Informativa sulla privacy

Privacy Policy

Last updated: 17 October 2026

1. About this policy

This policy explains what personal data we process when you visit or shop at sinkly.eu, why we process it, on what legal basis, and what rights you have under the General Data Protection Regulation (GDPR). We are the controller of your personal data — our full details are listed in section 11 at the end of this policy.

2. What data we process

  • Contact and delivery details: name, shipping and billing address, email address, phone number.
  • Order details: products purchased, order value, payment method and status, returns, withdrawals and complaints. We do not receive or store your full card details — payments are processed by our payment providers.
  • Communications: the content of messages you send us.
  • Device and usage data: IP address, browser and device information, pages visited and actions taken in our store (for example, adding a product to the cart or completing a purchase), collected through cookies and similar technologies (see section 4).

3. Why we process your data and on what legal basis

  • Processing and delivering your order, handling payments, withdrawals, returns and customer service — necessary to perform our contract with you (Art. 6(1)(b) GDPR).
  • Complying with legal obligations, such as keeping sales and accounting records and handling complaints — legal obligation (Art. 6(1)(c) GDPR).
  • Establishing, exercising or defending legal claims, preventing fraud and keeping our store secure — our legitimate interest (Art. 6(1)(f) GDPR).
  • Store analytics to understand how our store is used and improve it — your consent (Art. 6(1)(a) GDPR).
  • Advertising on Facebook and Instagram, including measuring the effectiveness of our ads and showing ads to people who have visited our store — your consent (Art. 6(1)(a) GDPR).
  • Sending marketing emails — your consent (Art. 6(1)(a) GDPR). 

Providing your data is voluntary. However, the data needed to process an order is required to conclude the contract — without it, we cannot fulfil your order.

4. Cookies and Meta advertising tools

We use the following types of cookies and similar technologies:

  • Strictly necessary — required for the store to work (for example, the cart, checkout and security). These do not require your consent.
  • Analytics — help us understand how visitors use the store. Used only with your consent.
  • Marketing — used for advertising on Meta platforms (see below). Used only with your consent.

You give or refuse consent through the cookie banner when you first visit our store. You can withdraw or change your consent at any time by deleting cookies for sinkly.eu in your browser settings – the cookie banner will then appear again on your next visit – or by contacting us using the details in section 11.

Meta Pixel and Conversions API. If you consent to marketing cookies, we use the Meta Pixel and Meta Conversions API, provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland. These tools send Meta information about your activity in our store (such as pages viewed, products added to the cart and purchases), together with device data (such as IP address and browser information) and, where available, your contact and address details – such as your email address, phone number, first and last name, city, postal code and country – in hashed (pseudonymised) form, so that Meta can match this information with your Meta account. We use this to measure the effectiveness of our ads and to show our ads to people who have visited our store or who are similar to our customers. This involves profiling, but it does not lead to any decisions that have legal or similarly significant effects on you.

We and Meta Platforms Ireland Limited are joint controllers for the collection and transmission of this data to Meta (Art. 26 GDPR). Meta is responsible for handling requests to exercise your rights regarding the data it stores after receiving it; you can also contact us. Any further processing by Meta is carried out under Meta’s sole responsibility and is described in the Meta Privacy Policy: https://www.facebook.com/privacy/policy. You can also manage your ad preferences in your Facebook and Instagram settings.

5. Who we share your data with

We share your data only to the extent necessary, with:

  • Shopify, which hosts our store and checkout;
  • payment providers (Shopify Payments, PayPal]);
  • delivery providers (Poczta Polska and partner postal operators in the destination country);
  • accounting and tax service providers;
  • Meta Platforms Ireland Limited, as described in section 4;
  • public authorities, where we are required to do so by law.

Shopify also uses certain data from your interactions with our store to provide its own services and features, for which it is responsible as a separate controller. You can learn more and exercise your rights regarding this processing at https://privacy.shopify.com/en.

6. Transfers outside the European Economic Area

Some of our service providers, such as Shopify and Meta, may process your data outside the European Economic Area, including in Canada and the United States. Such transfers are based on European Commission adequacy decisions (including the EU–US Data Privacy Framework for certified companies) or on Standard Contractual Clauses approved by the European Commission.

7. How long we keep your data

  • Order data: for the duration of the contract and then for as long as required by tax and accounting law — generally 5 years from the end of the calendar year in which the tax payment deadline expired — and in any case until the limitation period for any claims has expired.
  • Data processed on the basis of consent: until you withdraw your consent (for cookies, no longer than their set lifetime).
  • Messages: for as long as needed to handle your request and any related claims.

8. Your rights

You have the right to access your data, to have it corrected or erased, to restrict its processing, and to data portability. You have the right to object at any time to processing based on our legitimate interest. Where processing is based on your consent, you can withdraw it at any time without affecting the lawfulness of processing carried out before the withdrawal. You can unsubscribe from marketing emails using the link included in every email.

To exercise your rights, contact us using the details in section 11. You also have the right to lodge a complaint with a data protection supervisory authority — in Poland, the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, or the authority in the EU country where you live or work.

9. Children

Our store is not intended for children, and we do not knowingly collect personal data from children under 16.

10. Changes to this policy

We may update this policy from time to time. The current version is always available on this page, with the date of the last update shown at the top.

11. Data controller

Sinkly is a trading name of:
Mrozart Jakub Mrozowski
Nasypowa 3/51, 81-177 Gdynia, Poland
Tax ID (NIP): 9581767020
Registered in the Central Register and Information on Economic Activity (CEIDG), Poland
Email: contact@sinkly.eu
Phone: +48515906043