Privacy Policy

Last update date: January 23, 2026

General Provisions
Definitions
Data controller and contact information
Scope of data, purposes and legal basis of processing
Data source
Data recipients
Data transfer outside the EEA
Data retention period
Rights of data subjects
Data security
Children
Cookies and similar technologies
Automated decision-making
Changes to the Privacy Policy

1. General provisions

This Privacy Policy defines the principles of processing and protecting personal data provided by Users in connection with the use of the online store. shootershape.pl (hereinafter: "Store" or "Service").
The store serves customers from many markets, including Poland, Czech Republic, Denmark, Hungary, Romania, Sweden, Ukraine, United Kingdom, Austria, Belgium, Bulgaria, Estonia, Finland, France, Germany, Greece, Italy, Latvia, Lithuania, Netherlands, Portugal, Slovakia, Slovenia, Spain.
The document complies with the Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and the Act of May 10, 2018 on the protection of personal data. For customers outside the EEA, we apply Polish data protection law taking into account local regulations (e.g., UK GDPR, CCPA).
By using the Store, the User accepts the terms described in this document.

2. Definitions

Concept	Meaning
Administrator	CodeFormers Sp. z o.o., ul. Kowalska 5/203, 20-115 Lublin, Poland, VAT ID 6612373391
User	any natural person visiting the Store or using its functionalities
GDPR	Regulation 2016/679 (General Data Protection Regulation)
Personal data	information about an identified or identifiable natural person
Processing	any operation on personal data – e.g. collecting, storing, sharing, deleting

3. Data controller and contact

The personal data administrator is CodeFormers Sp. z o.o. (hereinafter: "Administrator").
You can contact the Administrator:
- by e-mail: kontakt@shootershape.pl
- in writing: ul. Kowalska 5/203, 20-115 Lublin, Poland
The Administrator has not appointed a Data Protection Officer; for all matters related to data processing, please contact as above.

4. Scope of data, purposes and legal bases of processing

Purpose of processing	Scope of data	Legal basis
Order acceptance and fulfillment	first name, last name, delivery address, e-mail, phone, company data/NIP (optional), currency and market country	Art. 6(1)(b) GDPR
Online payment	first name, last name, e-mail, order number, amount, payment method	Art. 6(1)(b) GDPR
Issuing invoices / receipts	first name, last name / company name, address, NIP/VAT	Art. 6(1)(c) GDPR
Handling inquiries	first name, last name, e-mail, phone, inquiry content	Art. 6(1)(f) GDPR
Newsletter	e-mail address	Art. 6(1)(a) GDPR
Remarketing / personalization	e-mail (hash), statistics, purchase history, Pixel/GA4 events	Art. 6(1)(a) or (f) GDPR*
Statistics analysis, security	IP, HTTP headers, cookies, browser/device info, logs	Art. 6(1)(f) GDPR

* The administrator relies on legitimate interest only where permissible; in other cases, consent is required.

5. Data source

We collect data directly from the User (forms in the Store) or – in the case of technical data – automatically via cookies and analytical scripts.

6. Data recipients

The administrator discloses personal data only to entities necessary for service provision:

Category	Entity	Purpose
Payment operators	PayPal, PayU, Klarna, Mollie, Przelewy24, Visa, Mastercard, iDEAL, Bancontact, Bank Transfer, Trustly, Multibanco, CB, Bancomat, Satispay, Express Bancaire, WA, BLIK	payment processing
Logistics operators	InPost Sp. z o.o., DHL Express, Meest Post	order delivery
E-commerce platform	Shopify Inc. (Canada / EU)	store infrastructure
Hosting / CDN / analytics	Vercel Inc. (EU), OVHcloud (PL), Microsoft Clarity	server maintenance, session analysis
Analytical and marketing tools	Google Ireland Ltd. (GA4), Meta Platforms Ireland Ltd. (Pixel)	statistics, remarketing

7. Data Transfer Outside the European Economic Area

Basically, we do not transfer data outside the EEA. If we use GA4, Meta Pixel, or Shopify (USA), data may be transferred to the USA – solely based on the European Commission's Standard Contractual Clauses (SCC) and additional safeguards (e.g., TCF v2).

8. Data Retention Period

Data category	Period
Transaction data	6 years from the end of the tax year
Customer account data	until account deletion or 5 years from last activity
Newsletter	until consent is withdrawn
Marketing data	max 3 years from last contact
Server logs / cookies	12–24 months (depending on the type)

9. Rights of Data Subjects

The User has the right to access, rectify, delete, restrict, transfer data, object, and withdraw consent.
Requests should be sent to kontakt@shootershape.pl. We will respond no later than within 1 month.
A complaint may also be filed with the President of the UODO or the relevant supervisory authority in the User's country of residence.

10. Data Security

TLS/SSL encryption
2FA for the admin panel
regular backups
separated infrastructure (Shopify, Vercel)
access only for authorized persons

11. Children

The Store's offer is directed exclusively to adults. We do not knowingly collect data from persons under 16 years of age.

12. Cookies and similar technologies

Details can be found in the Cookie Policy. The Store uses cookies, among others, for:

ensuring proper operation (technical cookies),
traffic analysis (Google Analytics 4),
remarketing (Meta Pixel),
behavior analysis (Microsoft Clarity).

13. Automated decision-making

The Administrator does not make decisions regarding Users in an automated manner, including not using profiling that causes legal effects.

14. Changes to the Privacy Policy

The Administrator may make changes to the Policy for legal or technological reasons.
We will inform about significant changes via a notice in the Store or by email (for account holders).
The new version of the Policy is effective from the date of publication on the Service.

Do you have questions about this Policy? Write to kontakt@shootershape.pl.