Privacy & Cookie Policy

1. Data controller

The controller of your personal data processed through keyverse.eu is:

PixyStore - Hubert Adamczyk
Marii Konopnickiej 2, 09-500 Gostynin, Poland
VAT ID (NIP): PL5273102788
Email: hello@keyverse.eu

For any privacy matter, write to hello@keyverse.eu. We have not appointed a Data Protection Officer.

2. Data we process

• Order and billing data — name, email address, billing address, VAT number (if provided), purchased products, order value.
• Payment data — handled by Shopify Payments and PayPal. We never see or store full card details.
• Customer account data — email and order history, if you create an account.
• Communication data — messages you send us by email, Telegram or the contact form.
• Review data — name and content of product reviews you publish.
• Newsletter data — email address, if you subscribe.
• Technical and usage data — IP address, device and browser data, pages visited, products viewed, items added to cart and purchases, collected through cookies and similar technologies.

3. Purposes and legal bases

• Concluding and performing the sales contract, delivering digital products, running your account — Art. 6(1)(b) GDPR.
• Issuing invoices, keeping accounting and tax records — Art. 6(1)(c) GDPR.
• Handling complaints, withdrawals and support requests — Art. 6(1)(b) and (c) GDPR.
• Preventing fraud, securing the store, establishing or defending legal claims — our legitimate interest, Art. 6(1)(f) GDPR.
• Analytics (Google Analytics) and marketing / advertising measurement (Meta Pixel) — your consent, Art. 6(1)(a) GDPR.
• Sending the newsletter — your consent, Art. 6(1)(a) GDPR.

Providing data needed for an order is voluntary but necessary to conclude the contract. We do not make decisions based solely on automated processing that produce legal effects for you.

4. Recipients

We share data only with providers that help us run the store, acting under data processing agreements:

• Shopify International Ltd (Ireland) — store platform, checkout, customer accounts, order emails.
• Shopify Payments and PayPal (Europe) S.à r.l. et Cie, S.C.A. — payment processing.
• Google Ireland Ltd — Google Analytics.
• Meta Platforms Ireland Ltd — Meta Pixel.
• Judge.me — product reviews.
• Our newsletter provider, website hosting provider and email provider (LH.pl).
• Accounting office and public authorities, where required by law.

We never sell your personal data.

5. Transfers outside the EEA

Some providers (e.g. Google, Meta, Shopify) may process data in the United States or other third countries. Such transfers rely on the EU–U.S. Data Privacy Framework or the European Commission's Standard Contractual Clauses.

6. Retention

• Order and accounting data — 5 years from the end of the calendar year in which the tax obligation arose.
• Data needed for possible claims — until the limitation period expires.
• Account data — until you delete the account.
• Consent-based data (analytics, marketing, newsletter) — until you withdraw consent.
• Support correspondence — up to 3 years after the matter is closed.

7. Your rights

You have the right to access, rectify, erase, restrict and port your data, to object to processing based on legitimate interest, and to withdraw consent at any time without affecting the lawfulness of processing before withdrawal. Email us to exercise them. You may also lodge a complaint with the Polish supervisory authority: President of the Personal Data Protection Office (Prezes UODO), ul. Stawki 2, 00-193 Warsaw, or with the authority in your EU country.

8. Cookies

Cookies are small files stored on your device. We use:

• Essential — keep your cart, checkout and login working. Always active.
• Analytics — Google Analytics, to understand traffic and improve the store. Only with consent.
• Marketing — Meta Pixel, to measure and personalise ads. Only with consent.

Non-essential cookies are set only after you accept them in the cookie banner. You can change or withdraw your choice at any time and delete cookies in your browser settings.

9. Changes

We may update this policy. The current version is always published on this page.