PRIVACY POLICY

Last updated: October 5, 2026

1. DATA CONTROLLER

The controller of your personal data is:

EPSIGON – Paweł Skrzypiec
Paszyn 72
33-326 Mogilno
Poland
Email: epsigon.art@gmail.com

If you have any questions regarding the processing of your personal data, you can contact us at the email address above.

2. WHAT PERSONAL DATA WE COLLECT

Depending on how you use our website and shop, we may collect the following personal data:

– first and last name,
– billing and shipping address,
– email address,
– telephone number,
– order and transaction information,
– information necessary to process payments,
– information you provide when contacting us,
– technical information such as IP address, browser type and device information,
– information collected through cookies and similar technologies.

We only collect information that is necessary for the purposes described in this Privacy Policy.

3. HOW WE USE YOUR PERSONAL DATA

Your personal data may be used to:

– process and fulfil your orders,
– arrange delivery of purchased products,
– process payments,
– communicate with you regarding your order,
– respond to enquiries and customer service requests,
– handle returns, complaints and refunds,
– comply with legal, tax and accounting obligations,
– maintain the security of our website and prevent fraud or abuse,
– improve the functionality and performance of our website,
– send marketing communications where you have provided the required consent.

4. LEGAL BASIS FOR PROCESSING

We process your personal data on the following legal bases:

– performance of a contract – when processing is necessary to fulfil your order;
– legal obligation – when we are required to retain or process information under applicable law;
– legitimate interests – for example, website security, fraud prevention, responding to enquiries and protecting our legal rights;
– consent – where processing requires your consent, such as certain marketing or non-essential cookies.

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

5. PAYMENTS

Payments are processed through PayPal and Paynow, a payment service provided by mBank, depending on the payment method selected by the customer at checkout.

These payment providers may process personal and transaction data necessary to complete the payment in accordance with their own privacy policies and terms.

We do not store full payment card details on our website. Payment card and other sensitive payment information is processed directly by the relevant payment provider.

6. RECIPIENTS OF PERSONAL DATA

We may share personal data with trusted service providers where this is necessary to operate our website and fulfil your order.

Depending on the services used by the shop, these may include:

– PayPal and Paynow (mBank) for payment processing,
– shipping and delivery companies,
– website hosting and technical service providers,
– accounting and legal service providers,
– IT and security providers,
– public authorities where disclosure is required by law.

We only provide third parties with the information necessary for them to perform their services.

7. INTERNATIONAL TRANSFERS

Some service providers may process personal data outside the European Economic Area (EEA).

Where personal data is transferred outside the EEA, we take appropriate measures required by applicable data protection law to ensure that your personal data remains protected.

8. HOW LONG WE KEEP YOUR DATA

We retain personal data only for as long as necessary for the purposes for which it was collected.

Order and transaction information may be retained for the period required by applicable tax, accounting and legal regulations.

Information processed on the basis of consent is retained until you withdraw your consent, unless there is another lawful basis for continued processing.

9. YOUR RIGHTS

Under applicable data protection law, including the GDPR, you may have the right to:

– access your personal data,
– request correction of inaccurate or incomplete data,
– request deletion of your personal data where legally applicable,
– request restriction of processing,
– object to certain processing,
– request data portability where applicable,
– withdraw consent where processing is based on consent,
– lodge a complaint with a data protection supervisory authority.

These rights may be subject to legal limitations depending on the circumstances and the applicable law.

10. RIGHT TO LODGE A COMPLAINT

If you believe that your personal data is being processed in violation of applicable data protection law, you have the right to lodge a complaint with the competent supervisory authority.

For Poland, the supervisory authority is:

President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych)
ul. Stanisława Moniuszki 1A
00-014 Warsaw
Poland

You may first contact us directly so that we can attempt to resolve your concern. You nevertheless retain the right to lodge a complaint with the supervisory authority.

11. COOKIES

Our website uses cookies and similar technologies.

Cookies may be used to:

– ensure the proper operation of the website,
– remember shopping cart and checkout information,
– maintain user preferences,
– improve website performance,
– provide security,
– analyse website traffic where applicable.

You can control or disable cookies through your browser settings. Disabling certain cookies may affect the functionality of the website.

Where legally required, non-essential cookies will only be used after obtaining the appropriate consent.

12. WEBSITE SECURITY

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

13. CHILDREN’S PRIVACY

Our website is not directed specifically at children, and we do not knowingly collect personal data from children without appropriate legal grounds or parental involvement where required by law.

14. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our services, technology or applicable legal requirements.

The latest version will always be published on this page, together with the date of the most recent update.

15. CONTACT

If you have any questions about this Privacy Policy or the processing of your personal data, please contact:

EPSIGON – Paweł Skrzypiec
Paszyn 72
33-326 Mogilno
Poland
Email: epsigon.art@gmail.com