Privacy Policy

Last update date: January 23, 2026

Table of contents

  1. General Provisions
  2. Definitions
  3. Data controller and contact information
  4. Scope of data, purposes and legal basis of processing
  5. Data source
  6. Data recipients
  7. Data transfer outside the EEA
  8. Data retention period
  9. Rights of data subjects
  10. Data security
  11. Children
  12. Cookies and similar technologies
  13. Automated decision-making
  14. Changes to the Privacy Policy

1. General provisions

  1. This Privacy Policy defines the principles of processing and protecting personal data provided by Users in connection with the use of the online store. shootershape.pl (hereinafter: "Store" or "Service").
  2. The store serves customers from many markets, including Poland, Czech Republic, Denmark, Hungary, Romania, Sweden, Ukraine, United Kingdom, Austria, Belgium, Bulgaria, Estonia, Finland, France, Germany, Greece, Italy, Latvia, Lithuania, Netherlands, Portugal, Slovakia, Slovenia, Spain.
  3. The document complies with the Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and the Act of May 10, 2018 on the protection of personal data. For customers outside the EEA, we apply Polish data protection law taking into account local regulations (e.g., UK GDPR, CCPA).
  4. By using the Store, the User accepts the terms described in this document.

2. Definitions

Concept Meaning
Administrator CodeFormers Sp. z o.o., ul. Kowalska 5/203, 20-115 Lublin, Poland, VAT ID 6612373391
User any natural person visiting the Store or using its functionalities
GDPR Regulation 2016/679 (General Data Protection Regulation)
Personal data information about an identified or identifiable natural person
Processing any operation on personal data – e.g. collecting, storing, sharing, deleting

3. Data controller and contact

  1. The personal data administrator is CodeFormers Sp. z o.o. (hereinafter: "Administrator").
  2. You can contact the Administrator:
  3. The Administrator has not appointed a Data Protection Officer; for all matters related to data processing, please contact as above.

4. Scope of data, purposes and legal bases of processing

Purpose of processing Scope of data Legal basis
Order acceptance and fulfillment first name, last name, delivery address, e-mail, phone, company data/NIP (optional), currency and market country Art. 6(1)(b) GDPR
Online payment first name, last name, e-mail, order number, amount, payment method Art. 6(1)(b) GDPR
Issuing invoices / receipts first name, last name / company name, address, NIP/VAT Art. 6(1)(c) GDPR
Handling inquiries first name, last name, e-mail, phone, inquiry content Art. 6(1)(f) GDPR
Newsletter e-mail address Art. 6(1)(a) GDPR
Remarketing / personalization e-mail (hash), statistics, purchase history, Pixel/GA4 events Art. 6(1)(a) or (f) GDPR*
Statistics analysis, security IP, HTTP headers, cookies, browser/device info, logs Art. 6(1)(f) GDPR

* The administrator relies on legitimate interest only where permissible; in other cases, consent is required.

5. Data source

We collect data directly from the User (forms in the Store) or – in the case of technical data – automatically via cookies and analytical scripts.

6. Data recipients

The administrator discloses personal data only to entities necessary for service provision:

Category Entity Purpose
Payment operators PayPal, PayU, Klarna, Mollie, Przelewy24, Visa, Mastercard, iDEAL, Bancontact, Bank Transfer, Trustly, Multibanco, CB, Bancomat, Satispay, Express Bancaire, WA, BLIK payment processing
Logistics operators InPost Sp. z o.o., DHL Express, Meest Post order delivery
E-commerce platform Shopify Inc. (Canada / EU) store infrastructure
Hosting / CDN / analytics Vercel Inc. (EU), OVHcloud (PL), Microsoft Clarity server maintenance, session analysis
Analytical and marketing tools Google Ireland Ltd. (GA4), Meta Platforms Ireland Ltd. (Pixel) statistics, remarketing

7. Data Transfer Outside the European Economic Area

Basically, we do not transfer data outside the EEA. If we use GA4, Meta Pixel, or Shopify (USA), data may be transferred to the USA – solely based on the European Commission's Standard Contractual Clauses (SCC) and additional safeguards (e.g., TCF v2).

8. Data Retention Period

Data category Period
Transaction data 6 years from the end of the tax year
Customer account data until account deletion or 5 years from last activity
Newsletter until consent is withdrawn
Marketing data max 3 years from last contact
Server logs / cookies 12–24 months (depending on the type)

9. Rights of Data Subjects

  1. The User has the right to access, rectify, delete, restrict, transfer data, object, and withdraw consent.
  2. Requests should be sent to kontakt@shootershape.pl. We will respond no later than within 1 month.
  3. A complaint may also be filed with the President of the UODO or the relevant supervisory authority in the User's country of residence.

10. Data Security

  • TLS/SSL encryption
  • 2FA for the admin panel
  • regular backups
  • separated infrastructure (Shopify, Vercel)
  • access only for authorized persons

11. Children

The Store's offer is directed exclusively to adults. We do not knowingly collect data from persons under 16 years of age.

12. Cookies and similar technologies

Details can be found in the Cookie Policy. The Store uses cookies, among others, for:

  • ensuring proper operation (technical cookies),
  • traffic analysis (Google Analytics 4),
  • remarketing (Meta Pixel),
  • behavior analysis (Microsoft Clarity).

13. Automated decision-making

The Administrator does not make decisions regarding Users in an automated manner, including not using profiling that causes legal effects.

14. Changes to the Privacy Policy

  1. The Administrator may make changes to the Policy for legal or technological reasons.
  2. We will inform about significant changes via a notice in the Store or by email (for account holders).
  3. The new version of the Policy is effective from the date of publication on the Service.

Do you have questions about this Policy? Write to kontakt@shootershape.pl.