Privacy Policy

Last updated: 11.03.2025

1. Data Controller

The data controller is Eleven Flowers Studio, located at ul. Nocznickiego 25 lokal u12, 01-948 Warszawa, Polska, email: elevenflowerstudio@gmail.com.

2. Collected Data

We process the following personal data:

• Ordering person’s data: name, surname, email address, phone number.
• Recipient’s data: name, surname, delivery address, phone number.
• Technical data: cart ID, order ID, language preferences (stored in cookies).
• Payment data: not stored – payments are processed by Stripe.

3. Purpose and Legal Basis of Data Processing

We process data for:

• Order fulfillment – under Article 6(1)(b) of GDPR (contract execution).
• Customer service – under Article 6(1)(b) of GDPR.
• Marketing (newsletter, promotions) – under Article 6(1)(a) of GDPR (user consent).

4. Data Storage

Data is stored as long as necessary to fulfill its purpose. Order data may be stored for a legally required period.

5. Data Sharing

Data is only shared with:

• Payment service providers (Stripe) – to process payments.
• Courier companies – to deliver orders. We do not share data with third parties for marketing purposes.

6. User Rights

Users have the right to:

• access their data,
• rectify data,
• delete data,
• restrict processing,
• object to processing,
• data portability. To exercise your rights, contact us at elevenflowerstudio@gmail.com.

7. Data Security

• The website operates with HTTPS protocol.
• Data is stored on Vercel servers and Neon database.
• No passwords are stored, and no additional encryption is used.

8. Cookies

We use only essential cookies necessary for website operation. They do not require user consent. Cookies store:

• language preferences,
• cart ID,
• order ID. Users can manage cookies in their browser settings.

9. Contact and Complaints

For data-related issues, contact us at elevenflowerstudio@gmail.com. Users have the right to file a complaint with a supervisory authority (e.g., Data Protection Office).