Privacy policy
We collect only the data needed to fulfil your order and reply to your message. We do not use cookies for tracking or advertising. Version of 22 October 2026.
This translation is for information only. The Polish version of the document is binding.
Who is the data controller
The controller of your personal data is Paweł Śnieżawski, trading as Salon Fryzjerski POINT Paweł Śnieżawski, Sokolnik 17, 14-420 Młynary, Poland, tax ID (NIP) 578-272-98-11. For anything about personal data, write to kontakt@togiya.com.pl or to the company address.
What data, why, and on what legal basis
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Fulfilling the order: accepting it, shipping it, contacting you about it | name, address, e-mail, phone number, order contents, notes | performance of a contract, Art. 6(1)(b) |
| Invoices and accounting | order data, company name, tax ID (NIP) | legal obligation, Art. 6(1)(c) |
| Returns, complaints, establishing and defending claims | order data and correspondence | legal obligation and legitimate interest, Art. 6(1)(c) and (f) |
| Replying to messages and sharpening requests | name, phone number or e-mail, message content | legitimate interest, Art. 6(1)(f), or steps taken before entering into a contract, Art. 6(1)(b) |
Providing your data is voluntary, but without it we cannot fulfil your order or reply to your message. We do not make automated decisions or profile you.
Who we share data with
- Courier company: name, address and phone number, to deliver the parcel.
- Cloudflare: the servers that run the shop and the order database.
- Resend: sending e-mails with the order confirmation and shipping information.
- Google: the e-mail inbox that receives orders and messages (Gmail), and the website fonts (Google Fonts). When the fonts load, your browser passes your IP address to Google.
- Accounting office and bank: to the extent needed for bookkeeping and payments.
Cloudflare, Resend and Google may process data outside the European Economic Area, including in the USA. This is based on a European Commission adequacy decision (EU-U.S. Data Privacy Framework) or on standard contractual clauses approved by the Commission.
How long we keep data
- Orders: for 5 years from the end of the year in which the order was placed, because that is how long tax documents must be kept. Longer only if there is a dispute.
- Messages and requests: until the matter is closed, no longer than 2 years.
Your rights
You have the right to access your data, to have it corrected or deleted, to restrict processing and to data portability. You can also object to processing based on legitimate interest. Write to kontakt@togiya.com.pl. You also have the right to lodge a complaint with the President of the Polish Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw).
Cookies and browser storage
The shop does not use advertising or analytics cookies. We save the contents of your cart in your browser’s storage (localStorage) so that it does not disappear between pages. This data does not reach us until you place an order. The shop admin panel uses one strictly necessary login cookie, only for the people who run the shop.