Privacy Policy
Last Updated: October 21, 2025
AIVORASHOP operates this store and website, including any related information, content, features, tools, products, and services, to provide the User with a customized shopping experience (“Services”). The AIVORASHOP store is powered by Shopify technology, which allows us to offer the Services to the User. This Privacy Policy describes how we collect, use, and disclose the personal information of the User when visiting and using the Services, making purchases through them, or communicating with us in any other way. In case of any conflict between our Terms of Service and this Privacy Policy, this Privacy Policy shall govern the collection, processing, and disclosure of the User’s personal information.
Please read this Privacy Policy carefully. By accessing and using the Services, the User confirms they are aware of and understand the principles for collecting, using, and disclosing their data as described in this Privacy Policy.
Personal Information We Collect and Process
When using the term “personal information”, we refer to information that identifies the User or can reasonably be linked to them. Personal information does not include information collected anonymously or information that has been anonymized in a way that prevents the User’s identification or linkage to them. We may collect or process the following categories of personal information, including inferences drawn from them, depending on how the User uses the Services and the User’s place of residence, and to the extent permitted or required by applicable law:- Contact Data includes name, address, billing address, shipping address, phone number, and email address.
- Financial Data includes credit card numbers, debit card numbers and financial account numbers, payment card details, financial account details, transaction details, payment methods, payment confirmations, and other payment data.
- Account Information includes username, password, security questions, preferences, and settings.
- Transaction Information includes items that the User views, adds to the cart, adds to a wishlist, purchases, returns, exchanges, or cancels, as well as past transactions.
- Communication with Us includes information provided in communications with us, e.g., when sending a customer service inquiry.
- Device Information including information about the customer’s device, browser, or network connection, IP address, and other unique identifiers.
- Usage Information including information about the customer’s interaction with the Services, including how and when they use or navigate the Services.
Sources of Personal Information
We may collect personal information from the following sources:- Directly from the customer including when creating an account, visiting or using our Services, communicating with us, or providing personal information to us in any other way.
- Automatically through the Services including from the User’s device when using our products or services or visiting our websites, and through the use of cookies and similar technologies.
- From service providers including when we collaborate with them to support certain technology and when they collect or process the User’s personal information on our behalf.
- From our partners or other third parties
How We Use Customer Personal Information
Depending on how you interact with us and the Services you use, we may use your personal information for the following purposes:- Providing, customizing, and improving the Services. We use the User’s personal information to provide the Services, fulfill orders, manage the account, and provide technical support.
- Marketing and advertising. We may use the User’s personal information for marketing and promotional purposes such as sending newsletters, special offers, and personalized advertisements.
- Security and fraud prevention. We use the User’s personal information to authenticate their account, detect and prevent fraud, and protect our rights and property.
- Communication with the User. We use the User’s personal information to provide customer service, respond to inquiries, and send notifications about order status or service updates.
- Legal reasons. We use the User’s personal information to ensure compliance with applicable law, regulations, court orders, and governmental requests.
How We Disclose Personal Information
In certain circumstances, we may disclose the User’s personal information to third parties for legitimate purposes, in accordance with this Privacy Policy. These circumstances may include: service providers, business partners, legal entities in response to legal processes, and as part of corporate transactions (e.g., mergers or acquisitions).Relationship with Shopify
The Services are hosted by Shopify, which collects and processes personal information regarding the User’s access to and use of the Services. We use Shopify as an e-commerce platform. To learn more about how Shopify uses personal information and about any rights the User may have, please visit the Shopify Consumer Privacy Policy section.Payment Data Processing
For the purpose of executing payments for orders, the Administrator may share necessary personal data (name, surname, email address, transaction data) with payment service providers. The entity entrusted with the processing of personal data for the purpose of handling card and bank transfer payments is: Polish National Payment Institution Bank PKO BP S.A. (iMoje brand) Full Name: Bank Polska Kasa Opieki Spółka Akcyjna Registered Address: ul. Grzybowska 53/57, 00-844 Warszawa, PolandData Retention Period
Data processed in connection with the execution of payments are stored for the period necessary to:- Properly complete the transaction and settle accounts between the parties.
- Comply with accounting and tax obligations (in accordance with legal provisions, usually for 5 years, counting from the end of the calendar year in which the tax payment deadline expired).
- Pursue or defend against claims (for the period specified by law for the statute of limitations on claims).
Automated Decision Making and Profiling
In connection with the use of our payment services, your personal data may be processed in an automated manner, including through profiling. Purpose of Profiling: Profiling may be used by the payment service provider (Bank PKO BP S.A.) for the purpose of:- Preventing fraud and abuse (e.g., analysis of transaction patterns to verify risk).
- Customizing offers and services to individual customer preferences (if the Bank offers such a service).
- The result of profiling may be, for example, blocking or suspending a suspicious transaction for authenticity verification, as part of safeguarding a legitimate legal interest.
- Profiling does not produce legal effects against you nor significantly affect your situation, apart from the aforementioned security measures.
User Rights and Choices
Depending on their place of residence, the User may have some or all of the following rights related to their personal information. However, these rights are not absolute:- Right to Access/Information. The User may have the right to access the personal information we hold about them.
- Right to Deletion. The User may have the right to request the deletion of the personal information we hold about them.
- Right to Correction. The User may have the right to request the correction of inaccurate personal information we hold about them.
- Right to Data Portability. The User may have the right to obtain a copy of their personal information in a structured, commonly used format.
- Right to Opt-Out of Sale or Sharing for Targeted Advertising. Depending on their place of residence, the User may have the right to opt-out of the “sale” or “sharing” of their data.
- Managing Communication Preferences. We may send the User promotional emails. The User can unsubscribe at any time.
- Objection to Data Processing and Restriction of Data Processing: The User has the right to ask us to stop or restrict the processing of their personal information for certain purposes (for UK/EEA residents).
- Withdrawal of Consent: In cases where we need the User’s consent to process their personal information, the User has the right to withdraw that consent (for UK/EEA residents).