Privacy Policy

Last updated: June 29 2025
In this Privacy Policy we explain how we (KlocLove, “the Site”, “we”, “us”) collect, use and disclose personal information of the User who visits the website or uses our services on the site at kloclove.pl (“the Site”) or otherwise interacts with us in connection with the Site (the “Services”). For this Policy, “User” means a user of the Services, whether a customer, visitor or other individual whose information we collect under this Privacy Policy.

Changes to this Privacy Policy

We may update this Privacy Policy—for example when our practices change or for legal, regulatory or operational reasons. When we do, we will post the revised Policy on the Site, update the “last updated” date, and take any other steps required by applicable law.

Collecting & using the User’s personal information

To provide the Services, we collect (and have collected over the past 12 months) personal information about Users from a variety of sources. Depending on how the User interacts with us and the Services, the information we collect and use will differ.
In addition to the specific uses below, we may also use the information we collect to communicate with the User, improve the Services, comply with legal obligations, enforce our rights and those of other Users or others.

Personal information we collect

The types of personal information we collect about a User depend on how the User interacts with the Site and uses our Services. “Personal information” means information that identifies, relates to, describes, or could be associated with the User. The specific categories and types are described below.

Information collected directly from the User may include:

  • Contact information such as name, address, phone number, and email address.

  • Order information such as billing name, shipping address, payment confirmation, email and phone number.

  • Account information such as username, password, security questions and other account-security related details.

  • Shipping information including items the User views or adds to cart, or data stored on the User’s account such as loyalty points, reviews, referrals, gift cards or purchase history.

  • Customer-service information such as information the User provides in communications with us (for example by sending a message via the Services).
    The User is not required to provide these details but refusing may prevent access to certain features.

Usage information:
We may also automatically collect certain information about the User’s interaction with the Services (“Usage Data”). To do so we may use cookies, pixels and similar technologies (“Cookies”). Usage Data may include information about the device, browser, network connection, IP address, and other information about how the User uses and accesses the Site and account.

Information obtained from third parties:
We may also obtain information about the User from third-parties, including providers who collect information on our behalf, such as:

  • The companies operating the Site and Services (e.g., Shopify).

  • Our payment-processing entities that collect payment information (bank account, credit/debit card or billing address) to process the User’s payment and deliver products or services.

  • When the User visits the Site, opens or clicks our emails, or interacts with the Services or our ads, certain information may be automatically collected by us or third parties via online-tracking technologies, e.g., pixels, web beacons, SDKs, third-party libraries and cookies.
    Any information obtained from third parties will be processed in accordance with this Privacy Policy. See also the “Third-party Sites & Links” section below.

How we use the User’s personal information

We use the User’s personal information for the following purposes:

  • Providing products and Services. We use the information to provide the Services, fulfil the contract with the User (process payments, deliver orders, send account/transaction notifications, create and maintain the User account, manage shipping, returns and exchanges, and provide other account-related features).

  • Marketing and advertising. We may use the User’s personal information for marketing and promotional purposes, such as sending promotional emails, SMS or postal messages, and showing targeted ads on our Site and other websites. If the User is a resident of the European Economic Area (EEA), the legal basis for this is our legitimate interest in selling our products, according to Article 6(1)(f) of the GDPR.

  • Security and fraud prevention. We use the User’s personal information to detect, investigate or take action against fraudulent, illegal or malicious activity. If the User creates an account, they’re responsible for keeping their credentials secure. We strongly recommend the User not share their username or password, and contact us immediately if they suspect their account has been compromised. For EEA residents, the legal basis is our legitimate interest in securing the website and protecting our rights and those of our Users, under Article 6(1)(f) GDPR.

  • Communicating with the User & improving Services. We use the User’s personal information to provide support and improve our Services. Our legitimate interest is responding to User needs, providing efficient Service, and maintaining a business relationship, under Article 6(1)(f) GDPR for EEA residents.

Cookies

Our Site uses cookies. More information about the cookies used as part of our store’s operation via Shopify can be found at https://www.shopify.com/legal/cookies.
We use cookies to help deliver and improve the Site and Services (including remembering user activity and preferences), conducting analytics and better understanding User interactions (in our legitimate interest of administering, improving and optimising the Services).
We may also permit third-party service providers to use cookies on the Site to better tailor services, products and advertisements on our Site and other websites.
Most browsers automatically accept cookies by default, but the User can set the browser to remove or reject cookies. The User should be aware that blocking or deleting cookies may negatively impact the User experience and cause some features or overall functionality of the Services to be inaccessible or to stop working properly.
Our website also recognises the Global Privacy Control (GPC) signal, which allows the User to opt out of certain disclosures or uses of their information. If the User sends us a GPC request, we will honour the request to opt out of sharing/targeted advertising for the associated browser or device, and if we can link that device to a Shopify account, we’ll apply the request to that account as well. More info at https://globalprivacycontrol.org/. We do not recognise “Do Not Track” signals sent by browsers or devices outside of GPC.

Disclosure of Personal Information

In certain circumstances, we may disclose the User’s personal information to third parties for purposes in keeping with this Privacy Policy. These circumstances may include disclosing personal information:

  • To service providers or other third-parties who perform services on our behalf (e.g., IT service providers, payment processors, data analytics, customer service, cloud storage, order fulfilment and shipping).

  • To business and marketing partners to provide services and show ads to the User. Our business and marketing partners will use the User’s information according to their own privacy policies.

  • When the User authorises or consents to disclosure (e.g., for shipment of the User’s products or when using social-login widgets or integrations)

  • To our affiliated entities or within our group, in our legitimate interest of operating a successful business.

  • In connection with a business transaction (e.g., merger, bankruptcy) or in order to meet legal obligations (such as responding to subpoenas, search warrants, similar requests) or to protect our Services, our rights, or the rights of our Users or others.

In the past 12 months we have disclosed the following categories of personal and sensitive personal information for the above purposes:

  • Identifiers (e.g., basic contact details and certain order and account information)

  • Categories of personal information listed in the California Customer Records statute (e.g., basic contact details and certain order and account information)

  • Commercial information (e.g., order records, purchase history, customer service information)

  • Internet or other network activity information (e.g., Usage Data)

  • Geolocation data (e.g., location inferred from IP address or other technical means)

  • Recipients: Service providers and other third-parties (e.g., internet service providers, payment processors, fulfilment partners, analytics providers)

  • Business, marketing or affiliate partners

We do not use nor disclose sensitive personal information of the User (as defined) without their consent or for profiling.

We have “sold” or “shared” (as defined by applicable law) personal information in the past 12 months for advertising/marketing purposes as follows:

  • Identifiers (e.g., name, email, phone) → business and marketing partners

  • Commercial information (e.g., purchase history) → business and marketing partners

  • Usage Data → business and marketing partners

Third-party Sites & Links

The Site may include links to websites or online platforms operated by third parties. If the User uses those links to visit websites not affiliated with us (or with our affiliates), they should review the privacy and security policies of those sites.
We do not guarantee nor take responsibility for the privacy or security of those sites, including the accuracy, completeness or reliability of information on them.
Information posted by the User in publicly accessible or semi-public places—including on third-party social-media platforms—may be visible to other Users or other platforms without restrictions on their use by us or the third party.
The mere presence of links to such platforms does not mean we endorse the content of those sites or their operators, unless explicitly stated.

Data of Children

The Services are not intended for use by children and we do not knowingly collect personal information of children. If you are a parent or guardian of a child who has submitted personal information to us, you may contact us (using the contact details below) to request deletion of their information.
At the effective date of the Policy, we have no actual knowledge of having sold or shared (as defined under applicable law) personal information of anyone under 16 years of age.

Security & Retention of User Information

Please remember no security measures are perfect or impenetrable and we cannot guarantee “perfect security”. Also, any information the User transmits to us may not be secure during transmission. We recommend avoiding sending confidential or sensitive information via unsecured channels.
The retention period for personal information depends on several factors, e.g., whether the information is needed for the User account, service provision, legal obligations, dispute resolution or other contractual/legal purposes.

User Rights

Depending on the User’s place of residence, the User may have some or all of the following rights with respect to their personal information. These rights are not absolute and apply only in certain circumstances; we may refuse a request if permitted by law. The rights may include:

  • The right to know / the right of access to personal information. The User may have the right to request access to the personal information we hold about them, including how it is being used and shared.

  • The right to deletion. The User may have the right to request that we delete the personal information we hold.

  • The right to rectification. The User may have the right to request correction of inaccurate personal information we hold about them.

  • The right to portability. The User may have the right to receive a copy of the personal information we hold and to request that we transmit it to a third party, in certain circumstances and subject to exceptions.

  • The right to opt-out of sale, sharing or targeted advertising. The User may have the right to direct us not to “sell” or “share” their personal information or to opt-out of certain targeted-advertising processing as defined under relevant law.
    Note: if the User visits the Site with a GPC (Global Privacy Control) signal enabled, then depending on the User’s location we will treat that signal as a request to opt-out of “sale” or “sharing” of personal information for that device & browser.

  • The right to restrict processing. The User may have the right to ask us to stop or limit processing of their personal information.

  • The right to withdraw consent. Whenever we rely on consent to process personal information, the User may have the right to withdraw that consent.

  • The right to appeal. If we deny the User’s request, the User may have the right to appeal our decision. To do so they should reply to our refusal.

  • Manage communication preferences. We may send promotional emails and the User may opt-out at any time via the unsubscribe option in our emails. If the User opts out of promotional communications, we may still send non-promotional emails (e.g., account or order-related).
    The User may exercise any of these rights, where applicable, via the Site or by contacting us using the contact details below. We will not discriminate against the User for exercising any of these rights. Before acting on a request we may require verification of identity (e.g., email or account information). Under applicable law the User may designate an authorised agent to submit a request on their behalf; we may require documentation of authorisation and verify the User’s identity directly.

Complaints

If the User has any complaints regarding how we process personal information, they can contact us using the contact details below. If not satisfied with our response, depending on their place of residence they may have the right to appeal our decision or lodge a complaint with a supervisory authority. The list of EEA data-protection authorities can be found here [link].

International Users

Please note we may transfer, store and process the User’s personal information outside their country of residence. The User’s personal information is also processed by our employees and external service providers and partners in those countries.
If we transfer personal information outside Europe, we rely on recognized transfer mechanisms such as the EU Standard Contractual Clauses or equivalent documents approved by the competent authority in the UK, unless the data is transferred to a country recognised as providing adequate protection of the data.

Contact

If you have any questions regarding our privacy practices or this Privacy Policy or want to exercise any of your rights, please contact us at info@kloclove.pl or write to us at:
Sobienie-Jeziory 30, Sobienie-Jeziory, 08-443, Poland
Under the applicable data-protection laws and unless otherwise indicated, we are the controller of your personal information.