QADR MODESTY
Privacy Policy
This Privacy Policy explains how Qadr Modesty collects, uses, stores and protects personal data when you use our website, shop, contact forms and related services.
1. Personal data controller
The controller of your personal data is:
Weniq Julia Ahmed
ul. Jodłowa 8b/20
16-001 Ignatki Osiedle
Poland
NIP: 9662195941
Operating under the brand name Qadr Modesty
Email: [email protected]
You may contact us at the address above regarding this Privacy Policy or the processing of your personal data.
2. What personal data we may process
Depending on how you use Qadr Modesty, we may process information including:
- name and surname;
- email address;
- telephone number;
- billing and delivery address;
- order and transaction information;
- account information;
- payment-related information received from payment providers;
- shipping and delivery information;
- correspondence with Qadr Modesty;
- custom-order preferences and measurements submitted by you;
- reference images voluntarily uploaded through a custom-order form;
- newsletter subscription and consent records;
- IP address, device, browser and technical log information;
- website usage information collected through cookies or similar technologies where permitted.
We ask you not to provide sensitive personal information that is not necessary for your order or enquiry.
3. Why we process personal data
3.1 Orders and purchases
We process information necessary to accept, manage, fulfil and deliver orders, communicate with you about your purchase and handle returns or complaints.
Legal bases:
- performance of a contract or steps taken before entering into a contract, Article 6(1)(b) GDPR;
- compliance with accounting, tax and other legal obligations, Article 6(1)(c) GDPR;
- our legitimate interests in preventing fraud, protecting the store and establishing or defending claims, Article 6(1)(f) GDPR.
3.2 Customer accounts
If you create or use a customer account, we process the information necessary to provide account functionality, including order history, addresses, payment methods and account settings where available.
Legal basis: Article 6(1)(b) GDPR.
3.3 Contact and customer support
When you contact Qadr Modesty, we process the information contained in your message so that we can respond and provide customer support.
Depending on the enquiry, the legal basis is Article 6(1)(b) GDPR where communication relates to a contract or steps before entering into a contract, or Article 6(1)(f) GDPR based on our legitimate interest in communicating with customers and website users.
3.4 Custom-order requests
When you submit a customization request, we may process your contact details, requested product, fabric and colour preferences, measurements, notes and any optional reference image you upload.
This information is used to evaluate your request, communicate with you and, where applicable, prepare a customized offer.
Legal basis: Article 6(1)(b) GDPR, steps taken at your request before entering into a contract.
3.5 Newsletter and email marketing
If you subscribe to the Qadr newsletter, we use your email address and subscription records to send collection releases, fabric stories, offers and other selected Qadr updates.
Newsletter subscriptions use a confirmation process so that the email address must be confirmed before the subscription is completed.
Legal basis: your consent, Article 6(1)(a) GDPR, together with the requirements applicable to electronic marketing communications.
You may withdraw your consent at any time by using the unsubscribe link contained in our emails. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
3.6 Essential website functions
Certain technologies are required for functions such as the shopping cart, checkout, customer login, security, language or privacy preferences and other services explicitly requested by you.
These technologies may operate where they are necessary to provide the requested service or maintain the security and operation of the website.
3.7 Analytics
Where you give the required consent, we may use analytics technologies to understand how visitors use the website, identify technical or usability issues and improve Qadr Modesty.
Legal basis: consent, Article 6(1)(a) GDPR, where the analytics technology requires storage of or access to information on your device.
3.8 Marketing technologies
Where marketing or advertising technologies are enabled, they are used only in accordance with the privacy choices made through the website’s consent mechanism.
Non-essential marketing technologies are not intended to be activated before the required consent is obtained.
3.9 Security, fraud prevention and legal claims
We may process technical information, transaction records and correspondence where necessary to protect the website, prevent fraud or abuse, investigate incidents and establish, exercise or defend legal claims.
Legal basis: our legitimate interests, Article 6(1)(f) GDPR.
4. Who may receive your data
Personal data may be shared where necessary with providers supporting the operation of Qadr Modesty, including:
- website hosting and technical service providers;
- WordPress and WooCommerce-related service providers;
- payment providers, including Stripe where applicable;
- banks and payment networks where required for payment processing;
- shipping, courier and logistics providers, including services integrated through Furgonetka where applicable;
- Brevo for newsletter subscription and email services;
- analytics and website measurement providers where consent has been given;
- IT, security, maintenance and professional service providers;
- accounting or legal advisers where necessary;
- public authorities where disclosure is required by law.
Depending on the service and processing activity, a recipient may act as our processor, joint controller or independent controller under applicable data protection law.
5. Transfers outside the European Economic Area
Some service providers used by Qadr Modesty may process data in countries outside the European Economic Area.
Where such transfers occur, they are subject to appropriate safeguards required by applicable data protection law. These may include an adequacy decision, Standard Contractual Clauses or another lawful transfer mechanism.
6. How long we keep personal data
We retain personal data only for as long as necessary for the purpose for which it was collected and for periods required by applicable law.
- Orders and accounting information: for the duration required to fulfil the contract and for the applicable accounting, tax and limitation periods.
- Customer accounts: while the account remains active and afterward where retention is necessary for legal obligations or claims.
- Contact correspondence: until the enquiry is resolved and afterward where reasonably necessary for claims or record keeping.
- Custom-order requests: for the period necessary to process the request and, where an order results, for the periods applicable to the resulting transaction.
- Newsletter information: until you unsubscribe or withdraw consent, subject to retaining limited evidence of consent where necessary to demonstrate compliance.
- Cookie and analytics information: according to the lifetime of the relevant technology and your privacy choices.
- Claims and disputes: until the applicable limitation periods expire or the matter is finally resolved.
7. Your data protection rights
Subject to the conditions provided by applicable law, you may have the right to:
- access your personal data and receive a copy;
- correct inaccurate or incomplete data;
- request deletion of personal data;
- request restriction of processing;
- receive data in a portable format where applicable;
- object to processing based on legitimate interests;
- object at any time to direct marketing;
- withdraw consent at any time where processing is based on consent.
To exercise your rights, contact: [email protected] .
We may need to verify your identity before fulfilling a request where this is necessary to protect your information.
8. Right to lodge a complaint
If you believe your personal data has been processed in violation of applicable data protection law, you have the right to lodge a complaint with the competent supervisory authority.
In Poland, this is the President of the Personal Data Protection Office, UODO.
9. Cookies and similar technologies
Qadr Modesty uses cookies and similar technologies for website operation and, depending on your choices, analytics or other optional purposes.
Essential technologies may be used where necessary for functions such as:
- shopping cart and checkout;
- account login and authentication;
- security and fraud prevention;
- remembering privacy choices;
- other services explicitly requested by the user.
Analytics and other non-essential technologies are used only where the required consent has been provided.
You can manage or withdraw your cookie choices through the cookie settings available on the website. You may also remove stored cookies using your browser settings.
More detailed information about the technologies used on the website is provided in Qadr Modesty’s Cookie Policy.
10. Profiling and automated decision-making
Website analytics or marketing technologies may involve automated analysis of website activity where you have given the required consent.
Qadr Modesty does not use solely automated decision-making that produces legal effects concerning you or similarly significantly affects you within the meaning of Article 22 GDPR.
11. Data security
We use appropriate technical and organizational measures intended to protect personal data against unauthorized access, loss, alteration or disclosure.
These measures include encrypted website connections using HTTPS/SSL and access controls appropriate to the services used by Qadr Modesty.
No method of online transmission or storage can guarantee absolute security, but we take reasonable steps to protect personal information according to the nature of the data and associated risks.
12. Is providing personal data mandatory?
Providing personal data is generally voluntary. However, certain information is necessary where you wish to place an order, create or use an account, receive a newsletter, submit a custom-order request or ask us to respond to an enquiry.
If required information is not provided, we may be unable to provide the requested service.
13. Changes to this Privacy Policy
We may update this Privacy Policy when our services, technologies, legal obligations or processing activities change.
The current version will always be published on this page.