Privacy policy
This Policy sets out the rules for the processing of personal data by SAINT BODY Sp. z o.o. with its registered office in Warsaw, ul. Żurawia 2/43, 00-503 Warsaw, entered in the Register of Entrepreneurs of the National Court Register at 0000618297 ("Administrator", "We", "Us") in connection with the operation of the online shop available at the following address https://saintbody.com ("Shop", "Service").
1. data controller
The administrator of the personal data of Users and Customers of the Shop is SAINT BODY Sp. z o.o.
2. Data Protection Officer
If applicable: If you have any questions regarding the processing of your personal data or in order to exercise your rights under data protection, please contact us at [email protected] or by post at the Administrator's registered office address.
3 Scope and purposes of data processing
3.1 Scope of data:
- Name, company (if applicable), email address, telephone number, delivery address, payment details - in connection with the processing of the order.
- Data provided when contacting the Administrator: name, e-mail address, telephone, correspondence.
- Data provided when subscribing to the newsletter: first name (optional), email address.
- Technical and "cookie" data related to the use of the Website (IP address, browser type, access time, etc.).
3.2 Purposes of processing, legal basis and retention periods:
| Purpose of processing | Legal basis (Article 6 RODO) | Storage period |
|---|---|---|
| Execution of the sales contract and the order | Article 6(1)(b) RODO | for the duration of the contract + limitation period for claims (usually 5 years) |
| Handling enquiries and correspondence | Article 6(1)(f) RODO (legitimate interest of the Administrator: customer service) | until the conclusion of the case + limitation period |
| Direct marketing (newsletter) | Article 6(1)(a) RODO (consent) | until such time as consent is withdrawn |
| Website traffic analysis / profiling for marketing purposes | Article 6(1)(f) or (a) RODO (consent or legitimate interest) | as appropriate to the purpose, or until withdrawal of consent |
| Use of cookies and similar technologies | Article 6(1)(a) or (f) RODO | according to a specific category of cookies or until you withdraw your consent |
4 Recipients of data / transfer of data
- Data may be transferred to subcontractors on the Administrator's side (e.g. courier companies, payment operators, hosting companies, analytical companies) - on the basis of an agreement for the entrustment of personal data processing.
- The administrator does not transfer personal data outside the European Economic Area (EEA). If this is changed, users will be informed.
- In the event of a legal obligation or decision by an authority, the Administrator may be obliged to disclose the data.
5 Rights of the data subject
The data subject has the right to:
- access to the content of their data and receive a copy;
- rectification of data;
- erasure ("right to be forgotten"), unless the processing is necessary e.g. for the performance of a contract or the fulfilment of a legal obligation;
- limitation of processing;
- object to the processing (in particular to profiling or marketing);
- data portability (transfer of data to another controller) - insofar as the processing is carried out by automated means and on the basis of consent or contract;
- revoke consent at any time - without affecting the lawfulness of processing carried out before revocation;
- to lodge a complaint with a supervisory authority (in Poland: Urząd Ochrony Danych Osobowych).
6 Voluntary data provision
The provision of data is voluntary, however, if the data required to process the order (e.g. name, surname, delivery address) is not provided, it may not be possible to provide the service (sales processing).
7 Cookies and similar technologies
7.1 "Cookies" are small text files stored on the User's device.
7.2 We use the Service:
- files necessary for the operation of the Website;
- analytical files (e.g. Google Analytics) for traffic analysis;
- marketing/advertising files to display personalised content.
7.3 You can change your browser's cookie settings or disable cookies at any time (although this may affect the performance of the Website).
7.4 The administrator uses Google Analytics - more information available on the Google website.
7.5 A list of third parties using cookies, together with their purposes and storage period, is available in the dedicated document "Information on cookies".
8 Data security
The controller shall apply appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. In particular, data is transferred using an encrypted SSL/TLS connection and IT systems are regularly updated and secured.
9 Changes to the Privacy Policy
The Administrator reserves the right to amend this Policy. Users will be informed of any changes by posting its new content on the Website, together with its effective date. In the event of significant changes, a relevant notice may be sent to the e-mail address.
10 Contact
For matters relating to the processing of personal data, please contact:
SAINT BODY Sp. z o.o.
Żurawia Street 2/43, 00-503 Warsaw
email: kontakt@saintbody.com
Tel: +48 535 614 540
Date of last update: 13.11.2025