Privacy Policy

1. Who is responsible for your data

The controller of your personal data is RAIZI TOOL POLAND SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, ul. Stargardzka 8A, lok. 53, 54-156 Wrocław, Poland, KRS 0001055743, NIP 8992970294, REGON 526269574. In this Policy, “we”, “us” and “our” refer to this company.

For questions about your personal data or your rights, email hello@raiziprotools.com or write to our address above, marked “Privacy”.

2. The data we process and where it comes from

We process the information you give us, data generated when you use the Store and information received from service providers in connection with your order. Depending on the services you use, this includes:

• identity and contact details;
• billing and delivery addresses;
• company and invoice details;
• order, product, variant, product code, quantity, price, payment and delivery information;
• data for the customer account you use;
• correspondence, forms, withdrawal notices, complaints, service requests and B2B enquiries;
• your consent choices and marketing preferences;
• technical data such as your IP address, device or browser identifiers, security logs, referring page and activity in the Store;
• Store usage data for analytics, within the scope of your cookie choices.

We receive data from you or someone placing an order on your behalf, as well as from the payment provider, carrier and Shopify platform. For B2B enquiries, we may also use a public business register or information supplied by the organisation you represent, where we have a legal basis to do so.

3. How we use your data

The table below explains our processing purposes and their legal bases:

Where we rely on consent, you can withdraw it at any time. This does not affect the lawfulness of processing before withdrawal. Where we rely on legitimate interests, you can object on grounds relating to your particular situation. You can object to direct marketing without giving a reason.

Data marked as required when ordering is needed to conclude or perform the Contract or meet a legal obligation. Without it, we may be unable to fulfil your order. Newsletter subscriptions and consent to non-essential analytics are voluntary.

4. Who receives your data

We share data with organisations that help us run the Store and handle your requests, limited to what is needed for each purpose. These include:

• Shopify — the Store platform, hosting, cart, checkout, security, fraud prevention, consent records and customer features;
• payment providers selected at checkout;
• DPD — delivery and agreed returns for products other than BigDog;
• SUUS — agreed delivery or collection of BigDog;
• Google Workspace — company email and collaboration;
• Klaviyo — marketing communications and campaign measurement within the scope of the required consent;
• Google Ireland Limited — Google Analytics 4: measuring traffic and how the Store is used, only after you accept analytics; Google acts as our processor and, where data is shared for Google’s own products and services, as an independent controller of that data;
• security, fraud-prevention, IT, hosting and backup providers;
• accountants, lawyers, service technicians and repair partners where necessary;
• public authorities where disclosure is required by law.

Not every provider receives data whenever you use the Store. We share what is needed for the features you use, taking account of your choices and consent.

We use Shopify Network Intelligence. Through this service, Shopify uses data about interactions with our Store together with data from other stores on its platform to improve services, personalise experiences and tailor advertising. Shopify acts as a separate data controller for these services of its own. Use of data for purposes requiring consent is subject to your privacy choices.

The Shopify Consumer Privacy Policy explains Shopify’s processing. You can exercise rights relating to its own services, including available objection and consent-withdrawal choices, directly through Shopify’s privacy portal. You can still contact RAIZI about data we process.

5. Transfers outside the EEA

Some providers may process data outside the European Economic Area. For these transfers, we use a mechanism permitted by the GDPR, such as an adequacy decision or standard contractual clauses, with additional safeguards where needed.

This applies to Google Analytics 4: data may be transferred to Google LLC in the United States. Google LLC takes part in the EU-U.S. Data Privacy Framework, which the European Commission found to provide an adequate level of protection in Implementing Decision (EU) 2023/1795 of 10 July 2023. If that basis stopped applying, the transfer would rely on the standard contractual clauses adopted by Commission Implementing Decision (EU) 2021/914 of 4 June 2021, which form part of Google’s data processing terms.

To ask about the safeguards that apply to a particular provider, email hello@raiziprotools.com.

6. How long we keep your data

We keep data no longer than its processing purpose requires. The period depends on:

• the time needed to perform the Contract and handle your rights after purchase;
• periods required by tax, accounting, consumer and product-safety law;
• limitation periods and the time needed to establish, exercise or defend claims;
• the time you use an account and the time needed to close it securely;
• the duration of marketing consent and the time needed to document its grant or withdrawal;
• how long analytics data, technical data and logs are needed for the purposes described above;
• the need to keep a record of objections or newsletter unsubscribes so that we do not send you unwanted messages.

In Google Analytics, event data, such as page views and items added to the cart, is kept for 2 months, and data linked to a visitor’s identifier for 14 months after that visitor’s last activity. These periods do not cover aggregated reports, which do not single out individual visitors. Google Analytics cookies expire no later than 2 years after your last visit.

Once the relevant period ends, we delete or anonymise the data unless the law requires us to keep it longer.

7. Your rights

Subject to the conditions in the GDPR, you can request access to your data, correction, deletion, restriction of processing and data portability. You can also object to processing and withdraw consent.

To exercise your rights, email hello@raiziprotools.com. We may ask for information needed to verify your identity, limited to what is necessary.

You can complain to the President of the Polish Personal Data Protection Office, whether or not you contact us first.

We respond within the period required by the GDPR. We tell you about any extension and the reasons for it.

8. Your rights regarding automated decisions

The GDPR protects you from decisions made entirely by automated processing, including profiling, that have legal effects or similarly significant effects on you. Exceptions apply where a decision is necessary to enter into or perform a contract, is authorised by applicable law, or is based on your explicit consent.

Where such a decision relies on contractual necessity or explicit consent, you have the right to human intervention, to put forward your views and to challenge the decision. You also have the right to the information required by the GDPR about the logic involved, its significance and the expected consequences. Contact hello@raiziprotools.com about these rights.

9. Security, children and policy updates

We use technical and organisational safeguards appropriate to the risks. No online system provides complete security. We handle incidents in accordance with the law.

The Store is intended for people who can validly enter into the Contract. We do not direct marketing at children.

Each version of this Policy has an update date. We publish it so that you can review the rules that apply. A policy change does not replace your consent: where fresh consent is required, we obtain it before the processing it covers begins.