---
title: "Privacy notice — SwiftShop.pl"
description: "SwiftShop.pl privacy notice: what we collect, the legal bases, retention, your rights, cookies and how to contact our data-protection contact."
lang: en
url: https://swiftshop.pl/privacy/
markdown_url: https://swiftshop.pl/privacy/index.md
section: privacy
updated: 2026-10-10
---

# Privacy notice

A short notice for a site that collects almost nothing. The transactional privacy notice for merchants will be published before launch.

## Who is responsible

Corporate identifiers will be published here on completion of KRS registration.

- Legal name: SwiftShop sp. z o.o. (in registration)
- NIP / REGON / KRS: placeholders pending registration

For anything relating to this website, the controller is the entity named above. Data-protection enquiries go to dpo@swiftshop.pl.

Because the corporate registration is still in progress, the registered address and identifiers shown above are placeholders. They will be replaced with the KRS-registered details, and this notice re-dated, before any personal data is processed beyond the limited purposes described below.

## What we process, and why

**Processing activities on this website**

| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Responding to your enquiry | Name, e-mail, message content, preferred language | Legitimate interests (Art. 6(1)(f)) or steps preparatory to a contract (Art. 6(1)(b)) | 24 months from last contact |
| Accessibility complaints | Name, contact details, the product or service, the requirement at issue | Legal obligation (Art. 6(1)(c)) — Polish Accessibility Act | 5 years, per the statutory record-keeping duty |
| Demo request / waiting list | Name, company, e-mail | Consent (Art. 6(1)(a)) | Until withdrawal, then 30 days |
| Security and abuse prevention | IP address, request metadata, truncated and rotated | Legitimate interests (Art. 6(1)(f)) | 30 days |
| Site analytics | Aggregated, cookieless page-view counts | Not personal data — no identifier is created or stored | Not applicable |

We do not run advertising trackers on this site. There is no Google Analytics, no Meta pixel and no third-party marketing cookie, so there is nothing to consent to and no cookie banner. Your theme and language preferences are stored in your own browser's local storage and never transmitted to us.

Server logs are pseudonymised by truncating IP addresses, and are used for abuse prevention and capacity planning only.

## What you can ask us to do

- Access a copy of your personal data.
- Correct anything inaccurate.
- Erase data we no longer have a legal basis to keep.
- Restrict or object to processing based on legitimate interests.
- Receive your data in a portable format.
- Withdraw consent at any time, where consent is the basis.

Write to dpo@swiftshop.pl. We respond within one month, extendable by two months for complex requests, with an explanation if we extend.

Supervisory authority. You may lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa).

International transfers. We do not transfer personal data outside the EEA. If that ever changes, the transfer mechanism will be named here before it happens.

## Version history

- 10 October 2026 — first published version for the pre-launch site.

Material changes will be versioned here with dates rather than silently edited, and merchants will be notified by e-mail where the change affects processing carried out for them.