Legal information

Privacy and cookies policy

Effective from: November 6, 2026

This document explains what personal data we collect through this website, why we process it and what rights you have. We apply Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).

This is an English translation provided for convenience. In the event of any discrepancy, the Polish version prevails.

1. Data controller

The controller of your personal data is HELLORETAIL sp. z o.o., with its registered office in Warsaw, ul. Chłodna 51, 00-867 Warsaw, Poland, entered in the Register of Entrepreneurs of the National Court Register (KRS) under number 0000495559 by the District Court for the Capital City of Warsaw, 13th Commercial Division of the National Court Register, tax ID (NIP) 5272708709, statistical number (REGON) 147081964.

For any matters concerning personal data, contact us at piotr.eibl@helloretail.pl or by mail at our registered address. We have not appointed a data protection officer.

2. What data we collect

We process the data you provide to us yourself through the inquiry form, by email or by phone: your name, email address, phone number, company name and the information about your project included in your message. Providing data is voluntary, but without an email address or phone number we will not be able to respond to your inquiry.

The server hosting the website may technically record your IP address and browser data to keep the website secure and working properly.

3. Purposes and legal bases of processing

  • Responding to your inquiry and preparing a quote – steps taken at your request before entering into a contract (Article 6(1)(b) GDPR).
  • Contact with representatives of our clients and business partners – our legitimate interest in conducting business correspondence (Article 6(1)(f) GDPR).
  • Performance of a contract, if we conclude one (Article 6(1)(b) GDPR), and compliance with tax and accounting obligations (Article 6(1)(c) GDPR).
  • Website security and protection against abuse, and establishing, pursuing or defending legal claims – our legitimate interest (Article 6(1)(f) GDPR).

We do not send a newsletter and do not use form data for marketing without your separate consent. We do not make automated decisions and do not profile users.

4. How long we keep data

  • Inquiry data that did not lead to a contract – for 12 months from the last contact.
  • Data related to a concluded contract – for the term of the contract and then until the limitation period for claims expires.
  • Accounting documents – for the period required by tax law, usually 5 years from the end of the year in which the tax payment deadline expired.

5. Who we share data with

Data may only be shared with entities that help us run our business, under data processing agreements:

  • Cloudflare, Inc. – website hosting,
  • Resend, Inc. – delivering messages from the form to our mailbox,
  • LH.pl Sp. z o.o. (Kylos service) – email hosting,
  • accounting firm, law firm and other advisers – to the extent necessary for their services.

Cloudflare and Resend are based in the USA, so data may be transferred outside the European Economic Area. Such transfers take place on the basis of the European Commission’s adequacy decision on the EU–US Data Privacy Framework or the standard contractual clauses approved by the Commission. [TO BE VERIFIED before publication.]

Data may also be disclosed to public authorities where required by law.

6. Your rights

You have the right to:

  • access your data and receive a copy of it,
  • rectify inaccurate or incomplete data,
  • erasure of your data or restriction of its processing,
  • portability of data processed on the basis of a contract,
  • object to processing based on our legitimate interest,
  • lodge a complaint with the President of the Personal Data Protection Office (Urząd Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw, Poland).

To exercise your rights, write to us at the address given in section 1.

7. Cookies

This website does not use analytics or marketing cookies. Only strictly necessary cookies and similar technologies may be used, required for the website to work securely and properly – these do not require consent. Fonts are loaded from our own server, not from third-party services.

You can delete or block cookies at any time in your browser settings.

8. Changes to this policy

We may update this policy, for example when the law or the tools used on the website change. The current version is always available on this page, and the date at the top of the document shows when it took effect.