Privacy policy

Privacy policy

1. Introduction

NOCTIS ("we," "us," "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website, place an order, or otherwise interact with our services.

We act as the data controller for the purposes of the EU General Data Protection Regulation (GDPR) and applicable Polish data protection law. If you have questions about this policy, please contact us at alexsandr.pokr59@gmail.com.

2. Information We Collect

2.1 Information You Provide to Us

When you interact with our site, you may voluntarily provide:

  • Identity data: first name, last name
  • Contact data: email address, phone number, delivery address, billing address
  • Financial data: payment card details (processed securely by our payment provider — we do not store full card numbers)
  • Transaction data: order history, purchases, and returns
  • Account data: username, password, and preferences if you create an account
  • Communication data: any messages you send us, including emails and feedback or reviews

2.2 Information Collected Automatically

When you visit our site, we automatically collect, through cookies and similar technologies:

  • Device data: IP address, browser type/version, operating system, device type, screen resolution
  • Usage data: pages visited, time spent on the site, click patterns, referral URLs, visit dates/times
  • Location data: approximate location derived from your IP address

2.3 Information from Third Parties

We may receive information about you from our e-commerce platform provider (Shopify), payment processors, delivery partners, and analytics services.

3. How We Use Your Information

We process your personal data for the following purposes, on the legal bases indicated:

  • To fulfil your orders and process payments — necessary to perform our contract with you
  • To communicate with you about orders, deliveries, returns, and support requests — contractual necessity
  • To send marketing communications (new drops, promotions) — based on your consent, which you can withdraw at any time
  • To improve our site and services by analysing usage patterns — based on our legitimate interest
  • To prevent fraud and protect the security of our site and business — based on legitimate interest and legal obligation
  • To comply with legal obligations, including tax and accounting requirements under Polish/EU law

4. Cookies and Tracking Technologies

Our site uses cookies and similar technologies to improve your browsing experience. On your first visit, you will see a cookie banner allowing you to accept or manage cookies.

4.1 Types of Cookies We Use

  • Strictly necessary cookies: essential for site functionality, including the shopping cart and checkout. Cannot be disabled.
  • Performance/analytics cookies: help us understand how visitors use the site, using anonymised usage data.
  • Functionality cookies: remember your preferences (e.g. language) for a more personalised experience.
  • Marketing/advertising cookies: used to deliver relevant ads and measure campaign effectiveness.

4.2 Managing Cookies

You can manage or delete cookies through your browser settings at any time. Disabling certain cookies may affect site functionality.

5. How We Share Your Information

We do not sell your personal data. We may share it with:

  • Service providers: Shopify (e-commerce platform), payment processors, delivery partners, email providers, and analytics providers, acting on our instructions
  • Professional advisors: lawyers, accountants, and insurers, where necessary
  • Authorities: where required by law or to protect our legal rights
  • Business transfers: in connection with a merger, acquisition, or sale of company assets

6. International Data Transfers

Some of our service providers (such as Shopify) may process your data outside the European Economic Area. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, or transfers to countries benefiting from an EU adequacy decision.

7. Data Retention

We retain personal data only as long as necessary for the purposes it was collected, including to satisfy legal, tax, or accounting obligations under Polish law. Typical retention periods:

  • Order and transaction data: retained in line with Polish tax and accounting record-keeping requirements
  • Account data: retained while your account is active; deleted on request, subject to legal retention obligations
  • Marketing data: retained until you unsubscribe or withdraw consent
  • Cookie data: varies by cookie type, typically from session duration up to 2 years

8. Your Rights

Under the GDPR, you have the right to:

  • Access — request a copy of the personal data we hold about you
  • Rectification — request correction of inaccurate or incomplete data
  • Erasure — request deletion of your data in certain circumstances
  • Restrict processing — request that we limit how we use your data
  • Data portability — receive your data in a structured, machine-readable format
  • Object — to processing based on legitimate interest or for direct marketing
  • Withdraw consent — at any time, without affecting the lawfulness of prior processing

To exercise these rights, email us at alexsandr.pokr59@gmail.com. We will respond within one month. If you are not satisfied with our response, you have the right to lodge a complaint with the Polish supervisory authority:

Prezes Urzędu Ochrony Danych Osobowych (UODO) ul. Stawki 2, 00-193 Warszawa www.uodo.gov.pl

9. Data Security

We apply appropriate technical and organisational measures to protect your data against unauthorised access, alteration, disclosure, or destruction — including encrypted payment transfers, secure hosting via Shopify's infrastructure, and restricted access on a need-to-know basis. No method of internet transmission is 100% secure, and we cannot guarantee absolute security.

10. Children's Privacy

Our site and services are not directed at individuals under 16 years of age, in line with the age threshold applicable in Poland under the GDPR. We do not knowingly collect data from children. If you believe we have inadvertently collected data from a child, contact us at alexsandr.pokr59@gmail.com and we will delete it promptly.

11. Third-Party Links

Our site may contain links to third-party websites. We are not responsible for their privacy practices or content. We encourage you to review their privacy policies before using them.

12. Changes to This Privacy Policy

We may update this policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of the site after changes are posted constitutes acceptance of the updated policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, contact us:

NOCTIS Email: alexsandr.pokr59@gmail.com