Privacy policy

PRIVACY POLICY

Last updated: August 29, 2026

This Privacy Policy describes how IVE LABS Sp. z o.o. ("IVE LABS", "we", "us" or "our") collects, uses, stores and discloses personal information when you visit or use our online store, make a purchase, contact us, create an account, or otherwise use our services (collectively, the "Services").

Our online store is powered by Shopify, which provides the e-commerce platform that enables us to offer our products and Services to you.

Please read this Privacy Policy carefully.

1. Data Controller

For the purposes of Regulation (EU) 2016/679 ("GDPR") and other applicable data protection laws, the controller of your personal data is:

IVE LABS Sp. z o.o.
ul. Wojska Polskiego 16G
41-600 Świętochłowice
Poland

Email: biuro@ivelabs.pl

If you have any questions regarding the processing of your personal data or wish to exercise your rights, please contact us using the email address above.

2. Personal Information We Collect

Depending on how you interact with our Services, we may collect and process the following categories of personal information:

Contact information, including your name, surname, company name, billing address, shipping address, telephone number and email address.
Order and transaction information, including products ordered, order value, payment status, delivery details, returns, complaints, exchanges and order history.
Payment information, including information necessary to process your payment. Payment card and other payment information may be processed directly by Shopify or external payment service providers.
Account information, including login details, preferences and settings if you create a customer account.
Communications, including information you provide when contacting us by email, through contact forms or customer support.
Device and technical information, including your IP address, browser type, device information, operating system and other technical identifiers.
Usage information, including information about how you browse and interact with our website, products and Services.
Marketing information, including your marketing preferences and, where applicable, information concerning your interaction with marketing communications.

We only collect personal information that is necessary for the purposes described in this Privacy Policy.

3. Sources of Personal Information

We may obtain personal information:

directly from you when you place an order, create an account, contact us or otherwise provide information to us;
automatically when you use our website, including through cookies and similar technologies;
from Shopify and other service providers that support the operation of our store;
from payment providers, delivery companies and logistics providers;
from other partners or third parties where permitted by applicable law.

4. Purposes and Legal Bases for Processing

We process personal information only where we have an appropriate legal basis.

Performance of a contract

We process personal information where it is necessary to enter into or perform a contract with you, including to:

process and fulfil orders;
process payments;
arrange delivery;
communicate regarding your order;
process returns, exchanges and complaints;
maintain and manage your customer account;
provide customer service.

The legal basis for this processing is Article 6(1)(b) GDPR.

Compliance with legal obligations

We process certain information where necessary to comply with legal obligations applicable to us, including accounting, taxation, invoicing, consumer protection and other statutory obligations.

The legal basis for this processing is Article 6(1)(c) GDPR.

Legitimate interests

Where permitted by law, we may process personal information where necessary for our legitimate interests, including:

protecting our store and customers against fraud and abuse;
ensuring IT and network security;
establishing, exercising or defending legal claims;
improving our products, Services and customer experience;
maintaining records concerning our business activities;
analysing the performance and use of our Services.

The legal basis for this processing is Article 6(1)(f) GDPR, provided that our interests are not overridden by your rights and freedoms.

Consent

Where required by applicable law, we may process personal information based on your consent, including for certain marketing activities, advertising technologies and non-essential cookies.

The legal basis for this processing is Article 6(1)(a) GDPR.

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the consent was withdrawn.

5. Orders and Payments

When you place an order, we process the information necessary to complete the transaction, including your contact details, billing and delivery information, information about the products ordered and payment-related information.

Payments may be processed by Shopify and/or external payment service providers.

IVE LABS does not necessarily receive or store complete payment card details. Such information may be processed directly by the relevant payment provider in accordance with its own privacy policy and security requirements.

6. Shopify

Our online store is hosted and powered by Shopify.

Shopify processes personal information in connection with your access to and use of our store and provides technological infrastructure necessary to operate the Services.

Information submitted through our store may therefore be transmitted to and processed by Shopify and its service providers.

Shopify may also process certain information for its own purposes where permitted by applicable law. Information about Shopify's processing of personal data and the rights available to users can be found in Shopify's applicable privacy documentation and privacy portal.

7. Cookies and Similar Technologies

Our website may use cookies and similar technologies necessary for the operation of the store and, depending on your choices, for analytics, personalisation, marketing and advertising.

Cookies may be used to:

maintain essential website functionality;
remember your preferences;
maintain your shopping cart and session;
provide secure checkout functionality;
analyse website performance and usage;
measure the effectiveness of advertising;
personalise content or advertising where permitted.

Where required by applicable law, non-essential cookies and similar technologies will only be used after obtaining your consent.

You can manage your cookie preferences through the consent tools made available on our website and, where applicable, through your browser settings.

Withdrawal of consent should not affect cookies that are strictly necessary for the operation and security of the Services.

8. Marketing Communications

Where permitted by applicable law, and where required with your consent, we may send you information about our products, offers, services and other marketing communications.

You can unsubscribe from email marketing at any time by using the unsubscribe link included in our marketing emails or by contacting us at:

biuro@ivelabs.pl

Unsubscribing from marketing communications does not prevent us from sending transactional or service-related communications concerning your orders, account or contractual relationship with us.

9. How We Disclose Personal Information

We may disclose personal information where necessary to operate our business and provide the Services, including to:

Shopify, which provides our e-commerce platform;
payment service providers;
courier, shipping and logistics companies;
IT, hosting, cloud and technical service providers;
accounting, tax, legal and professional advisers;
marketing and analytics service providers, subject to applicable consent requirements;
government authorities, courts or other authorised entities where disclosure is required by law.

We may also disclose information in connection with a merger, acquisition, restructuring or other business transaction, subject to applicable law.

Service providers processing personal data on our behalf are required to process such information in accordance with applicable data protection requirements.

10. International Transfers

Some of our service providers, including Shopify and its service providers, may process personal information outside Poland or the European Economic Area ("EEA").

Where personal data is transferred outside the EEA to a country that has not been recognised as providing an adequate level of data protection, appropriate safeguards will be used as required by applicable law.

These safeguards may include European Commission Standard Contractual Clauses or other legally recognised transfer mechanisms.

11. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected and to comply with applicable legal obligations.

Retention periods may depend on:

the duration of our contractual relationship with you;
accounting and taxation requirements;
consumer protection requirements;
limitation periods for potential legal claims;
our obligation to establish, exercise or defend legal claims;
other applicable statutory requirements.

Where personal information is no longer required, it will be deleted, anonymised or otherwise processed in accordance with applicable law.

12. Security

We take appropriate technical and organisational measures designed to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

However, no method of transmission over the Internet or electronic storage system can guarantee absolute security.

You should therefore take appropriate precautions when communicating sensitive information and protect your account credentials against unauthorised access.

13. Your Rights

If the GDPR applies to the processing of your personal information, you may have the following rights, subject to the conditions and limitations established by applicable law:

Right of access – you may request information about whether and how we process your personal data and obtain a copy of your data.
Right to rectification – you may request correction of inaccurate or incomplete personal data.
Right to erasure – you may request deletion of your personal data in circumstances provided by law.
Right to restriction of processing – you may request that processing of your personal data be restricted in certain circumstances.
Right to data portability – where applicable, you may receive certain personal data in a structured, commonly used and machine-readable format and request its transfer to another controller.
Right to object – you may object to processing based on our legitimate interests in circumstances provided by law.
Right to withdraw consent – where processing is based on your consent, you may withdraw that consent at any time.
Rights relating to automated decision-making – where applicable, you have rights concerning decisions based solely on automated processing that produce legal or similarly significant effects.

You may exercise your rights by contacting:

biuro@ivelabs.pl

We may need to verify your identity before processing certain requests.

We will respond within the time limits required by applicable data protection law.

14. Right to Lodge a Complaint

If you believe that we process your personal data in violation of applicable data protection law, we encourage you to contact us first at:

biuro@ivelabs.pl

You also have the right to lodge a complaint with the Polish supervisory authority:

President of the Personal Data Protection Office
(Prezes Urzędu Ochrony Danych Osobowych – Prezes UODO)

Urząd Ochrony Danych Osobowych
ul. Stanisława Moniuszki 1A
00-014 Warszawa
Poland

You may also have the right to lodge a complaint with the competent supervisory authority in another EU/EEA Member State, particularly in the country of your habitual residence, place of work or place of the alleged infringement.

15. Children's Privacy

Our Services are not directed specifically at children.

We do not knowingly collect personal information from children where such processing would be prohibited by applicable law.

If you are a parent or legal guardian and believe that a child has provided us with personal information unlawfully, please contact us at biuro@ivelabs.pl.

16. Third-Party Websites

Our Services may contain links to websites or services operated by third parties.

We are not responsible for the privacy, security or content practices of independent third-party websites. We recommend reviewing their privacy policies before providing personal information.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our Services, technologies, business practices or applicable legal requirements.

When we update this Privacy Policy, we will publish the revised version on our website and update the "Last updated" date.

Where required by law, we will provide additional notice regarding material changes.