Privacy Policy

This is an English translation. For sales to consumers in Poland, the Polish privacy policy is legally binding. EU consumers keep the protection of their home-country mandatory rules.

1. Data controller

The controller of personal data collected via the online shop teddydogsshop.com (https://teddydogsshop.com) is ILONA SAMEK, address: ul. Parkowa 47a, 71-220 Bezrzecze, tax ID (NIP): 8551352265.

Privacy contact: contact@teddydogsshop.com.

2. What data we process and why

  • Orders (guest checkout only): name, delivery address, email, phone — to conclude and perform the sales contract, payments, shipping, returns and complaints.
  • Contact form: name, email, message — to reply to your enquiry.
  • Technical data: IP address, browser type, strictly necessary cookies for the cart and session — to run and secure the shop.

We do not use profiling that produces legal effects. Visit statistics (Google Analytics 4) and advertising (the Meta pixel on Facebook and Instagram) run only after you accept them in the banner. Until that tool’s ID is saved in the shop, consent alone does not send data to the provider.

3. Legal bases (GDPR)

  • Article 6(1)(b) GDPR — performance of a contract or steps prior to a contract;
  • Article 6(1)(c) GDPR — legal obligations (accounting, tax, consumer rights);
  • Article 6(1)(f) GDPR — legitimate interests (enquiries, shop security, establishing or defending claims);
  • Article 6(1)(a) GDPR: consent for statistics and marketing cookies. You can withdraw it with the “Cookies” link in the footer.

Providing order data is voluntary but necessary to fulfil the sale. Without it we cannot ship or contact you about the order.

4. Recipients

  • payment providers: Przelewy24, Stripe, PayPal;
  • carriers and shipping brokers (e.g. Furgonetka, InPost, DPD, DHL);
  • the shop hosting provider;
  • Google Ireland Limited, if you consent to statistics (Google Analytics 4);
  • Meta Platforms Ireland Limited, if you consent to advertising (Facebook and Instagram pixel);
  • authorities where required by law.

5. Transfers outside the EEA

Stripe and PayPal are based in the United States. Transfers outside the European Economic Area rely on the European Commission’s standard contractual clauses or other GDPR mechanisms. Przelewy24 processes data mainly in the EEA.

If you consent to statistics or advertising, Google and Meta may also process data outside the EEA, including in the United States, under the European Commission’s standard contractual clauses.

6. Retention

  • order data — for the period required by tax and accounting law (typically 5 years from the end of the relevant year);
  • contact-form correspondence — until the matter is closed and any related claims become time-barred;
  • session cookies — until the browser session ends or according to your browser settings;
  • the record of your cookie choice: for 6 months;
  • statistics and marketing cookies: only after consent, until you withdraw it or delete cookies in your browser.

7. Your rights

You have the right of access, rectification, erasure, restriction, data portability, objection to processing based on legitimate interests, and to lodge a complaint with a supervisory authority. In Poland: President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl. You may also contact the authority in your EU country of residence.

Requests: contact@teddydogsshop.com.

8. Cookies

A banner at the bottom of the page asks which cookies we may set. We store that choice for 6 months. You can change it with the “Cookies” link in the footer, or by clearing cookies in your browser.

Necessary. Cart, WordPress and WooCommerce session, language and currency, form security, and the record of your choice. The shop cannot work without them. This category stays on.

Statistics. Google Analytics 4 shows how many people visited, which country they came from, and whether they bought. It runs only after consent, and only once the measurement ID is saved in the shop.

Marketing. The Meta pixel measures visits from Facebook and Instagram ads. It runs only after consent, and only once the pixel ID is saved in the shop.

If a Google Tag Manager container is saved in the shop, statistics and advertising load through it, still only after consent to one of those categories. We do not sell data.

9. Changes

The current version is always published at this URL. Material changes will be announced on the shop website.