Store, this may involve services provided by Shopify, Meta, Google or other advertising and analytics providers.

Non-essential advertising technologies are used subject to your consent where required.

5. SHOPIFY

Our Store is hosted on the Shopify e-commerce platform.

Shopify provides the technical infrastructure that allows us to operate the Store, process orders, manage Customers, provide checkout services and perform related e-commerce functions.

In connection with these services, Shopify may process personal data on our behalf as a processor or service provider.

For certain features or services, Shopify may process information in another capacity as described in Shopify's applicable privacy documentation.

Personal data processed through Shopify may be stored or processed in countries outside the European Economic Area.

Where required, such transfers are subject to appropriate legal safeguards.

6. PAYMENT SERVICE PROVIDERS

Payment information is processed by the payment provider selected during checkout.

Depending on available payment methods, providers may include:

  • Shopify Payments,

  • payment card networks,

  • banks,

  • Apple Pay,

  • Google Pay,

  • BLIK,

  • Przelewy24,

  • other payment providers available through Shopify Checkout.

These entities may process personal data as independent controllers or processors in accordance with their respective privacy policies and applicable law.

Bambolina receives only the information necessary to confirm and manage the transaction.

7. SHIPPING AND DELIVERY PROVIDERS

To deliver your order, we may provide necessary information to shipping and logistics providers.

Depending on destination and selected delivery method, these may include:

  • InPost,

  • FedEx,

  • postal operators,

  • other courier and logistics providers.

Information shared may include:

  • name,

  • delivery address,

  • telephone number,

  • e-mail address,

  • order or shipment identifier.

Only information reasonably necessary for delivery is shared.

8. ACCOUNTING, LEGAL AND PROFESSIONAL SERVICES

Where necessary, personal data may be made available to:

  • accounting providers,

  • tax advisers,

  • legal advisers,

  • IT providers,

  • hosting and technical service providers,

  • authorities or courts where required by law.

Such access is limited to what is necessary for the relevant purpose.

9. NEWSLETTER AND MARKETING PROVIDERS

If you subscribe to marketing communications, your data may be processed using marketing services integrated with Shopify or other service providers used by Bambolina.

Your marketing preferences and consent status may be stored to ensure that your choices are respected.

You can unsubscribe at any time using the unsubscribe link provided in marketing e-mails or by contacting:

bambolina@bambolina.pl

10. SOCIAL MEDIA

Bambolina may operate profiles on social media platforms such as Instagram or Facebook.

If you interact with Bambolina through such platforms, the platform provider may independently process personal data in accordance with its own privacy policy.

If you contact us through social media, we may process the information you provide to respond to your message and manage the relationship with you.

11. COOKIES AND SIMILAR TECHNOLOGIES

The Store uses cookies and similar technologies.

Some cookies are necessary for the Store to function and may be used without consent where permitted by law.

Other cookies, including analytics or advertising cookies, are activated subject to consent where legally required.

Detailed information is available in our separate Cookie Policy.

You can manage your choices through the cookie consent banner available on the Store.

12. INTERNATIONAL DATA TRANSFERS

Some service providers used by Bambolina, including Shopify and certain technology, analytics or advertising providers, may process personal data outside Poland or the European Economic Area.

Where personal data are transferred outside the European Economic Area, we seek to ensure that appropriate safeguards required under GDPR are used.

Such safeguards may include:

  • an adequacy decision of the European Commission,

  • Standard Contractual Clauses,

  • another transfer mechanism permitted under applicable law.

13. HOW LONG WE KEEP PERSONAL DATA

Personal data are retained only for as long as reasonably necessary for the purpose for which they were collected and in accordance with legal requirements.

Retention periods may vary depending on the type of information.

In particular:

Order and contract data may be retained for the period necessary to perform the contract and until relevant legal claims become time-barred.

Accounting and tax records are retained for periods required by applicable accounting and tax legislation.

Complaint and return information may be retained for the period necessary to resolve the matter and defend or pursue potential claims.

Marketing data are processed until consent is withdrawn, an objection is made or the data are no longer necessary for marketing purposes, subject to retention of limited information necessary to document consent or objection.

Customer account information may be processed while the account remains active and thereafter where retention is required or justified by law.

14. YOUR RIGHTS UNDER GDPR

Subject to the conditions provided by law, you may have the right to:

  • access your personal data,

  • obtain a copy of your personal data,

  • correct inaccurate personal data,

  • request completion of incomplete data,

  • request deletion of personal data,

  • request restriction of processing,

  • object to certain processing,

  • receive personal data in a structured, commonly used and machine-readable format where the right to data portability applies,

  • withdraw consent at any time where processing is based on consent.

Where processing is based on our legitimate interests, you may have the right to object for reasons relating to your particular situation.

Where personal data are processed for direct marketing purposes, you have the right to object to such processing at any time.

15. HOW TO EXERCISE YOUR RIGHTS

To exercise your privacy rights, contact:

bambolina@bambolina.pl

We may need to verify your identity before fulfilling certain requests.

We will respond within the periods required by applicable law.

16. RIGHT TO LODGE A COMPLAINT

If you believe that your personal data are being processed unlawfully, you have the right to lodge a complaint with the competent supervisory authority.

In Poland, the supervisory authority is:

President of the Personal Data Protection Office
(Prezes Urzędu Ochrony Danych Osobowych – UODO)

You may also have the right to contact the data protection authority in another EU or EEA country where applicable.

17. AUTOMATED DECISION-MAKING

Bambolina does not make decisions producing legal effects concerning Customers solely through automated processing unless such processing is lawfully implemented and appropriate information is provided.

Certain third-party services used for fraud prevention, payment security, advertising or personalisation may use automated systems in accordance with their own policies and applicable law.

18. CHILDREN'S PERSONAL DATA

The Store is intended for purchases made by adults.

We do not knowingly request children to create purchase contracts independently where they do not have legal capacity to do so.

Where information concerning a child is necessary for selecting the appropriate Product, such information should be provided by the child's parent or legal guardian.

19. DATA SECURITY

We use reasonable technical and organisational measures designed to protect personal data against:

  • unauthorised access,

  • accidental loss,

  • unlawful disclosure,

  • alteration,

  • destruction,

  • misuse.

Our Store also benefits from security measures provided by Shopify and other professional service providers used to operate the Store.

No method of electronic transmission or storage can guarantee absolute security.

20. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy where necessary due to:

  • changes in applicable law,

  • changes in the Store,

  • introduction of new services or technologies,

  • changes in the way personal data are processed.

The current version will always be published on bambolina.pl.

Where legally required, we will provide additional notice of significant changes.

21. CONTACT

Questions concerning this Privacy Policy or the processing of personal data may be sent to:

BAMBOLINA 
ul. Rumiankowa 64
59-220 Legnica
Poland

E-mail: bambolina@bambolina.pl