Privacy and Cookies Policy

1. General Provisions & Data Controller

1. The Data Controller of the personal data collected through the Online Store available at justynahrynkiewicz.com is Justyna Hrynkiewicz, conducting business activity at the registered address: 52 Waulkmill Crescent, AB16 7QP Aberdeen, United Kingdom (hereinafter referred to as the “Controller” or “Seller”).
2. The Controller protects the privacy of website users and Customers and processes personal data strictly in accordance with the UK GDPR (United Kingdom General Data Protection Regulation) and the Data Protection Act 2018.
3. For any questions, data access requests, or to exercise your privacy rights, you can contact the Controller directly via email at: info@justynahrynkiewicz.com.

2. Types of Personal Data Collected

We collect and process the following personal data depending on how you interact with the Online Store:

• Account Registration: First and last name, email address, physical address.
• Placing an Order: First and last name, billing address, delivery address, email address, phone number (or WhatsApp number).
• Contact & Support: First and last name, email address, and any personal information you choose to include in your message or session bookings.
• Automated Data Processing (Cookies & Server Logs): IP address, browser type, operating system, pages visited, time and date of visits, and device identifiers.

3. Purposes and Legal Bases for Data Processing

Under the UK GDPR, we must have a lawful basis to process your personal data. We rely on the following bases:

• Performance of a Contract (Article 6(1)(b) UK GDPR): Necessary to process your data to fulfill your orders for Physical Products (bracelets, books), Digital Content (e-books, meditations, webinars), or to deliver online consultation/coaching sessions.
• Compliance with Legal Obligations (Article 6(1)(c) UK GDPR): Required to process and store records for financial, tax, and accounting purposes in accordance with United Kingdom laws.
• Legitimate Interests (Article 6(1)(f) UK GDPR): Necessary to respond to your inquiries via email or WhatsApp, to maintain website security, prevent fraud, handle customer complaints, and establish or defend legal claims.
• Consent (Article 6(1)(a) UK GDPR): Used if you explicitly sign up for a newsletter or agree to non-essential analytical/marketing cookies. You have the right to withdraw your consent at any time.

4. Data Sharing and Recipients

To provide our services, your personal data may be shared with trusted third-party service providers who act on our behalf. These include:

• Payment Processors: …
• Delivery and Postal Services: Courier and postal operators (such as InPost or regional UK carriers) to ship your physical items.
• Technical Providers: Hosting companies, IT administrators, and software providers hosting the Online Store infrastructure.
• Professional Advisors: Accountants, legal consultants, or auditors if strictly required for legal and tax compliance.

5. International Data Transfers

1. Some of our external service providers (e.g., payment operators, IT hosting platforms) are based or operate outside the United Kingdom, particularly within the European Economic Area (EEA).
2. All transfers of personal data outside the UK are conducted securely and in full compliance with the UK GDPR. We ensure appropriate safeguards are in place, such as relying on UK Adequacy Regulations (e.g., transfers to the EU/EEA) or utilizing Standard Contractual Clauses (SCCs) and the UK International Data Transfer Addendum (IDTA).

6. Data Retention Period

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including:

• Customer Accounts: For the duration of your active registration until you request account deletion.
• Order and Contract Execution: For the duration of the contract performance, plus the statutory period required to handle claims or potential returns.
• Tax and Financial Records: For a minimum of 6 years following the end of the relevant tax year, to comply with UK statutory bookkeeping regulations.
• Inquiries and Correspondence: For a period of up to 1 year after the conclusion of communication, unless the data relates to a continuing legal dispute.

7. Your Statutory Rights (Your Data Protection Rights)

Under the UK GDPR, you possess significant rights regarding your personal data:

• Right of Access: You can request copies of the personal data we hold about you.
• Right to Rectification: You can ask us to correct or complete inaccurate or incomplete data.
• Right to Erasure (“Right to be Forgotten”): You can request that we delete your personal data under certain conditions (e.g., if the data is no longer necessary).
• Right to Restrict Processing: You can ask us to restrict the processing of your data in specific scenarios.
• Right to Data Portability: You can request the transfer of your data to another organization or directly to you in a structured, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data based on legitimate interests or direct marketing.

To exercise any of these rights, please contact us at info@justynahrynkiewicz.com. We will respond to your request within one calendar month.

If you are unsatisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection (www.ico.org.uk).

8. Cookies Policy

1. The Online Store uses “cookies” – small text files saved on your end-device (computer, smartphone, tablet) when you browse the website.
2. We use two main categories of cookies:
3. Essential Cookies: Necessary for the website to function properly, enabling basic features like page navigation, cart management, and secure account access. These cookies do not require your consent.
4. Non-Essential Cookies (Analytical/Marketing): Used to gather anonymous statistical data about traffic and usage patterns, helping us improve the user experience. These are only deployed if you grant explicit consent via our cookie banner.
5. You can manage or disable cookies at any time via your internet browser settings. However, disabling essential cookies may impact the functionality and accessibility of the Online Store.

9. Final Amendments

The Controller reserves the right to update this Privacy Policy at any time to reflect changes in legal regulations or store operations. The latest version will always be published on this webpage.

Last update: 17.09.2026 r.