Parloy Privacy Policy
Information on the processing of personal data of Parloy store customers and users.
Last updated: 21 July 2026.
1. Data controller
2. Scope of data
- identification data, such as first and last name,
- contact data, such as email address and phone number,
- address data needed for delivery and billing,
- data concerning orders, payments, complaints and withdrawals,
- technical data necessary for the store to operate, e.g. IP address, cookie identifiers, device data, visit source and system logs.
3. Purposes and legal bases
- order fulfilment and customer account handling — performance of an agreement,
- contact form handling — responding to an inquiry and the controller’s legitimate interest,
- handling complaints and withdrawals — legal obligations and performance of an agreement,
- tax and accounting obligations — legal obligation,
- ensuring store security and proper operation — the controller’s legitimate interest,
- store usage analytics, measurement of content and campaign performance, and marketing — based on user consent where consent is required.
4. Data recipients
Data may be transferred to entities supporting the operation of the store: hosting and IT infrastructure providers, WordPress/WooCommerce and email operators, courier and logistics companies, payment operators, banks, accounting offices, complaint-handling entities and public authorities where required by law.
For analytics and marketing measurement, technical data may be processed by Google Ireland Limited and by the operator of the Matomo installation at matomo.notangrysoftware.com, in accordance with the selected consent settings. Once Google Ads and Google for WooCommerce are connected, this scope will include conversion measurement and product presentation under the same consent settings.
5. Payments and deliveries
To the extent necessary to fulfil an order, data may be transferred to payment and delivery operators. Current payment methods are visible on the checkout page; data is transferred only to operators necessary to handle the selected method.
6. Storage period
- order and accounting document data — for the period required by tax and accounting regulations,
- customer account data — until the account is deleted, unless longer storage is required by law,
- complaint data — for the complaint handling period and limitation period for claims,
- contact form data — for the time needed to handle the matter and secure claims,
- the cookie consent decision — for no longer than 365 days,
- analytics and measurement data — for the period arising from the configuration of the relevant tool and the consent given.
7. User rights
You have the right to request access to data, rectification, erasure, restriction of processing, data portability, objection to processing, and to lodge a complaint with the President of the Personal Data Protection Office (President of UODO). Consent to analytics or marketing can be withdrawn at any time without affecting the lawfulness of earlier processing.
8. Voluntary provision of data
Providing data is voluntary, but necessary to place and fulfil an order, create an account or handle an inquiry. Consent to analytics and marketing cookies is voluntary and is not a condition of purchase.
9. Cookies and Consent Mode
Detailed information about cookie categories, Google Consent Mode v2, Google Analytics 4, Matomo and how to change consent is available in the Cookie Policy.