01 Who we are
This Privacy Policy applies to the online store operated at r5d5.com and describes how we collect, use, and protect your personal data. The data controller is:
KRS: 0000558156 · NIP: 1231298508 · REGON: 361546469
VAT: PL1231298508 · EORI: PL123129850800000
Email: sales@r5d5.com · Phone: +48 574 686 916
CEO: Serhiy Pekarovskii
We are the data controller responsible for your personal data under the General Data Protection Regulation (GDPR) and applicable Polish data protection law.
02 What data we collect
We collect and process the following categories of personal data:
Account & order data
Name, email, billing/shipping address, phone number, order history, payment method (card type & last 4 digits).
Technical & usage data
IP address, browser type, device info, pages visited, referring URL, cookies and similar tracking technologies.
Communication data
Messages via contact form, email, WhatsApp, Viber, Telegram, or other channels.
Newsletter data
Email address and consent timestamp if you subscribe to our newsletter.
We do not collect sensitive personal data (special categories under GDPR Art. 9) and do not knowingly collect data from children under 16.
03 Why we process your data
We only process your personal data where we have a valid legal basis under GDPR:
| Purpose | Legal basis (GDPR) |
|---|---|
| Processing and fulfilling your order | Art. 6(1)(b) — contract performance |
| Sending order confirmations and delivery updates | Art. 6(1)(b) — contract performance |
| Handling returns, warranty claims, and support | Art. 6(1)(b) — contract performance |
| Complying with tax and accounting obligations | Art. 6(1)(c) — legal obligation |
| Sending marketing emails (newsletter) | Art. 6(1)(a) — consent |
| Improving website performance and analytics | Art. 6(1)(f) — legitimate interests |
| Preventing fraud and ensuring site security | Art. 6(1)(f) — legitimate interests |
04 Who we share your data with
We do not sell your personal data. We share it only where necessary with trusted service providers acting as data processors:
- BigCommerce Inc. — e-commerce platform hosting the store (USA; Standard Contractual Clauses apply)
- Payment processors — to securely handle card and online payments (PCI-DSS compliant)
- Shipping carriers — courier and postal services for order delivery across Europe
- Email service providers — for transactional emails and newsletters
- Analytics providers — aggregate website usage analytics (e.g. Google Analytics)
- Accounting & tax advisors — as required by Polish law
All processors are bound by data processing agreements ensuring GDPR-compliant handling. Where data is transferred outside the EEA, appropriate safeguards (Standard Contractual Clauses or adequacy decisions) are in place.
05 How long we keep your data
Retention periods depend on the purpose of processing:
- Order and transaction records — 5 years from the end of the tax year (Polish accounting law)
- Warranty and complaint records — 2 years after the warranty period expires
- Account data — for as long as your account is active, plus up to 3 years after last activity
- Newsletter subscriptions — until you unsubscribe or withdraw consent
- Cookies and analytics data — as defined by cookie settings (typically 13–26 months)
After the applicable retention period, your data is securely deleted or anonymised.
06 Cookies
We use cookies and similar technologies on r5d5.com for the following purposes:
- Essential cookies — required for the shopping cart, login session, and secure checkout to function. These cannot be disabled.
- Analytics cookies — help us understand how visitors use the site so we can improve it. Used only with your consent.
- Marketing cookies — used to show relevant ads on third-party platforms (Facebook, Google). Used only with your consent.
You can manage or withdraw consent for non-essential cookies at any time via your browser settings or our cookie consent banner.
07 Your rights under GDPR
As a data subject in the European Economic Area, you have the following rights:
- Access: Request a copy of your personal data we hold
- Rectification: Correct inaccurate or incomplete data
- Erasure: "Right to be forgotten" — delete your data
- Restriction: Limit processing in certain circumstances
- Portability: Receive your data in a machine-readable format
- Objection: Object to processing based on legitimate interests or direct marketing
To exercise any right, email us at sales@r5d5.com. We will respond within 30 days.
08 Data security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our store uses SSL/TLS encryption for all data transmission. Payment data is handled by PCI-DSS certified processors — we do not store full card numbers on our systems.
09 Third-party links
Our website contains links to external platforms including Facebook, Instagram, WhatsApp, Telegram, and Viber. These services operate under their own privacy policies and we are not responsible for how they collect or process your data. We encourage you to review their privacy policies before interacting with them.
10 Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email. Your continued use of our store after such changes constitutes acceptance of the updated policy.
