Privacy policy

This Privacy Policy (hereinafter: "Policy") contains information on the processing of your personal data in connection with the use of the online store POSTPERFECT BODYSKINCARE, operating at the internet address https://www.postperfectbody.com (hereinafter: "Store").

All capitalized terms that are not otherwise defined in the Policy shall have the meaning given to them in the Terms and Conditions, available at: https://www.postperfectbody.com/terms-conditions

Personal Data Controller

The Controller of your personal data is POSTPERFECT BODYSKINCARE SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, with its registered office at UL. ZAJĘCZA 15, 00-351 WARSZAWA, entered in the Register of Entrepreneurs of the National Court Register under KRS number: 0001153061, NIP: 7011244376 (hereinafter: "Controller").

Contact with the Controller

In all matters related to the processing of personal data, you can contact the Controller using email: hi@postperfectbody.com

Measures to Protect Personal Data

The Controller uses modern organizational and technical safeguards to ensure the best possible protection of your personal data and guarantees that it processes them in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter: "GDPR"), the Act of 10 May 2018 on the protection of personal data and other provisions on the protection of personal data.

Information about the Processed Personal Data

Using the Store requires the processing of your personal data. Below you will find detailed information about the purposes and legal bases of processing, the period of processing, and whether providing them is obligatory or voluntary.

Purposes of Processing, Personal Data Processed, and Legal Bases

1. Conclusion and Performance of the Agreement for the Provision of the Account Service

• Personal data: Name and surname, e-mail address

• Legal basis: Article 6(1)(b) GDPR (necessary for performance of the Agreement)

• Processing period: Data processed until claims expire or account deletion

• Note: Providing data is voluntary but necessary to conclude and perform the contract, including creating an Account.

2. Conclusion and Performance of the Sales Agreement

• Personal data: Name and surname, e-mail address, telephone number, address of residence/business (street, house number, apartment number, city, postal code, country), delivery address (if different), optionally company and NIP (if Buyer is an Entrepreneur)

• Legal basis: Article 6(1)(b) GDPR (necessary for performance of contract)

• Processing period: Data processed until claims expire (typically 6 years in Poland)

• Note: Data necessary to conclude and perform the Sales Agreement for body care cosmetics.

3. Conclusion and Performance of a Paid Agreement for the Provision of Digital Goods

• Personal data: Name and surname, e-mail address, telephone number, address, optionally company and NIP (if Buyer is an Entrepreneur)

• Legal basis: Article 6(1)(b) GDPR (necessary for performance of contract)

• Processing period: Data processed until claims expire

• Note: Applies to digital products such as e-gift cards or digital guides.

4. Conclusion and Performance of a Free-of-Charge Agreement for the Delivery of Digital Goods

• Personal data: E-mail address

• Legal basis: Article 6(1)(b) GDPR (necessary for performance of contract)

• Processing period: Data processed until claims expire

• Note: For free digital content like skincare guides or newsletters.

5. Newsletter Agreement (Email and SMS Marketing)

• Personal data: E-mail address and/or telephone number, name (optional)

• Legal basis: Article 6(1)(a) GDPR (consent) and Article 6(1)(f) GDPR (legitimate interest for existing customers)

• Processing period: Until consent withdrawal or objection

• Note: We send information about new body care products, beauty tips, and promotional offers.

• SMS unsubscription: Reply "STOP" to any SMS or contact hi@postperfectbody.com

6. Conducting a Complaint Procedure

• Personal data: Name and surname, e-mail address, order details

• Legal basis: Article 6(1)(c) GDPR (legal obligation)

• Processing period: During complaint procedure and until statutory limitation periods expire

• Note: Required to handle product quality issues and customer service requests.

7. Conducting Verification Proceedings and Handling Appeals on Unacceptable Content

• Personal data: Name and surname, e-mail address

• Legal basis: Article 6(1)(c) GDPR (legal obligation under Digital Services Act)

• Processing period: Until matter is resolved and appeals process completed

• Note: For handling reports of inappropriate reviews or content.

8. Sending Email Notifications Related to Contract Performance

• Personal data: E-mail address, order information

• Legal basis: Article 6(1)(f) GDPR (legitimate interest)

• Processing period: Until contract fulfillment and statutory periods expire

• Note: Order confirmations, shipping notifications, delivery updates.

9. Handling Customer Inquiries

• Personal data: Name, e-mail address, other data in message

• Legal basis: Article 6(1)(f) GDPR (legitimate interest in customer service)

• Processing period: Until inquiry is resolved and reasonable time thereafter

• Note: Product questions, skincare advice, general customer support.

10. Sharing Reviews on Products

• Personal data: Name, optionally other data in review

• Legal basis: Article 6(1)(f) GDPR (legitimate interest in product feedback)

• Processing period: Until review removal or account deletion

• Note: Reviews about body care products and customer experiences.

11. Informing Customers about Product Availability

• Personal data: E-mail address

• Legal basis: Article 6(1)(f) GDPR (legitimate interest)

• Processing period: Until notification sent or customer objects

• Note: Notifications when out-of-stock cosmetics become available again.

12. Fulfillment of Tax Obligations

• Personal data: Name and surname/company, address of residence/registered office, NIP

• Legal basis: Article 6(1)(c) GDPR (legal obligation)

• Processing period: 5 years from end of relevant tax year

• Note: VAT invoices and accounting documentation as required by Polish tax law.

13. Fulfillment of Data Protection Obligations

• Personal data: Name and surname, contact details (email, correspondence address, phone number)

• Legal basis: Article 6(1)(c) GDPR (legal obligation)

• Processing period: Until expiry of limitation periods for data protection claims

• Note: Processing necessary to exercise your data protection rights.

14. Establishing, Investigating, or Defending Against Claims

• Personal data: Name and surname/company, e-mail address, address, PESEL, NIP, order history

• Legal basis: Article 6(1)(f) GDPR (legitimate interest in legal protection)

• Processing period: Until expiry of limitation periods (typically 6 years in Poland)

• Note: Legal disputes, warranty claims, payment issues.

15. Analysis of Your Activity in the Store

• Personal data: Date and time of visit, IP address, device OS type, approximate location, browser type, time spent, products viewed, visited pages and activities

• Legal basis: Article 6(1)(f) GDPR (legitimate interest in website improvement)

• Processing period: Up to 2 years or until objection

• Note: Understanding customer preferences for body care products and website optimization.

16. Store Administration and Security

• Personal data: IP address, server date/time, browser info, OS info (saved in server logs)

• Legal basis: Article 6(1)(f) GDPR (legitimate interest in website operation and security)

• Processing period: Up to 12 months or until objection

• Note: Website functionality, security monitoring, and technical troubleshooting.

Profiling

To create your marketing profile and provide personalized recommendations for body care products, the Controller processes your personal data automatically, including profiling. This will not have legal effects or significantly impact you.

Data used: Purchase history, browsing behavior, product preferences, skin type information (if provided) Legal basis: Article 6(1)(f) GDPR (legitimate interest in personalized marketing) Processing period: Until objection or account deletion Purpose: Recommending suitable skincare products, personalized beauty tips, targeted promotions

Recipients of Personal Data

Your personal data may be shared with external entities cooperating with the Controller, including:

• Hosting and IT service providers (website operation and data storage)

• Logistics and courier companies (DPD, InPost, Poczta Polska - for product delivery)

• Payment processors (PayU, PayPal, Stripe - for secure transactions)

• Email marketing platforms (for newsletter delivery and customer communication)

• Analytics providers (Google Analytics, Facebook Analytics - for website performance)

• Accounting and legal service providers (for tax compliance and legal matters)

• Customer service tools (helpdesk and chat platforms)

Data may also be transferred to public authorities if required by law, court judgment, or administrative decision.

Transfer of Personal Data to Third Countries

Some service providers may transfer your data outside the EU/EEA to countries including:

With adequacy decisions: United Kingdom, Canada, Israel, Japan, South Korea, New Zealand, Switzerland Under EU-US Data Privacy Framework: United States (for certified companies like Google, Meta) With Standard Contractual Clauses: Other countries as approved by the European Commission

All transfers are protected by appropriate safeguards. You can request information about specific transfers from hi@postperfectbody.com.

Your Rights

As a data subject, you have the following rights:

Right of Access (Article 15 GDPR)

You can request information about personal data we process about you, including processing purposes, data categories, and recipients.

Right to Rectification (Article 16 GDPR)

You can request correction of inaccurate personal data and completion of incomplete data.

Right to Erasure (Article 17 GDPR)

You can request deletion of your personal data when:

• Data is no longer necessary for original purposes

• You withdraw consent and there's no other legal basis

• Data has been unlawfully processed

• Legal obligation requires deletion

Right to Restriction of Processing (Article 18 GDPR)

You can request limitation of processing in specific circumstances, such as when contesting data accuracy.

Right to Data Portability (Article 20 GDPR)

You can receive your personal data in a structured, machine-readable format and transfer it to another controller.

Right to Object (Article 21 GDPR)

You can object to processing based on legitimate interests, including profiling and direct marketing.

Right to Withdraw Consent

Where processing is based on consent, you can withdraw it at any time without affecting prior lawful processing.

Right to Lodge a Complaint

You can file a complaint with the Polish Personal Data Protection Office (UODO) at:

• Address: ul. Stawki 2, 00-193 Warsaw, Poland

• Website: https://uodo.gov.pl

• Phone: +48 22 531 03 00

To exercise your rights, contact us at: hi@postperfectbody.com

Cookies Policy

What are Cookies?

Cookies are small text files stored on your device when visiting our website. They help us provide better service and understand how you use our site.

Types of Cookies We Use:

Essential Cookies (Always Active)

• Purpose: Website functionality, security, shopping cart

• Retention: Session or up to 12 months

• Cannot be disabled: Required for basic website operation

Analytics Cookies

• Google Analytics 4: Website traffic and user behavior analysis

• Retention: Up to 26 months

• Data: Page views, session duration, bounce rate, demographic information

Marketing Cookies

• Facebook Pixel: Tracking visits for targeted advertising on Facebook and Instagram

• Google Ads: Conversion tracking and remarketing

• Retention: Up to 90 days

• Purpose: Personalized ads for body care products

Functional Cookies

• Purpose: Remember your preferences, language settings, login status

• Retention: Up to 12 months

• Benefit: Enhanced user experience

Cookie Management

You can control cookies through:

1. Cookie banner on first visit to our website

2. Browser settings to block or delete cookies

3. Privacy settings in your user account

4. Opt-out links for specific services like Google Analytics

Note: Disabling cookies may limit website functionality, including the ability to place orders.

Third-Party Cookies

We use services from Google, Facebook, and other providers who may set their own cookies. Please review their privacy policies:

• Google: https://policies.google.com/privacy

• Facebook: https://www.facebook.com/privacy/policy

• PayPal: https://www.paypal.com/privacy

Data Retention Periods

Security Measures

We protect your personal data through:

• SSL encryption for all data transmission

• Secure payment processing through certified providers

• Access controls limiting employee access to necessary data

• Regular security audits and vulnerability assessments

• Data backup systems with encryption

• Staff training on data protection requirements

• Incident response procedures for potential breaches

Children's Privacy

Our body care products and services are intended for adults aged 16 and above. We do not knowingly collect personal data from children under 16. If you believe we have inadvertently collected such data, please contact us immediately.

International Customers

While we are based in Poland, we may serve customers throughout the EU/EEA. Your rights under GDPR remain the same regardless of your location within the EU/EEA.

Changes to This Privacy Policy

We may update this privacy policy to reflect:

• Changes in our business practices

• Legal or regulatory requirements

• New features or services

• Improved data protection measures

We will notify you of significant changes by:

• Email notification to registered users

• Prominent notice on our website

• Updated effective date on this policy

Contact Information

Data Protection Inquiries:

• Email: hi@postperfectbody.com

• Postal Address: POSTPERFECT BODYSKINCARE SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, UL. ZAJĘCZA 15, 00-351 WARSZAWA, Poland

Product Returns:

• Address: Parkowa 19, 29-105 Oleszno, Poland

Final Provisions

1. This Privacy Policy is governed by Polish law and EU regulations, particularly the GDPR.
   
   

2. This policy applies alongside our Terms and Conditions and other applicable legal provisions.
   
   

3. If any provision of this policy is found invalid, the remaining provisions remain in full force.
   
   

4. This Privacy Policy is effective from August 1st, 2025.
   
   

 

---

 

Last updated: August 1st, 2025

For questions about our body care products, skincare advice, or this privacy policy, please don't hesitate to contact us at hi@postperfectbody.com.