Privacy policy

In this Privacy Policy, we describe how Castle Gothic (the "Site," or any grammatical variations of the personal pronoun "we") collects, uses, and discloses personal information about the User who visits the website, uses our services via the website, makes a purchase on castle-gothic.com (the "Site"), or otherwise communicates with us regarding the Site (collectively, the "Services"). For purposes of this Privacy Policy, the term "User" means any user of our Services, whether a customer, visitor to the website, or any other individual whose information we collect in accordance with this Privacy Policy.

The controller of personal data is AETERNITAS VISION SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, with its registered office in Kraków, Gustawa Ehrenberga 36, 31-309 Kraków.
Registration details:
NIP: 9452299663
REGON: 529784058
KRS: 0001130217

You should carefully read this Privacy Policy.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes in our practices or for other operational, legal, or regulatory reasons. Such amended Privacy Policy will be posted on the Site, and we will update the date of the last update of this Privacy Policy and take any other steps required by applicable law.

Collecting and Using Personal Information

In order to provide the Services, we collect and have collected over the past 12 months personal information about the User from various sources specified below. The personal information we collect and use depends on how the User interacts with us.

In addition to the specific use cases described below, we may use the information collected about the User to communicate with the User, provide or improve the Services, comply with applicable legal obligations, enforce relevant terms of the Services, and protect or defend the Services, our rights, and the rights of our users or others.

Personal Information Collected

The types of personal information we collect about a User depend on how the User interacts with the Site and uses our Services. "Personal information" means information that identifies, relates to, describes, or can be associated with the User. Below we describe the categories and specific types of personal information we collect.

Information Collected Directly from the User

Information directly provided to us by the User through our Services may include:

  • Contact details, including User's first name, surname, address, phone number, and email address.
  • Order information, including User's first name, surname, billing address, shipping address, payment confirmation, email address, and phone number.
  • Account information, including username, password, security questions, and other information used for account security purposes.
  • Customer support information, including information provided by the User in communication with us, such as messages sent via our Services.

Certain Service features may require the User to directly provide specific information about themselves. While the User is not obligated to provide such information, not doing so may prevent the use of or access to these features.

Usage Information Collection

We may also automatically collect certain information about the User's interaction with the Services ("Usage Data"). To collect this information, we may use cookies, pixels, and similar technologies ("Cookies"). Usage Data may include information about how the User accesses and uses the Site and User's account, including device information, browser information, network connection information, IP address, and other information relating to interactions with the Services.

Information Obtained from Third Parties

We may also obtain information about the User from third parties, including vendors and service providers who collect information on our behalf, such as:

  • Companies operating the Site and Services, e.g., Shopify.
  • Payment processors who collect payment information (such as bank account information, credit or debit card information, or billing address) to process User's payments, fulfill orders, and provide User with products or services ordered.
  • When User visits the Site, opens or clicks emails we send, or interacts with Services or our advertisements, certain information may be automatically collected by us or third-party partners through online tracking technologies like pixels, web beacons, SDKs, third-party libraries, and cookies.

All information obtained from third parties will be processed in accordance with this Privacy Policy. Also see the section titled Third-party Sites and Links below.

Using User's Personal Information

  • Providing products and Services. We use User's personal information to provide Services, fulfill contracts with User, process payments, fulfill orders, send account, purchase, return, exchange notifications, create and manage User's account, perform shipping, facilitate returns and exchanges, and other account-related functionalities.
  • Marketing and advertising. We may use User's personal information for marketing and promotional purposes, such as sending marketing, advertising, and promotional materials by email, SMS, or postal mail, and displaying product or service advertisements.
  • Security and fraud prevention. We use User's personal information to detect, investigate, or prevent potential fraudulent, illegal, or malicious activities. If User registers an account, User is responsible for maintaining account credentials secure and confidential.
  • Communication and Service improvement. We use User's personal information to provide proper customer service and improve our Services.

Cookies

Our Site, like many others, uses cookies. For details on cookies used by our store operated by Shopify, please visit https://www.shopify.com/legal/cookies. We use cookies to improve Services, remember User actions and preferences, perform analytics, and better understand User interactions.

Most browsers automatically accept cookies, but Users can adjust browser settings to remove or reject cookies. Note that removing or blocking cookies may negatively impact the User experience and limit the functionality or availability of certain Services.

Disclosure of Personal Information

We may disclose User's personal information to third parties in certain circumstances, including to fulfill contracts, comply with laws, or other reasons under this Privacy Policy:

  • Service providers performing services on our behalf.
  • Business and marketing partners.
  • With User consent, e.g., for product shipment or social media integration.
  • Our affiliates or within our corporate group.
  • In connection with business transactions, legal obligations, or protecting our rights.

Third-party Sites and Links

The Site may contain links to third-party sites or platforms. If User follows such links, User should review the privacy policies and security practices of those sites. We are not responsible for privacy or security practices on third-party sites.

Children's Data

Services are not intended for children, and we do not knowingly collect personal data about children. If User is a parent/guardian and believes a child provided personal data, contact us to request deletion.

Security and Retention

No security measures are perfect, and we cannot guarantee absolute security. User should avoid transmitting sensitive information via insecure channels. Data retention periods vary based on factors like account management, legal obligations, dispute resolution, and policy enforcement.

User's Rights

Depending on User's residence, User may have certain rights related to personal data, including access, deletion, correction, data portability, restriction, withdrawal of consent, and opting out of targeted advertising. Users can exercise these rights by contacting us via provided contact details.

Complaints

Users with complaints about data handling can contact us at provided contact details. Users can also lodge a complaint with the relevant data protection authority.

International Users

User personal data may be transferred, stored, and processed internationally, outside User’s residence, relying on recognized transfer mechanisms like Standard Contractual Clauses.

Contact

For questions or exercising data rights, contact us at contact@castle-gothic.com