Privacy Policy

This policy explains how Mieczysław Nylec, trading as M.B. Mieczysław Nylec, ul. Sandomierska 55, 39-200 Dębica, Poland, VAT ID (NIP) PL8721319799, REGON 180114669 (“we”) handles personal data when you visit this website or place an order. We are the data controller. Contact: forged.art.studio@gmail.com, phone +48 883 778 779.

What we collect

When you order or write to us: your name, email address, phone number, billing and shipping address, and the details of your order. When you browse: technical data such as your IP address and browser type, and cookies needed for the cart and checkout.

Why we use it

To process and ship your order, to send order updates, to answer your questions, and to meet our accounting and tax obligations. The legal bases are the contract with you, our legal obligations, and our legitimate interest in running and securing the store.

Who receives it

Only the providers we need to complete your order: our hosting provider, payment providers (for example PayPal or Stripe, if you pay through them), carriers and freight forwarders, and our accountant. When a shipment goes outside the European Economic Area, the carrier receives the data needed for delivery and customs.

Our contact form is protected against spam by Cloudflare Turnstile (Cloudflare, Inc., USA). When you open a page with the form, Cloudflare checks technical data such as your IP address and browser features to tell people from bots. Cloudflare acts as our processor; transfers to the USA are based on the EU-US Data Privacy Framework and standard contractual clauses. Messages you send through the form are delivered to our email inbox and a copy is stored in our website database.

How long we keep it

Order and invoice data for as long as tax law requires (in Poland, generally 5 years from the end of the year of the sale). Correspondence for as long as needed to handle your request.

Your rights

You can ask us for access to your data, correction, deletion, restriction or transfer, and you can object to processing based on legitimate interest. You can also complain to the Polish data protection authority (Prezes UODO, uodo.gov.pl) or to the authority in your country.

Cookies

We use cookies that are needed for the cart, checkout and login. If we add analytics or marketing cookies, we will ask for your consent first.