Privacy Policy

Privacy & Cookie Policy

Effective from 14 October 2026

1. Controller

The controller of your personal data is BEDDRA sp. z o.o., ul. Twarda 18, 00-105 Warsaw, Poland, KRS 0001180468, NIP 5253051415, REGON 542069822 (the "Controller"). For any data protection matter, contact us at help@bedravintage.com, by phone +48 503 338 952 or by post to the address above.

2. What data we process, why and for how long

• Orders, delivery and payment (name, address, e-mail, phone number, order and payment details) – to conclude and perform the contract, Art. 6(1)(b) GDPR – for the duration of the contract and then until any claims become time-barred.
• Invoices and accounting – legal obligation, Art. 6(1)(c) GDPR – 5 years from the end of the year in which the tax obligation arose.
• Returns, withdrawals and complaints – legal obligations under consumer law, Art. 6(1)(c) GDPR – until any claims become time-barred.
• Customer account – Art. 6(1)(b) GDPR – until the account is deleted.
• Contact with you (e-mail, chat, social media) – our legitimate interest in replying, Art. 6(1)(f) GDPR – until the matter is closed and then until any claims become time-barred.
• Newsletter, marketing e-mails and reminders about an unfinished order – your consent, Art. 6(1)(a) GDPR – until you withdraw your consent (e.g. via the unsubscribe link).
• Product reviews – our legitimate interest in publishing reviews, Art. 6(1)(f) GDPR – until the review is removed.
• Analytics and advertising cookies and pixels (e.g. Meta Pixel, Google, Pinterest) – your consent, Art. 6(1)(a) GDPR and Art. 399 of the Polish Electronic Communications Law – until you withdraw your consent or the cookie expires.
• Establishing, pursuing and defending claims – our legitimate interest, Art. 6(1)(f) GDPR – until any claims become time-barred.

Providing your data is voluntary, but necessary to conclude and perform the contract – without it we cannot fulfil your order.

3. Recipients

We share data only to the extent necessary with: the Shopify platform (store and checkout – Shopify International Limited, Ireland); payment service providers you choose (e.g. Shopify Payments/Stripe, PayPal, Mollie, Przelewy24, Klarna); couriers (DPD, FedEx, UPS) and, for DDP shipments, customs agents; our accounting office; IT and e-mail service providers; review and wishlist apps (Judge.me, Swym); and, if you consent, advertising and analytics partners (Meta Platforms Ireland Ltd, Google Ireland Ltd, Pinterest Europe Ltd). We may also disclose data to public authorities where required by law.

4. Transfers outside the EEA

Some providers (e.g. Shopify, Meta, Google) may process data outside the European Economic Area, including in Canada and the USA. Such transfers are based on European Commission adequacy decisions (including the EU–US Data Privacy Framework) or standard contractual clauses. For deliveries outside the EEA, the data needed for delivery and customs clearance is passed to the carrier and the customs authorities of the destination country, as this is necessary to perform the contract (Art. 49(1)(b) GDPR).

5. Your rights

You have the right to access your data, rectify it, erase it, restrict its processing and transfer it, and to object to processing based on our legitimate interest – and at any time to processing for direct marketing. Where processing is based on consent, you may withdraw it at any time; this does not affect the lawfulness of processing before withdrawal. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland (uodo.gov.pl), or with the supervisory authority in your country.

We do not make decisions based solely on automated processing that produce legal effects for you. If you consent to marketing cookies, our advertising partners may use data to tailor the ads you see (profiling).

6. Cookies

6.1. Cookies are small text files saved on your device. The Store uses necessary cookies (cart, checkout, security, language and currency, remembering your consent choices), analytics cookies (to understand how the Store is used) and marketing cookies (to show relevant ads, e.g. Meta Pixel).

6.2. Necessary cookies are used without consent because the Store cannot work without them. Analytics and marketing cookies are used only with your consent, given in the cookie banner (Art. 399 of the Polish Electronic Communications Law of 12 July 2024). You can change your choice at any time via the "Your Privacy Choices" link in the footer or in your browser settings. Blocking necessary cookies may prevent the Store from working properly.

6.3. Session cookies are deleted when you close your browser; persistent cookies remain until they expire or you delete them.

7. Changes

We may update this Policy, e.g. when the law or our services change. The current version is always available in the Store.