Privacy Policy

Effective date: 01.04.2026
Website: Laduella
Domain: laduella.pl
Contact email: info@laduella.pl

1. Who we are

This Privacy Policy explains how personal data is collected, used, stored, and protected when you use the Laduella website, create an account, place an order, contact us, use Facebook Login, or make a payment through our payment partners.

Data Controller:
IEVGEN STRASHCHENKO
NIP: 5223335102
REGON: 541752355
ul. Wacława Borowego 13 lok. 114/122
01-357 Warszawa
Poland

Contact regarding privacy matters:
info@laduella.pl

2. What data we collect

Depending on how you use our website, we may collect the following categories of personal data:

A. Data you provide directly

full name
billing and shipping address
email address
phone number
order details
payment-related information required to process an order
any information you send to us in messages, forms, or customer support requests

B. Account and login data

If you register on the website or sign in using Facebook Login, we may collect:

your name
your email address
your public profile information made available by Meta
your unique login identifier associated with the sign-in method
any additional data only if you clearly authorize access to it

Meta requires developers to explain what data is collected from users and how it is used, and to provide a way for users to request deletion of their data.

C. Technical and usage data

We may automatically collect:

IP address
browser type and version
device type
operating system
referral source
pages visited
date and time of access
cookie and similar tracking data

3. How we use personal data

We process personal data for the following purposes:

to create and manage user accounts
to process and fulfill orders
to arrange delivery
to provide customer support
to communicate about orders, returns, complaints, and account issues
to process payments and verify transactions
to detect fraud, abuse, and unauthorized activity
to comply with legal and tax obligations
to improve website performance, usability, and security
to send marketing communications, where permitted by law or based on your consent
to enable and maintain login through Facebook Login

4. Legal bases for processing

Where the GDPR applies, we process personal data on one or more of the following legal bases:

performance of a contract — when processing is necessary to fulfill your order or manage your account
legal obligation — when we must keep records for tax, accounting, consumer, or anti-fraud purposes
legitimate interests — for security, fraud prevention, website improvement, defense of claims, and customer service
consent — where required, for example for certain cookies or marketing communications

5. Payments and Przelewy24

If you choose to pay using Przelewy24, your personal data necessary to complete the payment may be transferred to PayPro S.A., the operator of the Przelewy24 payment service.

For payers using Przelewy24, PayPro S.A., Pastelowa 8, 60-198 Poznań, Poland is identified by Przelewy24 as the controller of payer data it receives for payment services. Przelewy24 also states that payer data may be processed for payment handling, communication about payment status, complaint handling, fraud prevention, and AML/CFT compliance. Contact emails published by Przelewy24 include ado@przelewy24.pl and iod@przelewy24.pl.

Przelewy24 also states that merchants are required to inform payers that their personal data is shared with Przelewy24 and to indicate Przelewy24 as the controller of the received data.

We do not store full payment card details on our servers unless explicitly handled by a compliant payment provider environment. Przelewy24 states that it follows PCI DSS standards and that bank access details are entered on secured bank websites.

6. Facebook Login

If you use Facebook Login on our website:

we use the data provided through Meta only to authenticate you, create or access your account, and support related account features
we do not request data we do not need
we do not sell Facebook profile data
we use the data only as described in this Privacy Policy and as permitted by applicable law and Meta Platform rules

Meta requires that users have access to a privacy policy explaining what data is collected and used, and that users be able to request deletion of their app data.

7. Data deletion instructions for Facebook Login users

If you created an account or used our website through Facebook Login, you may request deletion of your account data at any time.

To request deletion of your data, you can:

send an email to info@laduella.pl with the subject line: Data Deletion Request
include enough information for us to identify your account, such as your email address used on the site
optionally state that your request concerns data connected with Facebook Login

After verifying your request, we will delete or anonymize your data unless we must keep certain information for legal, tax, fraud-prevention, or claims-related reasons.

You may also remove our app or website connection from your Facebook account settings. Meta states that users can request deletion after removing an app from the Apps and Websites settings, and that the deletion URL may point to a relevant section of the privacy policy or to a dedicated deletion instructions page.

8. Who we share data with

We may share personal data with:

payment providers and payment operators, including Przelewy24 / PayPro S.A.
delivery and logistics providers
hosting, IT, and website maintenance providers
analytics and security service providers
accounting, tax, and legal advisors
public authorities where required by law

We share only the data that is reasonably necessary for the relevant purpose.

9. International transfers

Some of our service providers may process data outside your country or outside the European Economic Area. Where such transfers take place, we take steps required by applicable law to ensure an adequate level of protection, such as using contractual safeguards or relying on recognized legal transfer mechanisms.

10. How long we keep data

We keep personal data only for as long as necessary for the purposes described in this Privacy Policy, including:

for the duration of your account
for the time needed to fulfill orders and provide support
for the retention periods required by tax, accounting, and consumer law
for as long as needed to resolve disputes, prevent fraud, or defend legal claims

When data is no longer needed, we delete, anonymize, or securely archive it as required by law.

11. Your rights

Where the GDPR applies, you may have the right to:

access your personal data
rectify inaccurate data
erase your data
restrict processing
object to processing based on legitimate interests
withdraw consent at any time, where processing is based on consent
receive your data in a portable format, where applicable
lodge a complaint with the competent supervisory authority

Przelewy24’s published payer GDPR notice also confirms rights such as access, rectification, erasure, restriction, objection, and complaint to a supervisory authority.

To exercise your rights, contact us at: info@laduella.pl

12. Cookies and similar technologies

We use cookies and similar technologies to:

ensure the website works properly
keep users logged in
remember preferences
analyze website traffic and performance
improve security
support marketing, where applicable and legally permitted

You can manage cookies through your browser settings. Disabling some cookies may affect website functionality.

13. Security

We use reasonable technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

14. Children’s privacy

Our website is not intended for children under the age at which they can lawfully enter into online transactions under applicable law. We do not knowingly collect personal data from children without a valid legal basis.

15. Third-party services and links

Our website may contain links to third-party websites or use third-party tools. Their privacy practices are governed by their own policies, and we encourage users to review those policies separately.