Privacy Policy

Last updated: September 19, 2026

This Privacy Policy explains how personal data is collected and used when you visit wantkowiak.com, contact us or place an order. We respect your privacy and process personal data in line with the EU General Data Protection Regulation (GDPR).

1. Who is responsible for your data

The data controller is:

Weronika Antkowiak (W. Antkowiak Atelier)
Gany 41, 22-335 Zolkiewka, Poland
Email: store.wantkowiak@gmail.com
Phone: (+48) 739 905 891

2. What data we collect and why

• Orders. Name, email address, delivery and billing address, phone number (if you give one) and the contents of your order. We use it to process and ship your order, take payment, send order updates and handle returns. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
• Customer account. Name, email address and password (stored in encrypted form), plus your saved addresses and order history. We use it so you can log in and see your orders. Legal basis: contract.
• Contact form and emails. Name, email address and the content of your message. We use it to answer your question. Legal basis: our legitimate interest in replying to enquiries (Art. 6(1)(f)), or contract if you are asking about an order.
• Spam protection. Our contact form and account registration form are protected by Google reCAPTCHA, which checks that a human is submitting the form. To do this it loads a Google script and receives technical data such as your IP address, browser and device information and cookies. Legal basis: our legitimate interest in keeping the website secure and free from spam (Art. 6(1)(f)).
• Accounting and legal obligations. Order and payment records that we must keep by law. Legal basis: legal obligation (Art. 6(1)(c)).
• Technical data and cookies. IP address, browser type, pages visited and similar data. Strictly necessary cookies keep the shop working (cart, login, security). Analytics and other optional cookies are used only if you accept them in the cookie banner. Legal basis: legitimate interest for necessary cookies, your consent (Art. 6(1)(a)) for optional ones. See our Cookie Policy.

We do not see or store your full card details. Payments are handled by PayPal (see below).

3. Who we share data with

We share data only with service providers who need it, and only as far as necessary:

• PayPal - payment processing (card and PayPal payments).
• Polish Post (Poczta Polska) - delivery of your order; we give it your name, address and, where required, your phone number or email.
• OVH - web hosting of this website.
• Google - email delivery of our messages to you (Gmail) and, if you consent to analytics cookies, website analytics (Google Analytics).
• Google reCAPTCHA - spam and abuse protection on the contact and registration forms (see "Spam protection" above and Google's Privacy Policy).
• Public authorities, where the law requires it.

We do not sell your personal data.

4. Transfers outside the EU/EEA

Some providers (for example PayPal and Google) may process data outside the European Economic Area, including in the United States. In that case the transfer relies on safeguards required by GDPR, such as the EU-US Data Privacy Framework or standard contractual clauses. Orders shipped to countries outside the EU necessarily involve sending your delivery details to the carrier there.

5. How long we keep data

• Order and accounting records: for as long as the law requires (in Poland generally 5 years from the end of the tax year).
• Customer account: until you ask us to delete it.
• Contact messages: until your enquiry is resolved and for a reasonable period afterwards.
• Cookies: for the periods described in the Cookie Policy.

6. Your rights

You have the right to: access your data; correct it; have it deleted; restrict or object to its processing; receive it in a portable format; and withdraw your consent at any time (this does not affect processing done before). To use these rights, write to store.wantkowiak@gmail.com. You also have the right to lodge a complaint with a supervisory authority; in Poland this is the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl.

7. Providing data is voluntary

You are not required to give us your data, but without the data needed for an order (name, address, email) we cannot process or deliver it. We do not make decisions about you by automated means and we do not profile you.

8. Children

This website is not intended for children under 16 and we do not knowingly collect their data.

9. Security

The website uses an encrypted (HTTPS) connection and we take reasonable technical and organisational measures to protect your data.

10. Changes to this policy

We may update this Privacy Policy from time to time. The current version is always available on this page, with the date of the last update shown at the top.

11. Contact

Questions about your data? Email us at store.wantkowiak@gmail.com.