Privacy policy

Privacy Policy

Effective Date: May 16, 2026 Last Updated: May 16, 2026

This Privacy Policy describes how Viter — Denys Hryniuk ("we," "us," or "our") collects, uses, and shares your personal information when you visit, use, or make a purchase from vitershop.com (the "Site"). By using the Site or providing us with your information, you agree to the practices described here. If you do not agree, please do not use the Site.

The data controller is Viter — Denys Hryniuk, Synów Pułku 4/10, Warsaw, Poland.

1. Information We Collect

Information you provide to us:

Contact details: name, email address, phone number, billing and shipping address.
Order information: products purchased, transaction details, and payment method (we do not store full card numbers).
Account information: login credentials, if you create an account.
Communications: messages you send us through email, contact forms, reviews, or live chat.
Marketing preferences: subscription status for newsletters or promotional emails.

Information collected automatically:

Device and connection data: IP address, browser type, operating system, device identifiers.
Usage data: pages visited, time on site, links clicked, referring website.
Location data: approximate location derived from your IP address.
Cookies and similar technologies (see Section 5).

Information from third parties:

Payment processors (e.g., Shopify Payments, PayPal) confirm transaction details.
Shipping carriers share delivery status.
Marketing and analytics providers (e.g., Meta, Google, TikTok) may share audience and campaign data.
Social platforms share data when you interact with our content there.

2. How We Use Your Information

We use your information to:

Process and fulfill your orders, including payment, shipping, and customer support.
Communicate with you about orders, account activity, and customer service.
Send marketing communications, with your consent where required.
Personalize your experience and recommend relevant products.
Detect, prevent, and respond to fraud, abuse, or security incidents.
Improve our Site, products, and services through analytics.
Comply with legal obligations and enforce our Terms of Service.

3. How We Share Your Information

We do not sell your personal information for money. We share information only with:

Service providers that help us operate our business: Shopify (e-commerce platform), payment processors, fulfillment and shipping partners, email marketing tools, customer support tools, and analytics providers.
Advertising partners, for targeted advertising and measurement (you can opt out — see Section 6).
Legal authorities, when required by law, court order, or to protect our rights or the safety of others.
Business transfers, in case of merger, acquisition, sale of assets, or similar transaction.
With your consent, for any other purpose disclosed at the time of collection.

4. Legal Bases for Processing (GDPR)

We are based in Poland (European Union), and the General Data Protection Regulation (GDPR) applies to our processing of personal data. We process your personal information based on:

Contract — to fulfill your order and provide services.
Legitimate interests — to operate, secure, and improve our business.
Consent — for marketing, certain cookies, and other optional uses.
Legal obligation — to comply with applicable laws.

5. Cookies and Tracking Technologies

We use cookies, pixels, tags, and similar technologies to:

Keep your shopping cart and session active.
Remember your preferences.
Measure site performance and traffic.
Show you relevant ads on third-party platforms.

You can control cookies through your browser settings or through our cookie banner where available. Blocking some cookies may affect Site functionality.

6. Your Privacy Rights

Depending on where you live, you may have the right to:

Access the personal information we hold about you.
Correct inaccurate information.
Request deletion of your information ("right to be forgotten").
Object to or restrict certain processing.
Withdraw consent, where processing is based on consent.
Data portability — receive your data in a structured, machine-readable format.
Opt out of the sale or sharing of personal information, including targeted advertising.
Lodge a complaint with a supervisory authority. For users in Poland or the EU, this is the Personal Data Protection Office (Urząd Ochrony Danych Osobowych — UODO), ul. Stawki 2, 00-193 Warsaw, www.uodo.gov.pl.

To exercise these rights, contact us at support@vitershop.com. We may need to verify your identity before fulfilling your request.

California Residents (CCPA / CPRA): You have specific rights regarding the personal information we collect, including the right to know, delete, correct, and opt out of "sale" or "sharing." We do not sell personal information for money, but some advertising-related data sharing may qualify as "sharing" under California law. You can opt out by contacting us at the email above.

7. Data Retention

We keep your personal information for as long as necessary to provide services, comply with legal obligations, resolve disputes, and enforce our agreements. Order and transaction records are typically retained for several years to meet tax, accounting, and consumer-protection requirements under Polish and EU law.

8. Data Security

We use industry-standard safeguards, including encryption in transit (SSL/TLS), secure payment processing through PCI-compliant providers, and access controls. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. International Data Transfers

We are based in Poland (European Union). Some of our service providers (e.g., Shopify, payment processors, analytics tools) may be located in the United States or other countries outside the EU/EEA. Where required, we use appropriate safeguards (such as Standard Contractual Clauses approved by the European Commission) for international transfers.

10. Children's Privacy

The Site is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.

11. Third-Party Links

The Site may contain links to third-party websites or services. We are not responsible for their privacy practices. Please review their privacy policies before sharing any information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The "Last Updated" date at the top will reflect the most recent revision. Material changes will be communicated through the Site or by email where appropriate. Continued use of the Site after changes constitutes acceptance.