1. General information

This Privacy Policy defines the rules for processing and protecting personal data provided by Users when using the online store https://japancondoms.com.

2. Data controller

The data controller is NOWY KROK Sp. z o.o., ul. Sportowa 6, apt. 59, 35-111 Rzeszów, Poland, KRS 0001057330, NIP 8133903455. Contact: sales@japancondoms.com.

3. Purpose and legal basis of processing

• performance of the sales agreement and handling of orders, returns and complaints — Art. 6(1)(b) GDPR;
• accounting and tax obligations — Art. 6(1)(c) GDPR;
• answering enquiries and ensuring the proper functioning of the website — Art. 6(1)(f) GDPR;
• analytics and marketing cookies — on the basis of consent, Art. 6(1)(a) GDPR.

4. Methods of data collection

• data provided voluntarily in order, account and contact forms;
• cookies, in accordance with the consent given in the cookie banner.

5. Recipients of data

Personal data are shared only to the extent necessary to fulfil the order: with the payment provider (Stripe), carriers delivering the parcel, hosting and IT service providers, and — if you consent — analytics providers. Personal data are not sold.

6. Retention period

Order data are kept for the period required by tax and accounting law; data processed on the basis of consent — until consent is withdrawn.

7. Voluntary data provision

Providing personal data is voluntary, but necessary to place an order.

8. User rights

Users have the right to access, correct, delete and restrict the processing of their personal data, to data portability, to object to processing and to withdraw consent at any time. Users also have the right to lodge a complaint with the President of the Personal Data Protection Office (PUODO), Poland.

9. Data security

The controller applies technical and organisational measures to protect personal data in accordance with applicable law. Card details are entered on the payment provider's side and do not reach the store's servers.

10. External links

The website may contain links to external websites with their own privacy policies.

11. Changes to the policy

The controller reserves the right to amend this Privacy Policy. The current version is always published on this page.

12. Analytics and session recording

To understand how visitors use the website and to improve it, we use Google Analytics 4 (provider: Google Ireland Limited) and Microsoft Clarity (provider: Microsoft Ireland Operations Limited). Microsoft Clarity records how pages are used – clicks, scrolling and mouse movements – in pseudonymised form; text entered in form fields is masked and is not recorded.

Analytics cookies are set only after you agree to them in the cookie banner. Without consent, these tools work without cookies and receive only limited technical data that does not identify you. You can change or withdraw your consent at any time in Cookie settings.

More information: Google Privacy Policy, Microsoft Privacy Statement.