Privacy policy
Privacy Policy
Last updated: 12 May 2026
This Privacy Policy describes how Haus Maleficarum collects, uses and protects your personal information when you visit our website, make a purchase, contact us, create an account, or otherwise use our services.
By using our website, you acknowledge that your personal information will be processed as described in this Privacy Policy.
1. Data Controller
The controller of your personal data is:
Maleficarum Julian Rudnik
Grażyny 10/2
02-548 Warszawa
Poland
Store name: Haus Maleficarum
Email: hausmaleficarum@gmail.com
If you have any questions about this Privacy Policy or how your personal data is processed, you can contact us at the email address above.
2. Personal Information We Collect
We may collect the following categories of personal information:
Information you provide directly to us:
- name and surname;
- billing and shipping address;
- email address;
- phone number;
- order details;
- payment-related information;
- account information, if you create an account;
- messages, inquiries or other information you send to us.
Information collected when you use our website:
- IP address;
- browser and device information;
- pages viewed;
- products viewed or added to cart;
- approximate location based on technical data;
- information collected through cookies and similar technologies.
Information from third parties:
We may receive limited information from service providers that help us operate the store, process payments, deliver orders, prevent fraud, analyze website performance or provide customer support.
3. How We Use Your Personal Information
Provide, Tailor and Improve the Services
We use your personal information to provide our services, including to perform our contract with you, process your order, process payments, arrange shipping, process returns or complaints, create and manage your account if you choose to create one, remember your preferences and items you are interested in, provide customer support and improve the shopping experience.
Legal basis:
Art. 6(1)(b) GDPR — performance of a contract;
Art. 6(1)(f) GDPR — our legitimate interest in operating and improving our store.
Marketing and Promotional Communications
We may use your personal information to send you marketing and promotional communications by email, where you have consented to receive them.
You can unsubscribe from marketing emails at any time by using the unsubscribe link in the email or by contacting us at hausmaleficarum@gmail.com.
We may also use limited information about your activity on our store to understand the performance of our products, content and marketing, and to improve how we present our store and collections.
Legal basis:
Art. 6(1)(a) GDPR — consent;
Art. 6(1)(f) GDPR — our legitimate interest in promoting and improving our store, where applicable.
Security and Fraud Prevention
We use your personal information to authenticate your account, provide a secure payment and shopping experience, detect, investigate or take action regarding possible fraudulent, illegal, unsafe or malicious activity, and protect the security of our store and services.
If you choose to create an account, you are responsible for keeping your account credentials safe. We recommend that you do not share your username, password or other access details with anyone else.
Legal basis:
Art. 6(1)(f) GDPR — our legitimate interest in ensuring store security and fraud prevention.
Communicating with You
We use your personal information to communicate with you, respond to your inquiries, provide customer support, send service-related messages about your order or account, and maintain our business relationship with you.
Legal basis:
Art. 6(1)(b) GDPR — performance of a contract;
Art. 6(1)(f) GDPR — our legitimate interest in responding to customer inquiries and providing support.
Legal, Tax and Accounting Obligations
We use your personal information where necessary to comply with applicable law, accounting and tax obligations, respond to valid legal requests, cooperate with public authorities where required by law, investigate or participate in potential or actual legal proceedings, and enforce or investigate potential violations of our terms or policies.
Legal basis:
Art. 6(1)(c) GDPR — compliance with a legal obligation;
Art. 6(1)(f) GDPR — our legitimate interest in protecting our legal rights, where applicable.
4. Cookies and Similar Technologies
Our website may use cookies and similar technologies to make the website work properly, remember your preferences, analyze traffic, improve the store and support marketing activities where applicable.
Some cookies are necessary for the website to function, for example to keep items in your cart, process checkout or keep you logged into your account.
Other cookies, such as analytics or marketing cookies, may be used only where allowed by law and, where required, with your consent.
You can control cookies through your browser settings. Please note that blocking some cookies may affect the functionality of the website.
5. Sharing Your Personal Information
We share your personal information only where necessary to operate the store, fulfill your order, comply with the law or protect our legitimate interests.
We may share your information with:
- Shopify, which provides the e-commerce platform for our store;
- payment providers, such as PayPal, card payment processors or other payment services available at checkout;
- shipping and delivery providers, such as InPost, courier companies or other logistics providers;
- accounting, tax or legal service providers;
- email, hosting, analytics and technical service providers;
- public authorities, courts or law enforcement agencies, where required by law.
We do not sell your personal information.
6. International Transfers
Some of our service providers, including Shopify or payment and technical service providers, may process personal data outside the European Economic Area.
Where personal data is transferred outside the EEA, we rely on appropriate safeguards required by applicable data protection law, such as adequacy decisions, standard contractual clauses or other legally recognized transfer mechanisms.
7. Data Retention
We keep your personal information only for as long as necessary for the purposes described in this Privacy Policy, unless a longer retention period is required by law.
In particular:
- order, invoice, payment and accounting data may be retained for the period required under applicable tax and accounting laws;
- customer support correspondence may be retained for as long as necessary to handle your inquiry, complaint or potential claims;
- account data is retained for as long as your account exists or as long as necessary to provide account-related services;
- marketing data is retained until you withdraw your consent or unsubscribe, unless we have another legal basis to retain limited information;
- technical and analytics data is retained for the period necessary for security, analytics and store improvement purposes.
8. Your Rights
Depending on the circumstances and applicable law, you may have the following rights regarding your personal information:
- the right to access your personal data;
- the right to receive a copy of your personal data;
- the right to correct inaccurate or incomplete personal data;
- the right to request deletion of your personal data;
- the right to restrict processing of your personal data;
- the right to object to processing based on our legitimate interests;
- the right to data portability;
- the right to withdraw consent at any time, where processing is based on consent;
- the right to lodge a complaint with a supervisory authority.
In Poland, the supervisory authority is:
Prezes Urzędu Ochrony Danych Osobowych
ul. Stawki 2
00-193 Warszawa
Poland
www.uodo.gov.pl
To exercise your rights, please contact us at:
hausmaleficarum@gmail.com
We may need to verify your identity before responding to your request.
9. Marketing Opt-Out
If you receive marketing emails from us, you can unsubscribe at any time by using the unsubscribe link in the email or by contacting us at hausmaleficarum@gmail.com.
Withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal.
10. Children’s Privacy
Our services are not intended for children. We do not knowingly collect personal information from children.
If you believe that a child has provided us with personal information, please contact us at hausmaleficarum@gmail.com so that we can take appropriate steps.
11. Security
We use reasonable technical and organizational measures to protect your personal information.
However, no method of transmission over the Internet or method of electronic storage is completely secure. We cannot guarantee absolute security of your personal information.
12. Automated Decision-Making
We do not use your personal information for decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time, for example to reflect changes in our practices, services, legal obligations or operational requirements.
The updated version will be posted on this page with a new “Last updated” date.
14. Contact
If you have any questions about this Privacy Policy or how we process your personal information, please contact us at:
Maleficarum Julian Rudnik
Grażyny 10/2
02-548 Warszawa
Poland
Store name: Haus Maleficarum
Email: hausmaleficarum@gmail.com