Privacy Policy

6.1. Who is responsible for your data

The controller of your personal data is RAIZI TOOL POLAND SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, ul. Stargardzka 8A, lok. 53, 54-156 Wrocław, Poland, KRS 0001055743, NIP 8992970294, REGON 526269574. In this Policy, “we”, “us” and “our” refer to this company.

For questions about your personal data or your rights, email hello@raiziprotools.com or write to our address above, marked “Privacy”.

6.2. The data we process and where it comes from

We process the information you give us, data generated when you use the Store and information received from service providers in connection with your order. Depending on the services you use, this includes:

• identity and contact details;
• billing and delivery addresses;
• company and invoice details;
• order, product, variant, product code, quantity, price, payment and delivery information;
• data for the customer account you use;
• correspondence, forms, withdrawal notices, complaints, service requests and B2B enquiries;
• your consent choices and marketing preferences;
• technical data such as your IP address, device or browser identifiers, security logs, referring page and activity in the Store;
• Store usage data for analytics, within the scope of your cookie choices.

We receive data from you or someone placing an order on your behalf, as well as from the payment provider, carrier and Shopify platform. For B2B enquiries, we may also use a public business register or information supplied by the organisation you represent, where we have a legal basis to do so.

6.3. How we use your data

The table below explains our processing purposes and their legal bases:

Where we rely on consent, you can withdraw it at any time. This does not affect the lawfulness of processing before withdrawal. Where we rely on legitimate interests, you can object on grounds relating to your particular situation. You can object to direct marketing without giving a reason.

Data marked as required when ordering is needed to conclude or perform the Contract or meet a legal obligation. Without it, we may be unable to fulfil your order. Newsletter subscriptions and consent to non-essential analytics are voluntary.

6.4. Who receives your data

We share data with organisations that help us run the Store and handle your requests, limited to what is needed for each purpose. These include:

• Shopify — the Store platform, hosting, cart, checkout, security, fraud prevention, consent records and customer features;
• payment providers selected at checkout;
• DPD — delivery and agreed returns for products other than BigDog;
• SUUS — agreed delivery or collection of BigDog;
• Google Workspace — company email and collaboration;
• Klaviyo — marketing communications and campaign measurement within the scope of the required consent;
• security, fraud-prevention, IT, hosting and backup providers;
• accountants, lawyers, service technicians and repair partners where necessary;
• public authorities where disclosure is required by law.

Not every provider receives data whenever you use the Store. We share what is needed for the features you use, taking account of your choices and consent.

We use Shopify Network Intelligence. Through this service, Shopify uses data about interactions with our Store together with data from other stores on its platform to improve services, personalise experiences and tailor advertising. Shopify acts as a separate data controller for these services of its own. Use of data for purposes requiring consent is subject to your privacy choices.

The Shopify Consumer Privacy Policy explains Shopify’s processing. You can exercise rights relating to its own services, including available objection and consent-withdrawal choices, directly through Shopify’s privacy portal. You can still contact RAIZI about data we process.

6.5. Transfers outside the EEA

Some providers may process data outside the European Economic Area. For these transfers, we use a mechanism permitted by the GDPR, such as an adequacy decision or standard contractual clauses, with additional safeguards where needed.

To ask about the safeguards that apply to a particular provider, email hello@raiziprotools.com.

6.6. How long we keep your data

We keep data no longer than its processing purpose requires. The period depends on:

• the time needed to perform the Contract and handle your rights after purchase;
• periods required by tax, accounting, consumer and product-safety law;
• limitation periods and the time needed to establish, exercise or defend claims;
• the time you use an account and the time needed to close it securely;
• the duration of marketing consent and the time needed to document its grant or withdrawal;
• how long analytics data, technical data and logs are needed for the purposes described above;
• the need to keep a record of objections or newsletter unsubscribes so that we do not send you unwanted messages.

Once the relevant period ends, we delete or anonymise the data unless the law requires us to keep it longer.

6.7. Your rights

Subject to the conditions in the GDPR, you can request access to your data, correction, deletion, restriction of processing and data portability. You can also object to processing and withdraw consent.

To exercise your rights, email hello@raiziprotools.com. We may ask for information needed to verify your identity, limited to what is necessary.

You can complain to the President of the Polish Personal Data Protection Office, whether or not you contact us first.

We respond within the period required by the GDPR. We tell you about any extension and the reasons for it.

6.8. Your rights regarding automated decisions

The GDPR protects you from decisions made entirely by automated processing, including profiling, that have legal effects or similarly significant effects on you. Exceptions apply where a decision is necessary to enter into or perform a contract, is authorised by applicable law, or is based on your explicit consent.

Where such a decision relies on contractual necessity or explicit consent, you have the right to human intervention, to put forward your views and to challenge the decision. You also have the right to the information required by the GDPR about the logic involved, its significance and the expected consequences. Contact hello@raiziprotools.com about these rights.

6.9. Security, children and policy updates

We use technical and organisational safeguards appropriate to the risks. No online system provides complete security. We handle incidents in accordance with the law.

The Store is intended for people who can validly enter into the Contract. We do not direct marketing at children.

Each version of this Policy has an update date. We publish it so that you can review the rules that apply. A policy change does not replace your consent: where fresh consent is required, we obtain it before the processing it covers begins.