Privacy Policy of www.truefungi.shop

General Information

This Privacy Policy sets out the rules for processing personal data by LEAFY Sp. z o.o., with its registered office in Kraków, ul. Borkowska 5A/15, 30-438 Kraków, NIP: 6793242355, REGON: 52241495000000, KRS: 0000979440 (hereinafter: "LEAFY"), the data controller of users of the website www.truefungi.shop (hereinafter: "the Website").

LEAFY processes personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR).

Data Controller

The controller of your personal data is:
LEAFY Sp. z o.o.
ul. Borkowska 5A/15, 30-438 Kraków
e-mail: contact@truefungi.shop

We have not appointed a Data Protection Officer. For any matters related to personal data processing, you can contact us at the above email address.

Purposes and Legal Bases for Data Processing

Personal data is processed solely to the extent necessary for order processing and fulfillment:
- Order fulfillment and sales agreements – Article 6(1)(b) GDPR,
- Issuance of accounting documents (e.g., invoices) – Article 6(1)(c) GDPR,
- Handling complaints and returns – Article 6(1)(b) and (c) GDPR,
- Ensuring the proper functioning of the online store – Article 6(1)(f) GDPR.

Scope of Processed Data

In the course of order processing, we process only the data necessary:
- full name,
- delivery address,
- e-mail address,
- phone number,
- invoicing details (if applicable: company name, VAT ID),
- payment information and order history.

Providing data is voluntary but necessary to fulfill the order.

Data Recipients

Personal data may be transferred only to entities supporting LEAFY in order processing, such as:
- courier companies (for delivery),
- electronic payment operators (for payment processing),
- IT and hosting service providers,
- accounting firms supporting tax settlements.

Payment operators and some courier services may act as independent data controllers — they process personal data under their own terms and privacy policies.

LEAFY uses the Shopify platform, which acts as a data processor under Article 28 GDPR.

Data Transfers Outside the EEA

When using Shopify services, data may be transferred to third countries (e.g., Canada, USA). Shopify ensures GDPR-compliant data transfer by using standard contractual clauses and other appropriate safeguards (Article 46 GDPR).

Data Retention Period

Personal data is stored for:
- the period necessary for order fulfillment and for the time required by law (e.g., accounting documentation – 5 years),
- the period of limitation of claims arising from the contract.

We do not perform profiling or marketing activities based on personal data.

Your Rights

Under the GDPR, you have the right to:
- access your data,
- rectify your data,
- delete your data (“right to be forgotten”),
- restrict processing,
- transfer your data to another controller,
- object to data processing,
- lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, Poland).

To exercise your rights, please contact us at: contact@truefungi.shop

Cookies and Tracking Technologies

The Website uses only technical cookies necessary for its proper functioning.
We do not use cookies for marketing or profiling purposes.

Changes to the Privacy Policy

This Privacy Policy may be updated in the event of changes in law or the way the Website operates. We will inform you of significant changes via the Website or by email, if we have your address.

Last update date: 27.05.2025