Privacy Policy

Last updated: April 24, 2026

Thank you for choosing Colmfi – your trusted partner for online shopping in Poland. This privacy policy aims to outline the principles according to which we collect, process, archive, and – in specific cases – transfer your personal data. This applies to visits to our website, order fulfillment, and the use of other services available to you.

The term "You" refers to all individuals visiting the website, our Customers, and anyone whose data is processed by Colmfi. We encourage you to carefully read the following provisions to fully understand how we protect your privacy.

Possible changes to this privacy policy

Colmfi boutique reserves the right to make changes to this privacy policy, which may result, for example, from modifications to legal regulations or the development of our services. We encourage you to regularly check the content of this document – its current version is always published on our website. Information about the date of the last modification can be found at the top of the page.

What personal data do we collect – and why?

The scope of data we collect depends on how you interact with Colmfi. This data is processed only for legitimate purposes, such as customer service, order fulfillment, legal obligations, or improving the operation of our store.

1. Data you provide yourself:

  • Name and surname
  • Email address and phone number
  • Billing address and shipping address
  • Payment details (e.g., payment confirmation)
  • Account details (username, password)
  • Information provided through contact forms or support requests

2. Data collected automatically when using the website:

  • IP address and device type
  • Browser data (e.g., type and version)
  • Pages viewed, clicks, and navigation data
  • Cookies and similar tracking technologies (see also our cookie policy)

Purpose of processing

We use your data, among other things, to:

  • fulfill and deliver orders,
  • provide customer service and communication,
  • create and manage your Colmfi account,
  • analyze website traffic and user behavior (to optimize the store),
  • comply with legal obligations (e.g., accounting and fraud prevention).

Legal basis for processing

The processing of personal data is carried out based on applicable legal provisions, including:

  • Your consent (e.g., for creating an account or subscribing to a newsletter),
  • Performance of a contract (e.g., fulfilling your order),
  • Legal obligations,
  • Legitimate interest (e.g., improving our website or preventing fraud).

In Poland, the GDPR (European AVG/GDPR) applies. The processing of personal data is carried out based on Article 6 of the GDPR.

Data retention period

Your personal data will be processed by us only for the time necessary to achieve the purposes for which it was collected. An exception applies to situations where the law imposes an obligation on us to store it longer (this applies, for example, to tax documentation and accounting obligations).

Transfer of personal data to third parties

Colmfi does not sell or rent personal data to third parties. In some cases, we share data with external entities, such as:

  • Payment operators (e.g., Shopify Payments or PayPal)
  • Logistics partners (order shipping fulfillment)
  • IT service providers (e.g., hosting, system management)
  • Analytical tools (e.g., Google Analytics — see our cookie policy)

If necessary, we apply appropriate security measures and – if required by law – valid data transfer mechanisms, such as the EU-US Data Privacy Framework for certified organizations.

Your rights

In accordance with the GDPR, you have, among others, the following rights:

  • the right to access your personal data,
  • the right to rectification or erasure,
  • the right to restriction of processing or to object,
  • the right to data portability (if applicable),
  • the right to withdraw consent at any time.

3. Data from external entities

In addition to the information you provide directly and data automatically collected by our service, Colmfi may also obtain personal data from external sources. This action aims to optimize our processes and constantly improve the quality of the services provided.

Examples of data received from third parties:

  • Payment operators — e.g., information on payment method, payment status, or card transactions,
  • Technical service providers — e.g., hosting, email, analytical tools,
  • Platform providers — e.g., Shopify, the e-commerce platform on which our store operates.

These entities process data independently, but they transfer to Colmfi only the information necessary to fulfill an order or enable the use of our store.

What do we use your personal data for?

Colmfi uses your data only for specific, legally justified purposes, such as:

  • order fulfillment and shipping,
  • creating and managing customer accounts,
  • sending order confirmations, status updates, and transactional notifications,
  • improving shopping experiences and store functionality,
  • sending promotional messages or newsletters (with your consent),
  • analyzing user statistics to optimize the website and marketing activities,
  • detecting and preventing fraud and security threats.

Your data is not used for other purposes, unless you give your consent or legal provisions require it.

Use of cookies

Our website uses cookies to function properly, remember user preferences, and obtain information about how our store is used. Cookies help us, among other things, to:

  • maintain store stability and security,
  • tailor content to your preferences,
  • analyze visitor behavior to make improvements.

We use cookies, for example, through the Shopify platform. An overview of the cookies used and their functions can be found here: Shopify Cookie Policy

Managing cookie settings

You have full freedom to manage cookies or completely block them using your web browser settings. However, please remember that opting out of cookies may affect the functionality of the service and limit access to certain options on our website.

Who does Colmfi share your data with?

We share your personal data only when it is necessary to provide our services or when required by law. We never sell your data to third parties.

Possible recipients of your data are:

  • Technical service providers: Shopify, hosting, IT companies,
  • Payment operators: processing transactions,
  • Courier and delivery companies: carrying out shipments,
  • Marketing partners: only with your consent,
  • State authorities: when required by law.

Your rights as a data subject

As a Colmfi user, you have — depending on the GDPR provisions — the following rights:

  • Right of access: you can check what data we process.
  • Right to rectification: you can correct incomplete or incorrect data.
  • Right to erasure: you can request the deletion of data.
  • Right to object: you can object to specific forms of processing.
  • Right to data portability: you can receive your data in a machine-readable format.
  • Right to withdraw consent: if processing is based on consent.

You can contact us at: info@colmfi.com. We respond to every request within the timeframe required by law.

You will never be treated worse for exercising your rights.

Security and data retention periods

Colmfi applies appropriate technical and organizational measures to protect your data from unauthorized access, loss, or misuse. We recommend using strong and unique passwords.

Your data is stored only for as long as necessary to achieve the purposes or as required by law.

International data transfer

In some cases, your data may be stored or processed outside the EU/EEA. In such situations, we apply safeguards such as:

  • Standard Contractual Clauses (SCCs)
  • Transfer to countries with an adequacy decision, e.g., under the EU-US Data Privacy Framework

Questions or complaints?

Do you have questions about the privacy policy or data processing? Contact us:

info@colmfi.com

If you are not satisfied with how your data is processed, you can file a complaint with the relevant supervisory authority:

Personal Data Protection Office (UODO)
Website: https://uodo.gov.pl

Contact details

If you have any questions or just want to chat, feel free to contact us via:

Customer service (Opening hours):

  • Monday – Friday: 09:00 – 18:00 (GMT+1)
  • Saturday and Sunday: 10:00 – 16:00 (GMT+1)