html

Privacy Policy

Last updated: October 30, 2025

Modena Nails operates this store and website, including all related information, content, features, tools, products, and services, to provide the User with a tailored shopping environment (“Services”). The Modena Nails store is powered by Shopify technology. This Privacy Policy describes how we collect, use, and disclose personal data of the User using the Services. In the event of a conflict with the Terms of Service, this Policy takes precedence regarding the collection, processing, and disclosure of personal data.

By using the Services, the User confirms that they have read this Privacy Policy and understand the described data processing principles.

html

Personal information we collect and process

“Personal information” refers to data that identifies the User or can be associated with the User. It does not include anonymized data. The scope of data depends on how the Services are used, the place of residence, and applicable law. We may collect m.in.:

Contact information – first name, last name, address(es), phone number, email.
Financial data – payment instrument numbers and details, transaction details, forms and confirmations of payment.
Account information – username, password, security questions, preferences.
Transaction information – viewed/purchased/returned items, order history.
Communication – data exchanged in contacts with customer service.
Device Information – device/browser type, IP address, identifiers.
Usage Information – interactions with the Services, navigation, usage time.

Sources of Personal Information

Directly from the User – when creating an account, making purchases, contacting us.
Automatically – through the Services (including cookies and similar technologies).
From service providers – who act on our behalf (e.g., payments, logistics, IT).
From partners/external companies – within the limits of the law and contractual agreements.

How we use personal information

Providing, customizing, and improving Services – fulfilling contracts, payments, orders, accounts, shipping, returns/exchanges, reviews, recommendations.
Marketing and advertising – sending marketing communications (email/SMS/mail), displaying advertisements (including personalized ones) in our Services or outside of them.
Security and fraud prevention – authentication, detection, and prevention of abuse.
Communication and support – responding to inquiries, customer service.
Legal reasons – fulfilling legal obligations and responding to legitimate requests.

How we disclose personal information

Suppliers and external companies – operating on our behalf (payments, logistics, cloud, analytics, support).
Business and marketing partners – m.in. for personalized advertising; they use their own privacy policies.
At the User's request/with consent – e.g., shipping, social widgets, external login.
Affiliated entities/group – for purposes consistent with the Policy.
Corporate transactions and legal obligations – merger, bankruptcy; enforcement of terms; protection of rights.

Relationship with Shopify

Services are hosted by Shopify, which collects and processes personal data related to access to and use of the Services in order to provide and improve them. Data may be transferred to Shopify and service providers in other countries. Shopify may use information from the User's interactions with our Store, other sellers, and the Shopify platform (advanced features). In these cases, Shopify is responsible for processing and fulfilling the User's rights regarding these actions. Details: privacy.shopify.com/pl.

External company websites and links

Services may contain links to external websites. We are not responsible for their practices or content. Data published in public places (e.g., social media) may be visible to other users.

Children's data

Services are not intended for children. We do not knowingly collect data from individuals below the age of majority. A parent/guardian may request the deletion of a child's data by contacting us.

Data Security and Retention

We implement security measures; however, no method is absolutely foolproof. The duration of data retention depends on operational needs and legal requirements (account management, service delivery, disputes, contract enforcement).

User Rights and Choices

Access/Information – access to your data.
Deletion – request for data deletion.
Rectification – correction of inaccuracies.
Data Portability – copy/transfer of data in specific cases.
Communication Preferences – opting out of marketing communication (link in the email). Transactional messages may still be sent.

Users from the EEA/United Kingdom (in accordance with local law) may additionally:

object/request restriction of processing,
withdraw consent (without affecting the lawfulness of processing based on consent before its withdrawal).

Requests can be made through the contact channels below. We may require identity verification. Full information about processing by Shopify and User rights can be found at privacy.shopify.com/pl.

Complaints

For complaints, please contact us. Depending on the User's place of residence, they may have the right to appeal our decision or file a complaint with the local data protection authority (in the EEA – the competent supervisory authority).

International data transfer

We may transfer, store, and process data outside the country of residence. For transfers outside the EEA/UK. We use recognized mechanisms (e.g., standard contractual clauses) or transfer to countries recognized as providing an adequate level of protection.

Changes to this Policy

The Policy may be updated (operationally/legal/regulatory). The modified version will be published on this page, the "Last updated" date will be updated, and we will inform as required by law.