Privacy Policy

Last Updated: March 19, 2025

General Information

Personal data is processed in accordance with applicable law, particularly with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (the “GDPR”).

The controller of your personal data is Amber 77 Anna Piwoni-Piórewicz, ul. Limbowa 9, 81-520 Gdynia, Poland, e-mail: shop@amber77.com, VAT no. PL9581531671, REGON 388746641.

Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes to our practices or for other operational, legal, or regulatory reasons. The updated Privacy Policy will be posted on our Website, the “Last Updated” date will be revised, and we will take any other steps required by law.

Collection and Use of User’s Personal Information

To provide our Services, we collect personal information about users from various sources described below. The personal information we collect and use depends on how you interact with us.

In addition to the specific uses outlined below, we may use your personal information to communicate with you, provide or improve our Services, comply with legal obligations, enforce any applicable terms of service, and protect the Services, our rights, and the rights of our users or others.

Information Collected Directly from You

Information you provide directly through our Services may include:

• Contact Information, such as your name, address, phone number, and email address.
• Order Information, such as your name, billing address, shipping address, payment confirmation, email address, and phone number.
• Account Information, such as your username, password, security questions, and other information used for account security.
• Customer Service Information, including details you provide when communicating with us, for example, by sending a message via the Services.

Certain features of the Services may require you to provide specific information directly. You are not required to provide such information, but it may limit your ability to use or access these features.

Usage Information Collection

We may also automatically collect certain information about your interaction with the Services. This may include the use of cookies, pixels, and similar technologies. Usage Data may include details about your access to the Website and your account, such as device information, browser information, network connection details, IP address, and interactions with the Services.

Information Obtained from Third Parties

We may also obtain information about you from third parties, including vendors and service providers who collect data on our behalf, such as:

• Companies supporting our Website and Services, e.g., Shopify.
• Payment processors collecting payment information (e.g., bank account, credit or debit card, or billing address).
• Marketing partners, e.g., Facebook, Google.

All information obtained from third parties will be processed in accordance with this Privacy Policy.

Use of Personal Information

Providing Products and Services. We use your personal information to process payments, fulfill orders, send you notifications related to your account, purchases, returns, or exchanges, create and manage your account, and provide our Services.

Marketing and Advertising. We may use your personal information for marketing and promotional purposes, including tailoring Services and advertisements on our Website and other websites. If you reside in the European Economic Area (EEA), the legal basis for such processing is our legitimate interest in marketing our products, as per Article 6(1)(f) of the GDPR.

Security and Fraud Prevention. We use your personal information to detect, investigate, or take action regarding potential fraud, illegal activities, or security issues. If you use our Services and create an account, you are responsible for safeguarding your account credentials. We strongly recommend that you do not share your login details. If you suspect your account has been compromised, contact us immediately. If you are an EEA resident, the legal basis is our legitimate interest in ensuring the security of our Website and Services under Article 6(1)(f) GDPR.

User Communication and Service Improvement. We use your personal information to provide customer support and improve our Services. It is in our legitimate interest to respond to your needs, deliver effective services, and maintain business relationships, pursuant to Article 6(1)(f) GDPR.

Cookies

Our Website uses cookies. More information about the cookies used by Shopify in connection with our store can be found at: https://www.shopify.com/legal/cookies. We use cookies to provide and improve the Website and Services (including remembering your actions and preferences), conduct analytics, and better understand your interactions with the Services (in our legitimate interest in administering and optimizing the Services).

Most browsers automatically accept cookies, but you can configure your browser to reject them. Blocking cookies may impair the functionality or availability of some Services. Additionally, blocking cookies may not completely prevent us from sharing information with third parties, such as advertising partners.

Disclosure of Personal Information

Under certain circumstances, we may disclose your personal information to third parties to fulfill a contract, for legal compliance, or for other reasons subject to this Privacy Policy. These circumstances may include sharing information with:

• Vendors or third parties providing services on our behalf (e.g., IT services, payment processing, data analytics, cloud storage, fulfillment, and shipping).
• Business and marketing partners to provide services and display advertisements.
• In connection with a business event, e.g., merger or bankruptcy, or to comply with legal obligations.

We do not use or disclose your sensitive personal information without your consent or for inferring characteristics about you.

Third-Party Websites and Links

Our Website may contain links to websites or online platforms operated by third parties. If you use these links, please review their respective privacy and security policies and terms.

Your Rights

These rights are not absolute and may apply only under certain circumstances. If permitted by law, we may deny your request.

• Right to Know / Access: You have the right to request access to your personal information held by us, including how it is used and shared.
• Right to Erasure: You may request that we delete your personal information.
• Right to Rectification: You may request correction of inaccurate personal information we hold.
• Right to Data Portability: You have the right to obtain a copy of your personal data and request its transfer to a third party, under certain conditions and exceptions.
• Restriction of Processing: You may request us to stop or restrict processing your personal information.
• Withdrawal of Consent: Where consent is required for processing, you may have the right to withdraw your consent.

Complaints

If you have complaints regarding how we process your personal data, please contact us using the contact details below. If you are not satisfied with our response, depending on your location, you may have the right to appeal or lodge a complaint with the appropriate data protection authority. A list of supervisory authorities in the EEA can be found here.

Contact

If you have any questions about our privacy practices or wish to exercise your rights, please contact us via email at shop@amber77.com or by mail at Amber 77, Limbowa 9, Gdynia, 81-520, Poland.

In accordance with applicable data protection laws, we are the controller of your personal information.