PRIVACY AND COOKIES POLICY

Last updated: 11 August 2026

This Privacy and Cookies Policy explains how personal data is collected, used and protected in connection with the use of the online store available at www.razorray.pl (“Store”), as well as how cookies and similar technologies are used.

We respect the privacy of our customers and visitors and process personal data in accordance with applicable data protection laws, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”).

1. DATA CONTROLLER

The controller of your personal data is:

Dirty Ray Radosław Nawalany
ul. Zielińska 11a/13
31-227 Kraków
Poland

Tax Identification Number (NIP): 8733016389
REGON: 121194401

hereinafter referred to as the “Controller”, “we”, “us” or “Razor Ray”.

You may contact us regarding privacy and personal data matters using the contact details provided on the Store’s Contact page.

PRIVACY POLICY

2. WHAT PERSONAL DATA WE PROCESS

Depending on how you use the Store, we may process information such as:

• your first and last name;
• billing and delivery address;
• e-mail address;
• telephone number;
• company name;
• Tax Identification Number or other information required for invoicing;
• information concerning your order and purchased products;
• payment-related information;
• information provided when creating and using a customer account;
• correspondence with us;
• information submitted through contact forms;
• information concerning newsletter subscriptions and marketing consents;
• IP address;
• device, browser and operating-system information;
• information concerning your activity on the Store;
• information collected through cookies and similar technologies.

We only collect personal data that is necessary for the relevant purpose.

3. PURPOSES AND LEGAL BASES FOR PROCESSING

3.1. Processing and fulfilling orders

We process your personal data to:

• accept and process your order;
• conclude and perform the sales contract;
• arrange payment;
• arrange delivery;
• communicate with you regarding your order;
• handle returns, complaints and warranty-related matters.

The legal basis is Article 6(1)(b) GDPR – processing necessary for the performance of a contract or to take steps at your request before entering into a contract.

3.2. Accounting and tax obligations

We process certain personal data to comply with accounting, tax and other legal obligations.

The legal basis is Article 6(1)(c) GDPR – compliance with a legal obligation to which the Controller is subject.

3.3. Customer account

If you create an account in the Store, we process the information required to create, maintain and manage your account and provide the associated services.

The legal basis is Article 6(1)(b) GDPR.

3.4. Customer service and contact

If you contact us by e-mail, telephone or through a contact form, we may process your data in order to respond to your enquiry and provide customer support.

Depending on the nature of your enquiry, the legal basis may be Article 6(1)(b) GDPR or Article 6(1)(f) GDPR, based on our legitimate interest in communicating with customers and responding to enquiries.

3.5. Establishment, exercise or defence of legal claims

We may retain and process information where necessary to establish, exercise or defend legal claims.

The legal basis is Article 6(1)(f) GDPR – our legitimate interest in protecting our legal rights.

3.6. Newsletter and electronic marketing

If you subscribe to our newsletter or separately agree to receive marketing communications, we may use your e-mail address and other necessary information to send information concerning, among other things:

• new products;
• promotions;
• special offers;
• Store news;
• other marketing communications from Razor Ray.

Where consent is required, such communications are sent on the basis of your consent.

You may unsubscribe at any time by using the unsubscribe link included in the newsletter or by contacting us.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

3.7. Analytics and marketing technologies

Where applicable and subject to your cookie preferences, we may process information concerning your use of the Store for statistical, analytical and marketing purposes.

Where these technologies require consent, they will only be activated after you have provided the appropriate consent through the cookie consent mechanism.

You may change or withdraw your consent at any time through the cookie settings available on the Store.

4. RECIPIENTS OF PERSONAL DATA

To operate the Store and fulfil orders, it may be necessary to disclose or provide access to personal data to trusted service providers.

Depending on the services used in connection with your order or your use of the Store, these may include:

• the provider of the Shoper e-commerce platform and hosting/technical service providers;
• payment service providers;
• banks and financial institutions;
• courier companies, postal operators and other delivery providers;
• accounting and bookkeeping service providers;
• IT and technical support providers;
• providers of e-mail and communication services;
• marketing and newsletter service providers;
• analytics and advertising service providers, where applicable and subject to the appropriate legal basis and consent requirements;
• professional advisers where necessary;
• public authorities where disclosure is required by law.

Personal data is provided only to the extent necessary for the relevant service.

Service providers that process personal data on our behalf are required to process such data in accordance with applicable data protection laws and the applicable contractual arrangements.

5. PAYMENT AND DELIVERY

When you select a particular payment method, information necessary to process your payment may be transmitted to the relevant payment service provider.

Payment providers process information according to their own terms and privacy policies where they act as independent controllers.

Similarly, when your order requires delivery, the information necessary to deliver the parcel – such as your name, delivery address, telephone number and/or e-mail address – may be provided to the selected carrier, postal operator or delivery service provider.

6. HOW LONG WE KEEP PERSONAL DATA

We retain personal data only for as long as necessary for the purpose for which it was collected and as required by applicable law.

In particular:

• order data may be retained for the period necessary to perform the contract and subsequently for the period during which claims may be made;
• accounting and tax documentation is retained for the period required by applicable law;
• customer account information is generally processed for as long as the account remains active and thereafter where retention is necessary for legal purposes;
• correspondence may be retained for the period necessary to resolve the matter and, where appropriate, to establish or defend claims;
• data processed on the basis of consent may be processed until consent is withdrawn, unless another legal basis permits or requires further processing;
• cookie-related information is stored according to the lifetime of the relevant cookie or similar technology.

When personal data is no longer required, it will be deleted or anonymised unless further retention is required or permitted by law.

7. YOUR RIGHTS UNDER THE GDPR

Subject to the conditions provided by applicable law, you have the right to:

• access your personal data;
• obtain a copy of your personal data;
• request correction of inaccurate or incomplete personal data;
• request deletion of your personal data;
• request restriction of processing;
• object to processing based on our legitimate interests;
• receive certain personal data in a structured, commonly used and machine-readable format and request data portability;
• withdraw your consent at any time where processing is based on consent;
• lodge a complaint with a competent supervisory authority.

Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

Requests concerning your personal data may be submitted using the contact details available on the Store.

If you are located in Poland, the competent supervisory authority is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych – UODO).

8. IS PROVIDING PERSONAL DATA MANDATORY?

Providing personal data is voluntary in principle.

However, certain information is necessary to:

• place and fulfil an order;
• make a payment;
• arrange delivery;
• create and maintain a customer account;
• issue an invoice where required;
• respond to certain requests.

If you do not provide information necessary to perform a particular service, we may not be able to provide that service or complete your order.

9. DATA SECURITY

We take appropriate technical and organisational measures designed to protect personal data against unauthorised access, disclosure, alteration, accidental or unlawful loss, destruction or other unlawful processing.

Access to personal data is limited to persons and service providers that require such access for legitimate business or legal purposes.

10. INTERNATIONAL DATA TRANSFERS

Some service providers used by the Store may process data outside the European Economic Area (“EEA”).

Where personal data is transferred outside the EEA, we seek to ensure that an appropriate legal mechanism is used in accordance with the GDPR.

Depending on the recipient and destination country, this may include:

• an adequacy decision adopted by the European Commission;
• the EU-U.S. Data Privacy Framework, where applicable to the relevant recipient;
• Standard Contractual Clauses approved by the European Commission;
• another lawful transfer mechanism provided for under the GDPR.

The exact circumstances depend on the third-party services actually used by the Store.

COOKIES POLICY

11. WHAT ARE COOKIES?

Cookies are small text files stored on your computer, smartphone, tablet or other device when you visit a website.

Cookies and similar technologies allow websites to remember certain information about your visit and may be used, for example, to:

• ensure that the Store works correctly;
• keep products in your shopping cart;
• remember your preferences;
• maintain a user session;
• improve website functionality;
• collect statistical information;
• measure website performance;
• analyse how visitors use the Store;
• measure the effectiveness of advertising;
• personalise content or advertising, where applicable.

Some cookies are set directly by Razor Ray or the Store platform (“first-party cookies”), while others may be set by third-party services integrated with the Store (“third-party cookies”).

12. CATEGORIES OF COOKIES

Depending on the configuration of the Store and the services currently enabled, cookies may be divided into the following categories.

12.1. Necessary cookies

Necessary cookies are required for the Store to operate correctly.

They may be used for functions such as:

• shopping cart operation;
• checkout;
• maintaining user sessions;
• account login;
• security;
• remembering privacy and cookie preferences;
• technical operation of the Store.

Because these cookies are necessary to provide the website or a service explicitly requested by the user, they do not require the same consent as optional cookies.

Blocking necessary cookies through browser settings may cause parts of the Store to stop working correctly.

12.2. Functional cookies

Functional cookies enable additional features and personalisation, such as remembering selected preferences.

Where required by applicable law, these cookies are activated only after you provide consent.

12.3. Analytics cookies

Analytics cookies help us understand how visitors use the Store.

They may provide information such as:

• which pages are visited;
• how visitors navigate through the Store;
• how long users spend on particular pages;
• what type of device or browser is used;
• how visitors reach the Store;
• whether technical problems occur.

This information helps us improve the Store, its usability and performance.

Where required, analytics cookies are activated only after you provide consent.

12.4. Marketing cookies

Marketing and advertising cookies may be used to measure advertising effectiveness, understand user interests and, where applicable, display more relevant advertising.

These cookies may be provided by third-party advertising or social-media services.

Where consent is required, marketing cookies are activated only after you provide consent.

13. COOKIE CONSENT

When you first visit the Store, you may be presented with a cookie consent tool allowing you to:

• accept all optional cookies;
• reject optional cookies and use only necessary cookies;
• customise your preferences by cookie category.

Simply browsing or using the Store does not constitute consent to optional cookies.

Optional cookies requiring consent are used only in accordance with the preferences selected through the cookie consent mechanism.

Necessary cookies may be used without consent where they are technically required to provide the Store or a service requested by you.

14. CHANGING OR WITHDRAWING COOKIE CONSENT

You may change or withdraw your cookie consent at any time using the cookie settings available on the Store.

Withdrawing consent does not affect the lawfulness of processing carried out before consent was withdrawn.

You may also configure your web browser to block or delete cookies. However, blocking necessary cookies may prevent certain Store functions from operating correctly.

15. THIRD-PARTY SERVICES AND COOKIES

The Store may use services provided by third parties for purposes such as:

• payment processing;
• delivery and logistics;
• website analytics;
• advertising and conversion measurement;
• technical operation and security;
• embedded external content;
• social-media functionality.

Third-party providers may use their own cookies or similar technologies.

Where such technologies are not strictly necessary and require consent under applicable law, they should only be activated after the appropriate consent has been obtained.

The current list of cookies, their providers, purposes and categories may also be available directly through the Store’s cookie consent/settings panel.

16. COOKIES AND PERSONAL DATA

Some information collected through cookies or similar technologies may constitute personal data, particularly when it can be associated with an identifiable device or user.

Where information collected through cookies constitutes personal data, it is processed in accordance with this Privacy and Cookies Policy and applicable data protection laws.

17. CHANGES TO THIS PRIVACY AND COOKIES POLICY

We may update this Privacy and Cookies Policy when necessary, for example due to:

• changes in applicable law;
• changes to the Store’s functionality;
• introduction or removal of services;
• changes to payment or delivery providers;
• implementation of new analytics or marketing technologies.

The current version of this Privacy and Cookies Policy will be made available on www.razorray.pl.

Where appropriate, the date of the latest update will be displayed at the beginning of this document.

18. CONTACT

If you have any questions concerning this Privacy and Cookies Policy or the processing of your personal data, please contact:

Dirty Ray Radosław Nawalany
ul. Zielińska 11a/13
31-227 Kraków
Poland

or use the contact details and contact form available at www.razorray.pl.