Privacy Policy (GDPR)

Effective from: 01.03.2026

Data Controller: ULTRASSHOP.COM Mariusz Nowak
ul. Ogrodowa 167, 33-300 Nowy Sącz, Poland
VAT ID: PL7343265753   REGON: 386985689
Email: contact@ultrasshop.com

Contents

• 1. Scope
• 2. What data we collect
• 3. Purposes & legal bases
• 4. Payments
• 5. Shipping & fulfilment
• 6. Marketing & analytics
• 7. Sharing data
• 8. International transfers
• 9. Retention periods
• 10. Your rights
• 11. Security
• 12. Contact & complaints

1. Scope

This Privacy Policy explains how we process personal data when you use our website, place orders, contact us, or use our services (B2C and B2B worldwide).

2. What data we collect

• Account data: name, email, phone, billing/shipping address.
• Order data: products, quantities, prices, invoices, correspondence.
• Payment data: payment status, transaction IDs (no full card data stored).
• Technical data: IP address, device/browser data, logs.
• Content files: designs/images you upload for production.

3. Purposes & legal bases (GDPR)

We process data based on:

• Contract performance: fulfilling your orders.
• Legal obligation: tax and accounting laws.
• Legitimate interest: fraud prevention and security.
• Consent: newsletter and marketing activities.

4. Payments

Payments are handled by external providers (Mollie, Stripe, PayPal). They act as independent controllers. We only receive payment status and transaction identifiers to confirm your order.

5. Shipping & fulfilment

We share your delivery details (name, address, phone) with our logistics partners (e.g., DPD, DHL, GLS) solely to deliver your package and provide tracking updates.

6. Marketing & analytics

We use email marketing (newsletters) only if you have given explicit consent. For website improvement, we use analytical tools (cookies) to understand how users interact with our store.

7. Sharing data

We may share data with:

• Payment operators (processing transactions).
• Courier companies (delivery).
• IT & Hosting providers (store maintenance).
• Accounting & Law firms (compliance).

8. International transfers

If we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCC) approved by the European Commission.

9. Retention periods

• Order data: 5 years from the end of the tax year (legal requirement).
• Account data: Until you request deletion of your account.
• Marketing: Until you withdraw your consent.

10. Your rights

• Access, rectify, or erase your data.
• Restrict or object to processing.
• Data portability.
• Withdraw consent at any time.

11. Security

We use technical and organizational measures (like SSL encryption, firewalls, and access control) to ensure a level of security appropriate to the risk of processing personal data.

12. Contact & complaints

Questions regarding your data can be sent to contact@ultrasshop.com. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO) in Poland.

Questions?

Contact us: contact@ultrasshop.com