ACT BY KIRIN Foundation, based in Poland, acts as the data controller for personal data processed in connection with the BY KIRIN brand.
We process personal data only to the extent necessary to fulfill orders, provide customer service, and comply with legal obligations, including tax and accounting requirements. The scope of data includes identification and contact details such as name, shipping address, email address, phone number, and order-related information. Payment data is processed securely by certified third-party providers and is not stored directly by us.
The legal basis for processing is the performance of a contract and compliance with legal obligations, in accordance with GDPR. In certain cases, data may also be processed based on our legitimate interest, such as ensuring transaction security and preventing fraud.
Data may be shared with trusted partners necessary for service delivery, including payment providers, logistics operators, and technology providers such as Shopify Inc.. Due to the global nature of our operations, data may be transferred outside the European Economic Area, with appropriate safeguards in place, including Standard Contractual Clauses.
We retain personal data only for as long as necessary to fulfill the purposes described above, and where required by law. Data processed based on consent (e.g. marketing) is retained until such consent is withdrawn.
Individuals have the right to access, rectify, erase, or restrict the processing of their data, as well as the right to object and to lodge a complaint with a supervisory authority, such as UODO.
We use cookies to ensure proper website functionality, analytics, and marketing purposes.
For any privacy-related inquiries, please contact: xxx@
