PRIVACY POLICY

Effective date: 12-May-2026

Updated on: 12-May-2026

This Privacy Policy explains the policies of https://www.garbaruk.com/ regarding the collection, use, disclosure, and protection of personal data collected when you access or use our website and services (the "Service").

By using our Service, you consent to the collection and use of your personal data in accordance with this Privacy Policy. Please do not use the Service if you do not agree with the terms of this Privacy Policy.

This Privacy Policy has been created with the help of CookieScript Privacy Policy Generator and further customized for our business operations.

WHAT INFORMATION DO WE COLLECT, FOR WHAT PURPOSES, AND ON WHAT LEGAL BASIS

The legal bases used in this Privacy Policy are understood as follows:

Legitimate Interest: the interest of the Company or a third party, provided that such interest is not overridden by your fundamental rights and freedoms.
Contract Performance: processing your personal data where it is necessary for the performance of a contract to which you are a party or in order to take steps prior to entering into a contract.
Legal Obligations: processing your personal data where it is necessary for compliance with legal or regulatory obligations applicable to us.
Consent: your freely given, specific, informed, and unambiguous agreement to the processing of your personal data for a particular purpose.

PERSONAL IDENTIFICATION INFORMATION

What We Collect:

Full Name
Email Address
Mobile Phone Number

Purpose

To process and fulfill orders, communicate with customers, provide customer support, and maintain customer accounts.

Retention Period

3650 days

Legal Basis

Contract Performance

CONTACT INFORMATION

What We Collect:

Billing Address
Shipping Address

Purpose

To ensure accurate order fulfillment, shipping, invoicing, and account-related communication.

Retention Period

3650 days

Legal Basis

Contract Performance
Legal Obligations

COMMUNICATION DATA

What We Collect:

Customer Support or Inquiry Messages
Chat Logs
Email Correspondence

Purpose

To provide customer support, maintain records of correspondence, and improve our services.

Retention Period

3650 days

Legal Basis

Legitimate Interest

ONLINE IDENTIFIERS AND WEBSITE USAGE DATA

What We Collect:

IP Address
Browser Information
Device Information
Cookie Data
Website Usage Data

Purpose

To ensure website functionality, analyze website traffic, improve user experience, maintain website security, and measure marketing performance.

Retention Period

365 days

Legal Basis

Legitimate Interest
Consent (where required by law)

COOKIES AND TRACKING TECHNOLOGIES

We use cookies and similar technologies for website functionality, analytics, and marketing purposes. Certain non-essential cookies, including analytics and marketing cookies, are used only based on your consent preferences.

You may manage or withdraw your consent preferences at any time through the cookie consent banner available on our website.

THIRD-PARTY SERVICE PROVIDERS

We may share personal data with trusted third-party service providers that support our business operations, including payment processing, shipping, analytics, customer support, and website functionality.

These providers may include:

PayPal
Braintree
FedEx
DHL
Google Analytics
Freshdesk

Such providers process personal data only as necessary to provide their services to us and are contractually obligated to protect personal data appropriately.

HOW DO WE OBTAIN YOUR PERSONAL DATA

We collect information you provide directly to us when you:

Fill in forms
Place orders
Use our Services
Correspond with us
Contact customer support

We may also automatically collect certain technical and usage-related information through cookies and analytics tools when you use our website.

REQUIREMENTS TO PROVIDE PERSONAL DATA

In certain cases, the provision of personal data is a contractual or legal requirement necessary to enter into or perform a contract, including order fulfillment, invoicing, shipping, and compliance with applicable accounting and tax regulations.

Failure to provide certain personal data may prevent us from providing requested products or services.

INTERNATIONAL DATA TRANSFERS

Some of our third-party service providers may process personal data outside the European Economic Area (EEA), including in the United States.

Where such transfers occur, we implement appropriate safeguards in accordance with applicable data protection laws, including the use of Standard Contractual Clauses approved by the European Commission or reliance on adequacy decisions where applicable.

DATA SUBJECT RIGHTS

You have the following rights regarding your personal data:

Right of Access
Right to Rectification
Right to Erasure
Right to Restrict Processing
Right to Data Portability
Right to Object
Right to be Informed

To exercise these rights, please contact us at: info@garbaruk.com

We may request verification of your identity before processing your request.

Requests will be handled in accordance with applicable GDPR requirements and statutory time limits.

WITHDRAWAL OF CONSENT

Where processing is based on consent, you have the right to withdraw your consent at any time.

You may adjust or withdraw cookie consent preferences directly through the consent banner available on our website.

Withdrawal of consent does not affect the lawfulness of processing carried out before such withdrawal.

RIGHT TO LODGE A COMPLAINT

You have the right to lodge a complaint with the competent supervisory authority if you believe your personal data is processed unlawfully.

In Poland, the competent authority is:

Personal Data Protection Office (UODO)

https://uodo.gov.pl/

SECURITY

We implement reasonable technical, organizational, and administrative security measures designed to protect personal data against unauthorized access, disclosure, alteration, or destruction.

Access to personal data is limited to authorized personnel and trusted service providers who require such access for legitimate business purposes.

While we strive to use commercially acceptable means to protect personal data, no method of electronic storage or transmission over the Internet is completely secure.