Privacy Policy

Effective Date: 2026-07-07

Who We Are

Whiskr ("we", "us", "our") is a pet product store operating in Poland within the European Union. We are committed to protecting your personal data and respecting your privacy rights under the General Data Protection Regulation (GDPR).

Data Controller: Whiskr
Contact: pyadeshko@gmail.com

What Data We Collect and Why

Order Information

When you place an order, we collect: - Your name, delivery address, email address, and phone number - Order details (products purchased, quantities, prices)

Why: To fulfill your order, send shipping confirmations, and handle any returns or customer service issues.
Legal basis: Performance of contract (GDPR Art. 6(1)(b))

Payment Information

Payment data (card details, transaction information) is processed directly by Stripe and Shopify Payments. We never see or store your full payment card details.

Why: To process your payment securely.
Legal basis: Performance of contract (GDPR Art. 6(1)(b))

Browser and Session Data

We collect technical information including IP address, browser type, device information, and how you interact with our store through cookies and similar technologies.

Why: To operate our website, analyze how visitors use our store, prevent fraud, and improve your shopping experience.
Legal basis: Legitimate interest (GDPR Art. 6(1)(f)) for essential functions and fraud prevention; consent (GDPR Art. 6(1)(a)) for analytics and marketing cookies.

Customer Support Communications

When you contact us, we keep records of your messages and our responses.

Why: To provide support and resolve any issues you may have.
Legal basis: Performance of contract (GDPR Art. 6(1)(b)) and legitimate interest (GDPR Art. 6(1)(f))
Retention: 30 days after the conversation ends

Marketing Communications

If you subscribe to our newsletter or opt into marketing, we use your email address to send promotional content.

Why: To keep you informed about new products, offers, and pet care tips.
Legal basis: Consent (GDPR Art. 6(1)(a)) — you can unsubscribe anytime

Who We Share Your Data With

We work with trusted service providers (data processors under GDPR Art. 28) who help us run our business. They can only use your data as we instruct them and must keep it secure.

Our partners include:

Shopify (Canada) — E-commerce platform hosting our store and order data
CJ Dropshipping (China) — Order fulfillment and shipping to customers
Stripe / Shopify Payments (USA/Ireland) — Payment processing
Klaviyo or Shopify Email — Sending order confirmations and transactional emails
Meta (Facebook) / TikTok — Conversion tracking for advertising (only with your consent via cookie banner)

International Data Transfers

Some of our partners are located outside the European Economic Area (EEA), including Canada, China, and the United States. When we transfer your data internationally, we ensure appropriate safeguards are in place:

Canada: Recognized by the EU as providing adequate data protection
China and USA: Protected by Standard Contractual Clauses approved by the European Commission

We do not sell your personal data to third parties.

Cookies and Tracking

We use cookies (small text files stored on your device) for different purposes:

Essential cookies: Necessary for the website to function (shopping cart, checkout)
Analytics cookies: Help us understand how visitors use our store
Marketing cookies: Track conversions from ads and enable personalized advertising

You can manage your cookie preferences through the cookie banner that appears when you first visit our site. You can change your settings at any time through your browser preferences.

How Long We Keep Your Data

Order records: 6 years from the date of purchase (required by Polish tax law)
Marketing data: Until you unsubscribe or withdraw consent
Customer support conversations: 30 days after resolution
Analytics and cookie data: Up to 24 months

Your Privacy Rights

Under GDPR, you have the following rights regarding your personal data:

Right to access — Request a copy of the personal data we hold about you
Right to rectification — Correct inaccurate or incomplete data
Right to erasure ("right to be forgotten") — Request deletion of your data in certain circumstances
Right to restriction — Limit how we use your data
Right to data portability — Receive your data in a structured, commonly used format
Right to object — Object to processing based on legitimate interests or for direct marketing
Right to withdraw consent — Where we process data based on consent, you can withdraw it at any time

How to Exercise Your Rights

To exercise any of these rights, email us at pyadeshko@gmail.com with your request. We will respond within 30 days.

Please note that some rights have limitations. For example, we must keep order data for 6 years to comply with Polish tax law, even if you request deletion.

Right to Complain

If you're not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Polish data protection authority:

Prezes Urzędu Ochrony Danych Osobowych (PUODO)
Website: uodo.gov.pl

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse. However, no internet transmission is completely secure, and we cannot guarantee absolute security.

Children's Privacy

Our store is not intended for children under 16. We do not knowingly collect data from children. If you believe we have collected data from a child, please contact us immediately.

Changes to This Policy

We may update this Privacy Policy from time to time. The "Effective Date" at the top shows when it was last revised. Continued use of our store after changes means you accept the updated policy.