Privacy policy

PRIVACY POLICY 

Data Controller: Granat sp. z o.o.
Your privacy is part of our commitment to conscious beauty.
By browsing wholenessbeauty.com, you enter a space dedicated to self-care, femininity, and authentic well-being. Therefore, we treat your personal data with respect, transparency, and responsibility.
This policy explains comprehensively how we collect, use, protect, and store your data, what rights you have, and how you can exercise them. The site is not intended for persons under the age of 16, and we do not knowingly collect data relating to minors.
1. Data Controller
Wholenessbeauty.com is managed by:
Granat sp. z o.o.
ul. Internetowa 12
80-298 Gdańsk — Poland
NIP (VAT ID): PL5842868581
REGON: 541779846
KRS (National Court Register): 0001174173
Dedicated privacy email: privacy@wholenessbeauty.com
Granat sp. z o.o. is the Data Controller under the GDPR (EU Regulation 2016/679) and maintains an internal Record of Processing Activities as required by Articles 30 et seq.
2. How we collect personal data
We collect your data through three channels:
A) Data provided directly by you
• account creation
• product purchases
• returns and customer service
• newsletter and promotion subscription
• reviews, comments, contact forms
• participation in contests and surveys
B) Data collected automatically
• technical, statistical, and marketing cookies
• navigation data, IP, device, browser
• activity logs, pages visited, sessions
C) Data from third parties (only if authorized)
• payment services
• couriers and logistics
• marketing and advertising platforms
• newsletter and CRM tools
3. Types of personal data processed
• Identification data: name, surname, username, date of birth (optional)
• Contact data: email, phone, shipping and billing address
• Transactional data: orders, payments, returns, invoices
• Technical data: IP, device, operating system, browser
• Usage data: click events, sessions, saved preferences
• Marketing data: newsletter preferences, email interactions
We do not collect special categories of data (health, religion, sexual orientation, biometrics, etc.) unless voluntarily communicated by you.
4. Legal bases for processing — Art. 6 GDPR
We process your data only when a lawful basis exists:
• Contract execution – purchases, deliveries, returns, support
• Legal obligation – tax, accounting, documentation management
• Legitimate interest – security, site improvement, anti-fraud
• Consent – newsletter, marketing cookies, advertising activities
Consent can be revoked at any time.
5. Purposes of processing
We use data for the following purposes:
• processing orders and shipments
• managing accounts and operational communications
• providing customer service and post-sales support
• sending newsletters and commercial offers (only with consent)
• improving user experience and customizing content
• statistical analysis via Google Analytics 4, Meta Pixel, TikTok Pixel, Microsoft Clarity
• remarketing and advertising (only if you accept cookies)
• fraud prevention, IT security
• legal and tax compliance
6. Profiling and automated decisions
We may use analysis and targeting tools to offer you more relevant content, but:
We do not use automated decision-making systems that produce legal effects or significantly impact your rights.
Any marketing profiling activities take place only upon acceptance of cookies.
7. Cookies and tracking tools
We use:
• Essential technical cookies (session–12 months)
• Analytical/statistical cookies (up to 24 months)
• Marketing and retargeting cookies (only with consent, max 24 months)
Tools used: Google Analytics 4, Google Ads, Meta Pixel, TikTok Pixel, Microsoft Clarity.
You can manage or revoke cookie consent at any time via the banner or browser.
The full Cookie Policy is available on the dedicated page.
8. Data sharing with third parties
We do not sell, trade, or transfer data to third parties for their own independent purposes.
We may share it only with partners strictly necessary for service provision, bound by GDPR Art. 28 contracts:
• payment providers (Stripe, PayPal, etc.)
• logistics and shipping
• hosting, security, and server maintenance
• CRM, email marketing, newsletter
• legal, tax, accounting consultants
• advertising platforms (only with consent).
9. Extra-EU transfers
Some services may be managed by providers located outside the EU (e.g., Google, Meta, TikTok, Shopify).
Transfers take place only if:
• Standard Contractual Clauses (SCC) are active
• adequate technical measures are implemented
• the level of protection complies with the GDPR
10. Data security
We protect your data through:
• HTTPS encryption
• firewalls, intrusion detection systems, and monitoring
• limited and controlled access to data
• certified servers and continuous backups
Our measures evolve constantly to guarantee protection and confidentiality.
11. Data retention
• Order, payment, invoice data: 6–10 years (tax obligation)
• Account data: until deletion request
• Newsletter and marketing: until consent revocation
• Cookies: max duration 24 months.
12. User rights
At any time, you can request:
• access to data and a copy thereof
• rectification or update
• total or partial deletion
• limitation or opposition to processing
• data portability
• revocation of consent
Requests to: privacy@wholenessbeauty.com
We respond within 30 days (extendable to 90 in complex cases).
You have the right to lodge a complaint with: UODO (Poland)
or with the competent privacy authority in your EU Member State of residence.
13. Consequences of failure to provide data
Failing to provide essential data means we will not be able to:
• process an order
• provide customer service
• send requested communications or updates
14. External links
The site may contain links to third-party sites. We are not responsible for their privacy practices: we invite you to consult their policy before use.
15. Privacy Policy Updates
This information notice may be modified over time.
The latest updated version is always available on this page.
Last update: 01.12.2025
16. A final note
Beauty is also born from trust and transparency.
If you desire clarifications on any part of this policy, you can write to us: we will be happy to answer with care and delicacy.
📧 privacy@wholenessbeauty.com