Privacy Policy

Last update: October 30, 2025

Modena Nails operates this store and website, including all related information, content, features, tools, products, and services, to provide you with a customized shopping experience (the "Services"). The Modena Nails store is powered by Shopify technology. This Privacy Policy describes how we collect, use, and disclose your personal information when you use the Services. To the extent there is a conflict with the Terms of Service, this Policy shall control with respect to the collection, processing, and disclosure of your personal information.

By using the Services, the User confirms that he or she has read this Privacy Policy and understands the data processing principles described.

Personal information we collect and process

"Personal Information" is data that identifies you or can be associated with you. It does not include anonymized data. The scope of this data depends on your use of the Services, your location, and applicable law. We may collect m.in. :

Contact details – name, surname, address(es), telephone number, e-mail.
Financial data – numbers and data of payment instruments, transaction details, payment methods and confirmations.
Account Information – username, password, security questions, preferences.
Transaction information – viewed/purchased/returned items, order history.
Communication – data provided in contacts with service.
Device Information – device/browser type, IP address, identifiers.
Usage Information – interactions with the Services, navigation, time of use.

Sources of personal information

Directly from the User – when creating an account, making purchases, contacting us.
Automatically – via the Services (including cookies and similar technologies).
From service providers – who act on our behalf (e.g. payments, logistics, IT).
From partners/external companies – within the limits of the law and concluded agreements.

How we use personal information

Providing, customizing and improving the Services – contract execution, payments, orders, account, shipping, returns/exchanges, reviews, recommendations.
Marketing and advertising – sending marketing communications (e-mail/SMS/post), displaying advertisements (including personalized ones) on or outside our Services.
Security and fraud prevention – authentication, detection and prevention of abuse.
Communication and support – answers to questions, customer service.
Legal reasons – fulfilling legal obligations and responding to legitimate requests.

How we disclose personal information

Suppliers and external companies – acting on our behalf (payments, logistics, cloud, analysis, service).
Business and marketing partners – m.in. for personalized advertising; they use their own privacy policies.
At the request/with the consent of the User - e.g.shipping, social widgets, external login.
Affiliates/Group – for purposes consistent with the Policy.
Corporate Transactions and Legal Obligations – merger, bankruptcy; enforcement of terms; protection of rights.

Shopify Report

The Services are hosted by Shopify, which collects and processes personal data related to your access to and use of the Services to provide and improve them. This data may be transferred to Shopify and service providers in other countries. Shopify may use information from your interactions with our Store, other merchants, and the Shopify platform (advanced features). In these cases, Shopify is responsible for processing and exercising your rights related to these activities. Details: privacy.shopify.com/pl.

Third-Party Sites and Links

The Services may contain links to external websites. We are not responsible for their practices or content. Information posted in public areas (e.g., social media) may be visible to other users.

Children's data

The Services are not intended for children. We do not knowingly collect data from anyone under the age of majority. A parent/guardian may request deletion of a child's data by contacting us.

Security and data retention

We employ security measures, but no method is completely foolproof. Data retention time depends on operational needs and legal requirements (account management, service delivery, disputes, contract enforcement).

User Rights and Choices

Access/Information – access to your data.
Removal – request to delete data.
Rectification – correction of inaccuracies.
Data transfer – copy/transfer of data in certain cases.
Communication preferences – Opt out of marketing communications (link in email). Transactional messages may still be sent.

EEA/UK Users (in accordance with local law) may additionally:

raise an objection/request restriction of processing,
withdraw consent (without affecting the lawfulness of previous processing).

Requests can be made through the contact channels below. We may require verification of identity. For full details about Shopify's processing and your rights, please visit privacy.shopify.com/pl.

Complaints

If you have any complaints, please contact us. Depending on where you live, you may have the right to appeal our decision or lodge a complaint with your local data protection authority (in the EEA, the relevant supervisory authority).

International data transfer

We may transfer, store, and process your data outside your country of residence. For transfers outside the EEA/UK, we use recognized mechanisms (e.g., standard contractual clauses) or transfers to countries recognized as providing an adequate level of protection.

Changes to this Policy

This Policy may be updated from time to time (operationally/legally/regulatorily). We will post the revised version on this page, update the "Last Updated" date, and provide notice as required by law.