Privacy Policy

1. Introduction

Welcome to Gonia4You ("we," "our," or "us"). We are committed to protecting your personal data and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.

If you have any questions or concerns about our policy or our practices regarding your personal information, please contact us at goniakerl@interia.pl.

2. Information We Collect

2.1 Personal Information You Provide

We collect personal information that you voluntarily provide to us when you:

• Create an account: Name, email address, password
• Make a purchase: Billing and delivery address, phone number, postcode
• Contact us: Name, email, message content

2.2 Information Automatically Collected

We automatically collect certain information when you visit our website:

• Cookies and tracking: Your browsing behavior, preferences, shopping cart, and favorites
• Device information: Browser type, operating system, IP address
• Usage data: Pages visited, time spent on pages, links clicked

2.3 Third-Party Data

If you sign in using Google OAuth, we receive:

• Your Google profile information (name, email, profile picture)
• This data is provided directly by Google with your consent

3. How We Use Your Information

We use your personal information for the following purposes:

• Order Processing: To process and fulfill your orders
• Account Management: To create and manage your account
• Customer Service: To respond to your inquiries and provide support
• Personalization: To remember your preferences, cart, and favorites
• Security: To protect against fraud and unauthorized access
• Legal Compliance: To comply with legal obligations
• Marketing: To send you promotional emails (with your consent)

4. How We Store Your Information

Your data is stored using the following technologies:

• Firebase Firestore: Your account details, orders, and favorites (for logged-in users)
• Firebase Authentication: Your login credentials (encrypted)
• Browser Cookies: Your favorites and preferences (for guest users)
• Local Storage: Your shopping cart

All data is stored on Google Cloud Platform (Firebase) servers located in secure data centers. Firebase complies with GDPR and other international privacy regulations.

5. Data Retention

We retain your personal information for as long as necessary to:

• Provide our services to you
• Comply with legal obligations (e.g., tax records for 7 years)
• Resolve disputes and enforce our agreements

When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are legally required to retain it.

6. Sharing Your Information

We do not sell your personal information. We may share your information with:

• Service Providers: Google (Firebase), payment processors (Stripe, PayPal)
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In the event of a merger or sale of our business

7. Your Rights (GDPR & UK GDPR)

Under UK and EU data protection laws, you have the following rights:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restriction: Limit how we use your data
• Right to Data Portability: Receive your data in a machine-readable format
• Right to Object: Object to processing of your data
• Right to Withdraw Consent: Withdraw consent at any time

To exercise these rights, please contact us at goniakerl@interia.pl or use the account deletion feature in your profile settings.

8. Cookies

We use cookies and similar tracking technologies. For detailed information about the cookies we use and your choices, please see our Cookie Policy.

9. Security

We implement appropriate technical and organizational security measures to protect your personal information, including:

• Encryption of data in transit (HTTPS/SSL)
• Encryption of passwords (Firebase Authentication)
• Secure data storage on Google Cloud Platform
• Regular security updates and monitoring

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

10. Children’s Privacy

Our services are not intended for children under the age of 16. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

11. International Data Transfers

Your information may be transferred to and processed in countries other than the UK/EU. We ensure that such transfers comply with applicable data protection laws and that your data receives adequate protection.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

14. Supervisory Authority

If you are not satisfied with our response, you have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO):