Privacy policy

Last updated: October 21, 2026

Bad Witch operates this store and website, including associated information, content, features, tools, products and services (the “Services”). The Services are powered by Shopify. This Privacy Policy explains how we collect, use and disclose personal information when you visit, use or make a purchase through the Services, or otherwise communicate with us. In the event of a conflict between the Terms of Service and this policy concerning personal information, this Privacy Policy governs.

Please read this policy carefully. By accessing or using the Services, you acknowledge the practices described here.

Personal information we collect or process

Personal information is information that identifies or can reasonably be linked to you. It does not include anonymized information that cannot reasonably be used to identify you. Depending on how you use the Services, your location and applicable law, we may collect or process the following categories:

• Contact details: name, billing and shipping addresses, telephone number and email address.
• Financial and payment information: payment card, account and transaction details, payment methods and confirmations, to the extent needed to process transactions.
• Account information: username, password, security questions, preferences and settings.
• Transaction information: products viewed, added to cart or wishlists, purchased, returned, exchanged or cancelled, and your order history.
• Communications: information you provide when contacting customer service or otherwise communicating with us.
• Device information: device, browser and network connection data, IP address and other unique identifiers.
• Usage information: how and when you interact with and navigate the Services.

Sources of personal information

We may collect information directly from you when you create an account, use the Services, place orders or contact us; automatically through your device and interactions with the Services, including cookies and similar technologies; from service providers acting on our behalf; and from our business partners or other third parties where permitted.

How we use personal information

• Providing, personalizing and improving the Services: administering accounts and orders, processing payment, fulfilling and delivering purchases, handling returns, exchanges and complaints, saving preferences and improving your shopping experience.
• Marketing and advertising: sending permitted marketing communications and showing relevant advertising online, including based on purchases, cart contents and other activity as permitted by law and your preferences.
• Security and fraud prevention: authenticating accounts, detecting and investigating fraud or illegal or harmful activity and protecting the Services and customers.
• Customer support and communications: answering your questions and maintaining our relationship with you.
• Legal reasons: complying with applicable law, responding to lawful requests, protecting rights, handling disputes and enforcing the Terms.

How we disclose personal information

We may share personal information where reasonably necessary to operate the Services, including with Shopify, technical and logistics service providers, payment processors, customer-service providers, analytics providers, business and marketing partners, affiliates, and relevant third parties where you request or consent to sharing. We may also disclose information in connection with a corporate transaction, legal obligation, lawful request, dispute or protection of rights.

Shopify's technology may help us personalize advertising and improve the Services based on interactions with this store, other merchants and the Shopify platform. Shopify may act as a controller in relation to these advanced features. See Shopify's privacy resources for more information.

We may also share your information at your direction, for example when you use third-party widgets or sign-in tools. Business and marketing partners use information under their own privacy practices where applicable.

Our relationship with Shopify

The Services are hosted by Shopify. Shopify collects and processes information concerning access to and use of the Services to provide and improve its technology. Information provided through the Services may be shared with Shopify and other providers in countries outside your own. For Shopify's practices and applicable rights, see Shopify Consumer Privacy Policy and Shopify Privacy Portal.

Third-party websites and links

Our Services may include links to sites or platforms that are not controlled by us. Review their privacy and security practices before sharing information. We are not responsible for their practices or for the accuracy of their content. Information posted in public or partly public areas, including third-party social platforms, may be visible to other users.

Children's data

Our Services are not intended for children. We do not knowingly collect personal information from children below the age of majority in their jurisdiction. Parents or guardians may contact us to request deletion where applicable. As of this policy's effective date, we have no actual knowledge that we sell or share the personal information of individuals under 16 as those concepts may be defined by applicable law.

Security and retention

No security measures are perfect, and we cannot guarantee absolute security, including during transmission. Please avoid using insecure channels to send sensitive or confidential information. We keep personal information for as long as reasonably necessary to administer your account, provide the Services, meet legal obligations, resolve disputes or enforce our agreements.

Your privacy rights and choices

Depending on your location, you may have rights to access, receive information about, correct, delete or obtain a portable copy of your personal information. You may also have rights to object to, restrict or withdraw consent to certain processing, and to opt out of some targeted advertising or sales or sharing of information where applicable. These rights are subject to legal conditions and exceptions, and we may verify identity before fulfilling a request. Where the law permits, you may authorize a representative to act on your behalf.

Marketing preferences: you may unsubscribe from promotional email using the link in our messages. We may still send non-marketing messages needed for your orders or account.

UK and EEA residents: subject to local law, you may also request restrictions on processing, object to processing for certain purposes and withdraw consent where processing relies on it. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

International transfers

Personal information may be stored or processed outside your country. Where transfers from the EEA or UK require a lawful safeguard, we rely on recognized mechanisms such as the European Commission's standard contractual clauses or other equivalent lawful safeguards, where applicable.

Changes to this policy

We may update this policy to reflect changes in the Services, business practices or applicable law. The updated version will be published on this page.

Complaints and contact

If you have concerns about our use of personal information, please contact us at kontakt@badwitchproject.com. Depending on your location, you may have the right to make a complaint to a supervisory authority.

For EEA data-protection authorities, see the European Data Protection Board list.

Bad Witch Sp. z o.o.
Sarmacka 28a/23, 02-972 Warsaw, Poland
Email: kontakt@badwitchproject.com