Terms & Privacy
Legal information about using our store
1. Introduction
This Privacy Policy explains how Kavaha collects, uses, and protects your personal data in accordance with the General Data Protection Regulation (GDPR - Regulation EU 2016/679) and Polish data protection laws. We are committed to protecting your privacy and handling your data transparently.
2. Data Controller
The data controller is Pacific P.S.A., based in Poland: Powstańców Wielkopolskich 16, 61-895 Poznań, NIP: 7792545025. Contact email: contact@kavaha.store. We process your data lawfully, fairly, and transparently.
3. Data We Collect
We collect: identification data (name, surname), contact data (email, phone, address), order data (purchase history, payment information), technical data (IP address, browser type, cookies). We only collect data necessary for order fulfillment and legal compliance.
4. Processing Purposes
We process your data for: contract execution (order fulfillment), legal obligations (accounting, tax documentation), legitimate interests (fraud prevention, service improvement), marketing (only with your consent). Legal basis: Art. 6(1)(a), (b), (c), (f) GDPR.
5. Your Rights
Under GDPR, you have the right to: access your data, rectify inaccurate data, erase data ('right to be forgotten'), restrict processing, data portability, object to processing, withdraw consent at any time. To exercise these rights, contact us at: contact@kavaha.store
6. Data Retention
We retain your data for: order data - 5 years (accounting requirements), marketing data - until consent withdrawal, technical data - 12 months. After these periods, data is securely deleted.
7. Data Security
We implement appropriate technical and organizational measures: SSL encryption, secure payment gateways, access controls, regular security audits. We never store full payment card details.
8. Cookies
We use cookies for: essential functions (cart, login), analytics (anonymized usage statistics), marketing (only with consent). You can manage cookie preferences in your browser settings. Refusing non-essential cookies does not affect store functionality.
9. Data Sharing
We share data only with: payment processors (for transaction processing), shipping carriers (InPost, DPD - for delivery), IT service providers (hosting, analytics). All partners are GDPR-compliant and bound by data processing agreements.
10. International Transfers
Data is primarily processed within the EU/EEA. Any transfers outside the EU are protected by Standard Contractual Clauses or adequacy decisions.
11. Policy Changes
We may update this policy periodically. Significant changes will be communicated via email or website notice. The current version is always available on our website.
12. Contact
For privacy-related inquiries: contact@kavaha.store. You also have the right to lodge a complaint with a supervisory authority (in Poland: UODO - Urząd Ochrony Danych Osobowych).