Privacy Policy

Last updated: 30 October 2025

Modena Nails runs this shop and website, including any related information, content, features, tools, products and services, in order to provide you with a tailored shopping experience (the "Services"). The Modena Nails shop is powered by Shopify technology. This Privacy Policy describes how we collect, use and disclose your personal information when you use the Services. Where this Policy conflicts with the Terms of Service, this Policy shall prevail in respect of the collection, processing and disclosure of personal information.

By using the Services, you confirm that you have read this Privacy Policy and understand the data processing practices described herein.

Personal information we collect and process

"Personal information" means data that identifies you or can be linked to you. It does not include anonymised data. The scope of data collected depends on how you use the Services, where you live, and applicable law. We may collect, among others:

Contact details – first name, last name, address(es), phone number, email.
Financial information – payment instrument numbers and details, transaction details, payment methods and confirmations.
Account information – username, password, security questions, preferences.
Transaction information – items viewed/purchased/returned, order history.
Communications – information provided when contacting our support team.
Device information – device/browser type, IP address, identifiers.
Usage information – interactions with the Services, navigation, time spent.

Sources of personal information

Directly from you – when creating an account, making purchases, or contacting us.
Automatically – through the Services (including cookies and similar technologies).
From service providers – who act on our behalf (e.g. payments, logistics, IT).
From partners/third parties – within the limits of the law and agreements in place.

How we use personal information

Providing, personalising and improving the Services – fulfilling contracts, payments, orders, account management, shipping, returns/exchanges, reviews, recommendations.
Marketing and advertising – sending marketing communications (email/SMS/post), displaying advertising (including personalised ads) on or outside our Services.
Security and fraud prevention – authentication, detecting and preventing fraud.
Communication and support – responding to enquiries, customer service.
Legal reasons – fulfilling legal obligations and responding to lawful requests.

How we disclose personal information

Service providers and third parties – acting on our behalf (payments, logistics, cloud services, analytics, support).
Business and marketing partners – including for personalised advertising; these parties operate under their own privacy policies.
At your direction/with your consent – e.g. delivery, social media widgets, third-party log-in.
Affiliated entities/group – for purposes consistent with this Policy.
Corporate transactions and legal obligations – mergers, insolvency; enforcing our terms; protecting rights.

Our relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information relating to your access to and use of the Services in order to provide and improve them. Data may be transferred to Shopify and its service providers in other countries. Shopify may use information from your interactions with our Shop, other merchants, and the Shopify platform (advanced features). In these cases, Shopify is responsible for processing this information and for fulfilling your rights in relation to such activities. For details, see: privacy.shopify.com/pl.

Third-party websites and links

The Services may contain links to third-party websites. We are not responsible for their practices or content. Information you post in public spaces (e.g. social media) may be visible to other users.

Children's data

The Services are not intended for children. We do not knowingly collect data from individuals under the age of majority. A parent/guardian may request the deletion of their child's data by contacting us.

Data security and retention

We take security measures, although no method is completely foolproof. The retention period for your data depends on operational needs and legal requirements (account management, service delivery, disputes, enforcement of agreements).

Your rights and choices

Access/Information – access to your data.
Deletion – requesting deletion of your data.
Rectification – correcting inaccuracies.
Data portability – obtaining a copy/transfer of your data in certain cases.
Communication preferences – opting out of marketing communications (link in the email). Transactional messages may still be sent.

Users in the EEA/UK (in accordance with local law) may additionally:

object to/request restriction of processing,
withdraw consent (without affecting the lawfulness of prior processing).

Requests can be submitted via the contact channels below. We may require identity verification. Full information on Shopify's processing activities and your rights is available at privacy.shopify.com/pl.

Complaints

If you have a complaint, please contact us. Depending on where you live, you may have the right to appeal our decision or to lodge a complaint with your local data protection authority (within the EEA, the competent supervisory authority).

International data transfers

We may transfer, store and process data outside your country of residence. For transfers outside the EEA/UK, we rely on recognised mechanisms (such as standard contractual clauses) or transfer data to countries deemed to provide an adequate level of protection.

Changes to this Policy

This Policy may be updated for operational, legal or regulatory reasons. We will post the updated version on this page, update the "Last updated" date, and notify you as required by law.