Effective date: 01.10.2025

This Privacy Policy explains how OYRE, operated by ILPRIMO Sp. z o.o. (“we”, “us”, “our”), collects, uses, and protects your personal data when you visit our website and purchase our products.
We operate in the European Union and comply with GDPR, UK GDPR, and applicable Polish data protection laws.

1. Data Controller

ILPRIMO Sp. z o.o.
Address: Młynarska 42 / 115, 01-171 Warszawa, Polska
EU VAT / NIP: PL5272989884
Email: [email protected]

For UK customers, we act as data controller under UK GDPR.

2. Personal Data We Collect

a. Information provided by you

• Name and surname

• Shipping and billing address

• Email address

• Payment details (processed only by payment providers)

• Order history

• Customer support messages

b. Automatically collected data

• IP address

• Device type

• Browser type

• Cookies and tracking data

• Website usage behavior

c. Data from integrated services

• Meta Pixel

• Google Analytics (GA4)

• Email marketing platforms (Klaviyo/Mailchimp)

• Payment services (Stripe, PayPal, Klarna, etc.)

3. Legal Bases for Processing

We rely on:

• Contract necessity (orders, payments, returns)

• Legal obligation (tax, accounting)

• Legitimate interest (fraud prevention, analytics)

• Consent (marketing, cookies)

4. How We Use Your Data

We use personal data to:

• Process and deliver orders

• Handle payments

• Communicate with customers

• Manage refunds and returns

• Send transactional emails

• Send marketing content (if consent is provided)

• Run analytics and optimization

• Prevent fraud and ensure security

5. Cookies & Tracking

We use essential, analytics, and advertising cookies.
You can control preferences through our cookie banner.

6. Data Sharing

We only share data with trusted service providers:

• Payment processors

• Delivery companies

• Hosting providers

• Marketing tools

• Analytics platforms

• Customer service tools

We do not sell personal data.

7. International Data Transfers

If data is transferred outside the EU/UK, we implement:

• Standard Contractual Clauses

• UK Addendum / IDTA

• Adequacy decisions

8. Data Retention

• Order records: 6–10 years

• Marketing data: until consent is withdrawn

• Analytics: 2–26 months

• Customer service messages: 24 months

9. Your Rights

You may request:

• Access

• Correction

• Deletion

• Restriction

• Objection

• Data portability

• Withdrawal of consent

You may also file a complaint with:
Poland – UODO
United Kingdom – ICO

Contact: [email protected]

10. Security

We apply technical and organizational measures such as:

• SSL encryption

• Restricted access

• GDPR-compliant hosting

• Secure payment providers

11. Minors

We do not knowingly collect data from individuals under 16.

12. Updates

We may update this policy periodically. The latest version will always appear on this page.