Privacy & Cookies Policy – BlitzKitchen

Effective Date: August 1, 2026

1. Data Controller

The Data Controller is Wiesława Swół, operating the BlitzKitchen brand in Poland.

Website: blitzpromo.store
Privacy contact: BlitzKitchenSupport@proton.me

2. What Personal Data We Collect

Depending on how you use the Store, we may process the following personal data:

-Full name

-Email address

-Country, region, billing address, or other information required for payment processing, taxation, or invoicing

-Order details, selected product version, currency, purchase amount, and transaction status

-Limited payment information provided by the payment processor, such as payment method, transaction status, and the last digits of a payment card where applicable

-IP address, device identifiers, browser type, operating system, approximate location, and technical device information

-Information relating to product downloads, delivery, and access to digital content

-Records confirming acceptance of our Terms and Conditions, consent to immediate digital delivery, and acknowledgment of the loss of the statutory right of withdrawal where applicable

-Communications, customer support requests, complaints, and correspondence

-Cookie preferences and analytical information collected through Shopify Analytics

We do not intentionally request or collect health information, allergy information, or any other special categories of personal data in connection with ordinary purchases.

3. Why We Process Your Data

We process personal data for the following purposes:

-To process and fulfill your order, including payment processing, digital delivery, account access where applicable, and purchase-related communications, based on the performance of a contract or steps taken prior to entering into a contract

-To comply with legal obligations, including accounting, tax, record-keeping, consumer protection requirements, and lawful requests from public authorities

-To protect the Store and enforce our legal rights, including fraud prevention, security, documenting customer consents, defending legal claims, and enforcing our User License Agreement, based on our legitimate interests

-To respond to inquiries that are not directly related to an existing purchase, based on our legitimate interest in communicating with customers

-To perform analytics that are not strictly necessary for operating the Store, only where your consent is required under applicable law

BlitzKitchen does not currently operate an email newsletter, SMS marketing program, paid advertising campaigns, or its own advertising profiling. Publishing organic content on TikTok does not automatically involve sharing Store customer data with TikTok.

4. Is Providing Personal Data Mandatory?

Information marked as required is necessary to enter into or perform a contract or to comply with legal obligations.

Without this information, we may be unable to process your order.

Any other information is provided voluntarily.

5. Service Providers and Data Recipients

We share personal data only where necessary for the purposes described in this Policy.

Recipients may include:

-Shopify and companies within the Shopify group for Store hosting, checkout, Markets, security services, and Shopify Analytics

-Shopify Payments and other payment providers or financial institutions selected during checkout

-Shopify applications used by the Store, including Digital Products, Checkbox Assistant, and applications used to record acceptance of legal terms

-Proton AG for email services

Providers of technical infrastructure, security, accounting, legal, or professional advisory services where necessary

Courts, regulatory authorities, law enforcement agencies, or other public authorities where disclosure is required by law

Depending on the circumstances, these providers may process personal data either as data processors acting on our behalf or as independent data controllers under their own legal obligations and privacy policies.

6. International Data Transfers

Some of our service providers, particularly Shopify and payment providers, operate internationally.

As a result, your personal data may be transferred to and processed outside the European Economic Area ("EEA").

Where required by applicable law, such transfers are protected using appropriate safeguards, including adequacy decisions, the European Commission's Standard Contractual Clauses, or another lawful transfer mechanism.

You may contact us if you would like additional information about the safeguards applicable to your personal data.

7. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes described in this Policy.

Retention periods generally include:

-Order, payment, accounting, and tax records for the period required by applicable law

-Contractual records, customer consents, digital delivery records, and download logs for the duration of the contractual relationship and any applicable limitation period

-Complaints for as long as necessary to resolve the matter and protect legal rights

-General correspondence for up to 24 months after the matter has been resolved, unless a longer retention period is justified

-Cookie and analytics data for the period specified by the relevant technology provider or until consent is withdrawn where consent is the legal basis

After the applicable retention period expires, personal data will be securely deleted or anonymized unless continued retention is required by law.

8. Rights of Individuals in the EEA and the United Kingdom

Where applicable under data protection law, you may have the right to:

-Access your personal data

-Obtain a copy of your personal data

-Correct inaccurate personal data

-Request deletion of your personal data

-Request restriction of processing

-Receive your personal data in a portable format

-Object to processing based on legitimate interests

-Withdraw consent at any time where processing is based on consent

-Lodge a complaint with your competent data protection authority

If you wish to exercise any of these rights, please contact us at BlitzKitchenSupport@proton.me.

We may request information necessary to verify your identity before responding to your request.

9. Rights of U.S. Residents

Depending on your U.S. state of residence and the laws that apply, you may have rights relating to your personal data, including the right to:

-Know what personal data we collect

-Access your personal data

-Receive a copy of your personal data

-Correct inaccurate personal data

-Request deletion of your personal data

-Restrict certain processing activities

-Opt out of the sale or sharing of personal data for cross-context behavioral advertising where applicable

-Opt out of certain profiling activities

-Appeal a decision regarding a privacy request where required by law

BlitzKitchen does not sell personal information for monetary consideration and does not independently use customer data for targeted advertising.

Any processing performed by Shopify as part of its platform depends on the Store configuration, your privacy preferences, and applicable law.

Where legally required and supported by Shopify, Global Privacy Control (GPC) and other recognized opt-out signals will be honored.

Privacy requests and appeals may be submitted to BlitzKitchenSupport@proton.me.

We will not discriminate against you for exercising your legal privacy rights.

10. Cookies and Similar Technologies

The Store may use cookies and similar technologies in the following categories:

-Essential cookies required for shopping cart functionality, checkout, payment processing, security, market selection, and basic operation of the Store

-Functional cookies that remember your preferences and settings

-Analytics cookies used to understand how visitors use the Store, currently primarily through Shopify Analytics

Where required by applicable law, including within the European Economic Area, non-essential cookies are used only after obtaining your consent.

You may accept, reject, or customize optional cookies through our cookie banner and may change your preferences at any time through the Privacy Settings available in the Store footer.

Disabling essential cookies in your browser may prevent certain Store functions, including checkout and order completion, from working properly.

11. Children's Privacy

The Store is not intended for children under the age of 13.

We do not knowingly collect personal data from children.

Minors may purchase products only with the permission and under the supervision of a parent or legal guardian.

If you believe that a child has provided personal data without appropriate authorization, please contact us so we can take appropriate action.

12. Security

We implement reasonable technical and organizational measures appropriate to the nature of our business to protect personal data.

Key e-commerce infrastructure and payment services are provided by specialized third-party providers.

However, no method of transmitting or storing data over the internet can be guaranteed to be completely secure.

13. Changes to this Policy

We may update this Privacy & Cookies Policy from time to time to reflect changes in our Store, service providers, legal requirements, or business operations.

The updated version will always include a new Effective Date.

Where required by applicable law, material changes will be communicated through appropriate means before they become effective.