FREE SHIPPING ON ORDERS OVER 100€

30-DAY RETURNS · NO QUESTIONS ASKED

Privacy policy

Last updated: 29 May 2026

This Privacy Policy explains how WOWBAG SP. Z O.O. collects, uses, stores and protects personal data when customers and users visit the online store, create an account, place an order, subscribe to the newsletter, contact customer service, submit a return or complaint, or otherwise use the website and related services.

This Privacy Policy has been prepared in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council, known as the General Data Protection Regulation (“GDPR”), and other applicable data protection laws.

1. Data Controller

The controller of your personal data is:

WOWBAG SP. Z O.O.
Registration number: 529353401
Registered address: Przemysłowa 14/410, 35-105 Rzeszów, Poland
E-mail: wowbag2024@gmail.com
Phone: +48 452 798 288

For the purposes of this Privacy Policy, “we”, “us” and “our” refer to WOWBAG SP. Z O.O.

2. Product Safety and GPSR Contact

For product safety inquiries, including questions related to product identification, product safety, instructions for use, warnings, complaints concerning product safety or requests under Regulation (EU) 2023/988 on general product safety (“GPSR”), the responsible contact is:

WOWBAG SP. Z O.O.
Registration number: 529353401
Registered address: Przemysłowa 14/410, 35-105 Rzeszów, Poland
E-mail: wowbag2024@gmail.com
Phone: +48 452 798 288

Product safety inquiries may be submitted by e-mail or in writing to the registered address above.

3. Scope of This Privacy Policy

This Privacy Policy applies to the online store available at wowbag.com.pl and to all related services provided through the website.

This Privacy Policy applies when you:

  • visit or browse the website;
  • place an order;
  • create or use a customer account;
  • add products to your cart or wishlist;
  • contact customer service;
  • subscribe to or unsubscribe from the newsletter;
  • submit a return, complaint or product safety inquiry;
  • use payment, delivery or other services available through the store;
  • use forms, cookies or similar technologies available on the website.

This Privacy Policy does not apply to websites, platforms or services operated by third parties, even if they are linked from our website. Third-party services process personal data according to their own privacy policies.

4. Categories of Personal Data We Process

Depending on how you use the online store, we may process the following categories of personal data.

4.1 Contact and identification data

This may include your first name, last name, company name, billing address, shipping address, correspondence address, e-mail address, telephone number, tax identification number and other details required to process your order or respond to your request.

4.2 Account data

If you create a customer account, we may process your login details, password in encrypted form, account preferences, order history, saved addresses, wishlist information and account activity.

4.3 Order and transaction data

This may include information about products viewed, added to cart, added to a wishlist, purchased, returned, exchanged or complained about, as well as order numbers, payment status, delivery status and order history.

4.4 Payment data

We process information necessary to complete and verify payments, such as payment method, transaction status, payment confirmation and related payment details.

Full card details and other sensitive payment credentials are processed by payment providers and are not stored by us in full.

4.5 Delivery and return data

We may process data required to deliver orders, track shipments, handle returns, process complaints or communicate with courier and logistics providers.

4.6 Communication data

When you contact us by e-mail, phone, contact form, social media or another communication channel, we may process the information included in your message and our correspondence with you.

4.7 Technical and usage data

When you use the website, we may process technical information such as IP address, browser type, device type, operating system, language settings, session data, cookie identifiers, pages visited, actions taken on the website and similar usage information.

4.8 Marketing and newsletter data

If you subscribe to the newsletter or consent to marketing communication, we may process your e-mail address, name, consent status, subscription date, unsubscribe date and information about your interaction with marketing messages.

4.9 Product review or user-generated content data

If the website allows reviews, opinions or other user-submitted content, we may process the content you provide, the name or nickname displayed with the review and information necessary to verify the purchase or manage the review.

5. Sources of Personal Data

We may collect personal data:

  • directly from you when you place an order, create an account, contact us, subscribe to the newsletter or complete forms on the website;
  • automatically when you browse and use the website, including through cookies and similar technologies;
  • from service providers involved in payment processing, delivery, IT services, hosting, analytics, marketing, fraud prevention and customer support;
  • from Shopify and other technical providers used to operate the online store;
  • from public authorities or other entities where required or permitted by law.

6. Purposes and Legal Bases for Processing Personal Data

We process personal data only where we have a valid legal basis under GDPR.

6.1 Processing orders and performing the sales contract

We process personal data to accept orders, process payments, issue confirmations and invoices, deliver products, handle returns and complaints and provide customer support.

Legal basis: Article 6(1)(b) GDPR — performance of a contract or steps taken before entering into a contract.

6.2 Creating and managing a customer account

We process personal data to create, maintain and manage your customer account, including access to order history, saved information and account-related features.

Legal basis: Article 6(1)(b) GDPR — performance of a contract for electronic services.

6.3 Customer service and communication

We process personal data to answer inquiries, provide information about orders, respond to complaints, handle product safety questions and maintain communication with customers.

Legal basis: Article 6(1)(b) GDPR where the communication relates to a contract, or Article 6(1)(f) GDPR where we have a legitimate interest in responding to inquiries and maintaining customer relations.

6.4 Legal and accounting obligations

We process personal data to comply with legal obligations, including tax, accounting, consumer protection, product safety, complaint handling and statutory retention requirements.

Legal basis: Article 6(1)(c) GDPR — compliance with a legal obligation.

6.5 Returns, complaints and legal claims

We process personal data to handle returns, complaints, warranty-related matters, product non-conformity claims, product safety inquiries and to establish, exercise or defend legal claims.

Legal basis: Article 6(1)(c) GDPR where processing is required by law, and Article 6(1)(f) GDPR where processing is necessary for our legitimate interest in protecting our rights and handling claims.

6.6 Newsletter and direct marketing

If you subscribe to the newsletter or give consent to receive marketing communication, we process your personal data to send commercial information, promotional offers, news and marketing content.

Legal basis: Article 6(1)(a) GDPR — consent.

You may withdraw your consent at any time by using the unsubscribe link in the newsletter or by contacting us.

6.7 Website analytics and improvement

We may process technical and usage data to understand how users interact with the website, improve website functionality, detect errors, optimize content and develop the store.

Legal basis: Article 6(1)(f) GDPR — legitimate interest in improving and securing the website. Where required by law, analytics cookies are used only with your consent.

6.8 Security and fraud prevention

We process personal data to protect the website, prevent fraud, detect unauthorized activity, secure customer accounts and ensure safe shopping.

Legal basis: Article 6(1)(f) GDPR — legitimate interest in ensuring security and preventing abuse.

6.9 Personalized advertising and remarketing

Where marketing cookies or similar technologies are used, we may process data about your activity on the website to display tailored advertising or measure advertising effectiveness.

Legal basis: Article 6(1)(a) GDPR — consent, where required by law.

7. Whether Providing Personal Data Is Required

Providing personal data may be necessary to place an order, receive delivery, create an account, make a payment, submit a return or complaint, or contact us.

If you do not provide data required for a particular service, we may be unable to provide that service, process your order, deliver products, respond to your inquiry or fulfil legal obligations.

Providing data for marketing communication, newsletter subscription, optional cookies and optional account features is voluntary.

8. Recipients of Personal Data

We may share personal data with trusted recipients only where necessary and in accordance with applicable law. These recipients may include:

  • Shopify, BaseLinker and other e-commerce, order management and return management platform providers;
  • hosting, IT, cloud and website maintenance providers;
  • payment operators, banks, payment gateways and fraud prevention providers;
  • courier, postal, parcel locker and logistics providers;
  • accounting, tax, legal and compliance service providers;
  • customer service, support department, return management and communication tool providers;
  • marketing, advertising, analytics and newsletter service providers;
  • product review or customer opinion service providers;
  • public authorities, courts, regulators or law enforcement bodies where required by law;
  • professional advisers where necessary to protect our rights or comply with legal obligations.

Personal data is shared only to the extent necessary for the relevant purpose.

9. Relationship with Shopify

The online store may be hosted and operated using Shopify. Shopify may process personal data in order to provide, secure, improve and support the e-commerce services used by the store.

Information submitted through the store may be transmitted to Shopify and processed by Shopify and its service providers, including providers located outside the European Economic Area. Where required, such transfers are protected by appropriate safeguards, including standard contractual clauses or other lawful transfer mechanisms.

Shopify may also process certain personal data as an independent controller for its own purposes, for example to provide, secure or improve its services. More information about Shopify’s privacy practices is available in Shopify’s own privacy documentation.

10. Cookies and Similar Technologies

The website uses cookies and similar technologies to operate the store, maintain sessions, remember preferences, enable shopping cart functionality, support payments, improve website performance, analyze traffic, personalize content and, where consent is given, support marketing and advertising activities.

Cookies may include:

  • strictly necessary cookies required for the website and checkout to function;
  • functional cookies that remember preferences and improve usability;
  • analytical cookies used to understand website performance and user behavior;
  • marketing cookies used to measure advertising effectiveness and display personalized advertising.

Where required by law, non-essential cookies are used only after you give consent. You may change or withdraw your cookie consent through the cookie settings available on the website or through your browser settings.

Restricting or disabling certain cookies may affect the proper operation of the website, including cart, checkout, account login, payment or delivery functionality.

Detailed information about cookies, including categories, providers and retention periods, may be provided in a separate Cookie Policy or cookie settings panel.

11. Newsletter

Subscription to the newsletter is voluntary.

If you subscribe, we process your e-mail address and, where provided, your name in order to send marketing communication, promotional offers, product news and information about the store.

You may unsubscribe at any time by:

  • clicking the unsubscribe link included in each newsletter;
  • using the newsletter unsubscribe form available on the website;
  • contacting us by e-mail.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

12. Customer Account

Customers may create an account in the online store. Creating an account allows customers to manage certain account details, view order history, save addresses, manage preferences and use other account-related features.

The account service is provided for an indefinite period. You may request deletion of your account at any time by contacting us. Account deletion may not result in deletion of all data where we are legally required to retain certain information, for example for tax, accounting, complaint handling or legal claim purposes.

Customers are responsible for keeping account login details confidential and should not share passwords or access credentials with third parties.

13. Product Reviews and User Content

If you submit a product review, opinion or other content through the website, we may process the data provided in order to publish, verify, moderate or manage the content.

You may not submit unlawful, offensive, misleading or third-party rights-infringing content. We may remove or refuse to publish content where required or permitted by law or by our terms.

14. International Transfers of Personal Data

Some of our service providers, including Shopify and certain technology, analytics, payment or marketing providers, may process personal data outside the European Economic Area.

Where personal data is transferred outside the European Economic Area, we rely on appropriate legal safeguards, such as:

  • an adequacy decision issued by the European Commission;
  • standard contractual clauses approved by the European Commission;
  • other transfer mechanisms permitted under GDPR.

15. Retention of Personal Data

We retain personal data only for as long as necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by law.

In particular:

  • order and contract data may be retained for the period required by tax, accounting and consumer protection laws;
  • invoice and accounting data may be retained for the legally required accounting period;
  • complaint, return and warranty-related data may be retained for the period necessary to handle the matter and defend possible claims;
  • account data is retained for as long as the account exists, unless earlier deletion is requested and no legal reason requires further retention;
  • newsletter data is retained until consent is withdrawn or the newsletter service is terminated;
  • communication data is retained for the period necessary to respond to the inquiry and protect our legitimate interests;
  • cookie data is retained according to the period indicated in the cookie settings or Cookie Policy.

After the relevant retention period expires, personal data is deleted or anonymized.

16. Your Rights Under GDPR

Subject to the conditions set out in GDPR, you have the following rights:

  • the right of access to your personal data;
  • the right to obtain a copy of your personal data;
  • the right to rectification of inaccurate or incomplete data;
  • the right to erasure of personal data;
  • the right to restriction of processing;
  • the right to data portability;
  • the right to object to processing based on legitimate interest;
  • the right to object to direct marketing;
  • the right to withdraw consent at any time where processing is based on consent.

To exercise your rights, please contact us at: wowbag2024@gmail.com

We may need to verify your identity before responding to your request. We will respond within the time limits required by applicable law.

17. Right to Lodge a Complaint

If you believe that your personal data is being processed unlawfully, you have the right to lodge a complaint with the competent supervisory authority.

In Poland, the supervisory authority is:

President of the Personal Data Protection Office
Urząd Ochrony Danych Osobowych
ul. Stanisława Moniuszki 1A
00-014 Warsaw, Poland
Phone: +48 22 531 03 00

You may also contact the supervisory authority in the EU Member State of your habitual residence, place of work or place of the alleged infringement.

18. Automated Decision-Making

We do not use personal data to make decisions based solely on automated processing that would produce legal effects concerning you or similarly significantly affect you.

The website may use personalization, product recommendations or marketing tools, but these do not produce legal effects concerning customers.

19. Children’s Data

The online store is not intended for children. We do not knowingly collect personal data from children.

If a parent or guardian believes that a child has provided personal data to us, they may contact us and request deletion of such data.

20. Data Security

We apply appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration or disclosure.

However, no online transmission or storage system is completely secure. Customers should use secure devices, protect account credentials and avoid sending sensitive information through unsecured communication channels.

21. Third-Party Links and Services

The website may contain links to third-party websites, payment services, delivery tracking pages, social media platforms or other external services.

We are not responsible for the privacy practices, security or content of third-party websites or platforms. Before using third-party services, we recommend reviewing their privacy policies and terms.

22. Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes in law, technology, service providers, website functionality or our data processing practices.

The updated version will be published on the website with a new “Last updated” date. Where required by law, we will provide additional notice.

23. Contact

If you have any questions about this Privacy Policy, the processing of your personal data, your rights under GDPR or product safety inquiries under GPSR, please contact:

WOWBAG SP. Z O.O.
Registration number: 529353401
Registered address: Przemysłowa 14/410, 35-105 Rzeszów, Poland
E-mail: wowbag2024@gmail.com
Phone: +48 452 798 288