Legal

Privacy policy

Last updated: 19 October 2026

Who is responsible

The controller for personal data collected on boxandbowco.com is BRUKO COMMERCE SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, ul. Grochowska 56, 02-282 Warsaw, Poland, support@boxandbowco.com.

What we collect and why

Orders: name, billing and delivery address, email, phone (optional) and order details — to fulfil the contract (Art. 6(1)(b) GDPR) and to meet tax and accounting obligations (Art. 6(1)(c)).
Account: if you create one, your email and password (stored encrypted) and order history — to provide the account (Art. 6(1)(b)).
Contact form and emails: your name, email and message — to answer you (Art. 6(1)(b) or (f)).
Newsletter: your email address, only with your consent (Art. 6(1)(a)); you can unsubscribe at any time.
Usage statistics: pages viewed, how you reached the shop, device and browser type and approximate location, collected with Google Analytics — to understand and improve the shop (Art. 6(1)(f)). You can opt out at any time under Cookie settings.
Technical data: IP address and browser information in server logs, kept for security for up to 30 days (Art. 6(1)(f)).

Who receives it

We share data only with the providers who help us run the shop, under data-processing agreements: our hosting provider, our email provider, the payment provider (who processes your card payment directly), and the fulfilment and delivery partners who pack and deliver your order. Google provides our website analytics. We do not sell personal data, and we do not use advertising cookies.

How long we keep it

Order and invoice data are kept for the period required by tax law (usually up to 10 years). Contact messages are kept for up to two years. Newsletter data is kept until you unsubscribe.

Your rights

You have the right to access, rectify, erase, restrict and port your data, to object to processing based on legitimate interests, and to withdraw consent at any time. Write to us to exercise them. You can also complain to your data protection supervisory authority.

Cookies