Privacy Policy

§1. Personal Data Administrator

The administrator of customers' personal data is Asia deli Asian delicacies (hereinafter: the "Store"). For matters concerning personal data protection, you can contact us electronically via the contact form available on the Store's website.

§2. Legal Basis for Data Processing

Personal data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) and Polish personal data protection regulations.

§3. Scope and Purpose of Data Processing

The Store processes the following personal data of customers:

• Identification data: first name, last name
• Contact data: email address, phone number
• Address data: delivery address and billing address

Data is processed for the following purposes:

• order fulfillment and sales contract execution (Art. 6(1)(b) GDPR)
• fulfillment of legal obligations, including tax obligations (Art. 6(1)(c) GDPR)
• handling complaints and returns (Art. 6(1)(b) GDPR)
• direct marketing of own products and services – only with the customer's consent (Art. 6(1)(a) GDPR)

§4. Data Retention Period

Personal data is stored for the period necessary to achieve the purposes for which it was collected:

• order-related data – for 5 years from the end of the tax year in which the transaction took place
• marketing data – until consent is withdrawn

§5. Customer Rights

Every customer has the right to:

• access their personal data
• rectify inaccurate data
• erase data ("right to be forgotten")
• restrict data processing
• data portability
• object to data processing
• withdraw consent at any time (without affecting the lawfulness of processing before withdrawal)

To exercise the above rights, please contact the Store electronically.

§6. Data Sharing

Customers' personal data may be transferred to:

• courier and postal companies – for delivery purposes
• payment operators – for transaction processing
• IT service providers (including Shopify Inc.) – for operating the store platform
• state authorities – based on applicable legal provisions

Data is not sold or shared with third parties for marketing purposes without the customer's consent.

§7. Cookies

The Store uses cookies to ensure the proper functioning of the service, traffic analysis, and content personalization. The customer can manage cookie settings in their web browser.

§8. Transfer of Data Outside the EEA

Due to the use of Shopify Inc. (USA) services, data may be transferred outside the European Economic Area. Shopify uses standard contractual clauses approved by the European Commission, ensuring an adequate level of data protection.

§9. Right to Lodge a Complaint

The customer has the right to lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, if they believe that the processing of their personal data violates GDPR provisions.

§10. Changes to the Privacy Policy

The Store reserves the right to make changes to this Privacy Policy. Customers will be informed of any changes by publishing the updated version on the Store's website.