In force from 5 October 2026. This is a translation for convenience — in case of any discrepancy, the Polish version is binding.

1. Who controls your data

The controller of personal data collected through sharkotea.com is Katarzyna Osmólska, ul. Jasnodworska 3B/223, 01-745 Warsaw, Poland, tax ID (NIP) 5222705620.

For any data protection matters write to kasia@sharkotea.com.

2. What we collect

When you buy: name, e-mail address, invoice details (if you need one), order and payment information.

When you create an account: e-mail address and password (stored encrypted).

When you use the contact form: name, e-mail address, subject and message.

Automatically: IP address, browser and device information, cookie data.

We do not collect special category data and we do not ask for anything that is not needed to complete your order.

3. Why we process it

  • Fulfilling your order and delivering the pattern — Article 6(1)(b) GDPR (performance of a contract).
  • Managing your account — Article 6(1)(b) GDPR, until you delete the account.
  • Issuing and keeping accounting records — Article 6(1)(c) GDPR, for 5 years from the end of the tax year.
  • Answering messages — Article 6(1)(f) GDPR (legitimate interest in correspondence).
  • Handling complaints — Article 6(1)(c) and (f) GDPR.
  • Establishing or defending legal claims — Article 6(1)(f) GDPR.
  • Website visit statistics — Article 6(1)(f) GDPR (legitimate interest: improving the shop). Statistical data is kept for 14 months.

4. Who we share it with

  • Hosting provider — cyber_Folks S.A. (Poland), which stores the website and database.
  • Payment provider — PayU and PayPal. The provider is a separate controller of payment data.
  • E-mail service — cyber_Folks S.A. (Poland), which hosts the mailbox we send messages from.
  • Accountant — Biuro Rachunkowe Saldo Wioleta Żakowska.
  • Analytics provider — Google Ireland Limited (Google Analytics 4), website visit statistics.

We never sell your data or share it with third parties for marketing purposes.

Through Google Analytics, data may be transferred to Google LLC in the United States. Google LLC participates in the Data Privacy Framework, which the European Commission recognised on 10 July 2023 as providing an adequate level of protection. Apart from this case, we do not transfer data outside the European Economic Area.

5. How long we keep it

Order data is kept for the period required by tax law (5 years), account data until you delete the account, and correspondence for as long as needed to resolve the matter.

6. Your rights

You have the right to access your data, rectify it, erase it, restrict processing, port it, object to processing based on legitimate interest, and withdraw consent at any time (without affecting the lawfulness of processing before withdrawal).

To exercise these rights write to kasia@sharkotea.com.

You also have the right to lodge a complaint with the Polish data protection authority (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw) or with the supervisory authority in your country of residence.

7. Cookies

Essential cookies keep the cart, the shopping session and login working. The shop cannot function without them, so they do not require consent.

Analytics cookies — Google Analytics 4 (the _ga and _ga_* files). They let us count visits and see which patterns are viewed most often. They are set as soon as you open the site.

We do not use marketing or advertising cookies and we do not display ads.

If you do not want your visits counted, block these files in your browser settings or install a Google Analytics opt-out add-on. You also have the right to object to this processing — write to kasia@sharkotea.com.

You can change cookie settings in your browser. Disabling essential cookies will make purchasing impossible.

8. Security

The site runs over an encrypted HTTPS connection. Access to data is limited to authorised persons. Passwords are stored encrypted.

9. Changes

We may update this policy — for example after adding a new tool or changing the payment provider. The current version is always available on this page.