Privacy Policy

1. Introduction

This Privacy Policy explains how personal data is collected, used, stored and protected when you visit or make a purchase from www.enfinleve.com (the “Website”).

The Website is operated by:

Enfin Levé
represented by 

Enfin Leve Aleksandra Hadas

Wlodkowica 21/8

50-072 Wroclaw

Poland


VAT ID: PL8991281233

For the purposes of the General Data Protection Regulation (GDPR) and, where applicable, the UK GDPR, Enfin Levé is the data controller.

We are committed to protecting your privacy and processing personal data in accordance with applicable data protection laws.

2. Scope

This Privacy Policy applies to personal data collected through:

  • the Website,

  • checkout and order processing,

  • customer accounts (if enabled),

  • customer support communications,

  • newsletter and marketing subscription forms.

It does not apply to third-party websites linked from the Website. Those websites have their own privacy policies.

3. Personal data we collect

Data you provide

  • name and surname,

  • billing and shipping address,

  • email address,

  • telephone number,

  • company name and VAT number (if applicable),

  • order details, returns and exchanges,

  • messages sent via contact forms or other customer communications.

Data collected automatically

  • IP address,

  • browser type and basic device information,

  • website usage data such as visited pages and timestamps.

Some of this data is collected using cookies or similar technologies.

4. Is providing data mandatory

Providing certain personal data is necessary to place and fulfill an order. Without the required data, we may not be able to complete the contract.

Providing data for marketing purposes is always voluntary and can be withdrawn at any time.

5. Purposes and legal bases of processing

We process personal data only where permitted by law, including:

a) Performance of a contract

To process orders, payments, shipping, returns, complaints and customer service.

Legal basis: performance of a contract.

b) Legal obligations

To comply with tax, accounting and consumer protection laws.

Legal basis: legal obligation.

c) Legitimate interests

To ensure website security, prevent fraud, maintain IT systems and improve the Website’s functionality.

Legal basis: legitimate interest, balanced against your rights.

d) Consent

For marketing communications and non-essential cookies.

Legal basis: consent. Consent may be withdrawn at any time.

6. Marketing communications

We send marketing communications only where permitted by law.

You may withdraw your consent or object to marketing at any time using the unsubscribe option provided in each message or by contacting us via the online contact form.

We do not sell personal data and we do not allow third parties to use your data for their own marketing purposes.

7. Automated decision-making

We do not carry out automated decision-making that produces legal or similarly significant effects on individuals.

8. Data recipients

Personal data may be shared with trusted service providers acting on our behalf, including:

  • e-commerce and hosting providers,

  • payment service providers,

  • shipping and logistics companies,

  • IT, security and customer support service providers,

  • accounting and legal advisors where required by law.

All such parties process data only in accordance with our instructions and applicable data protection laws.

9. Cookies and similar technologies

We use cookies and similar technologies to ensure proper functioning of the Website and to improve user experience.

Strictly necessary cookies are used to operate the Website.
Analytics and marketing cookies are used only after you provide consent via the cookie settings.

You may change or withdraw your cookie preferences at any time through the Website.

Disabling cookies in your browser may affect certain Website functions.

10. International data transfers

The Website is operated using Shopify, which is based in Canada. Shopify may involve sub-processors located outside the European Economic Area.

Where personal data is transferred outside the EEA, appropriate safeguards are applied, including adequacy decisions or standard contractual safeguards, to ensure an adequate level of data protection.

11. Data retention

Personal data is retained only for as long as necessary for the purposes for which it was collected, including:

  • order and contract data for the duration of the contract and applicable limitation periods,

  • accounting and tax data as required by law,

  • marketing data until consent is withdrawn or an objection is made,

  • customer correspondence until the matter is resolved and any related claims are time-barred.

After these periods, data is deleted or anonymised.

12. Data security

We apply appropriate technical and organisational measures to protect personal data, including encryption and access controls.

Despite these measures, no method of data transmission over the internet can be guaranteed to be completely secure.

13. Your rights

You have the right to:

  • access your personal data,

  • rectify inaccurate data,

  • request erasure of data,

  • restrict processing,

  • receive your data in a portable format,

  • object to processing, including marketing,

  • withdraw consent at any time where processing is based on consent.

Requests may be submitted via the online contact form. We respond within the time limits set by law.

14. Complaints

You have the right to lodge a complaint with the competent data protection authority.

In Poland, this is the President of the Personal Data Protection Office (UODO).

15. Contact

Questions or requests regarding this Privacy Policy or the processing of personal data should be submitted via the online contact form available on the Website.