Your privacy matters to us. We are committed to protecting your personal data and being transparent about how we use it.
Bolot Studio collects only essential data needed to process your orders: name, email, shipping address, and payment information. We use industry-standard encryption and never sell your data to third parties. Under GDPR, you have the right to access, correct, or delete your data at any time. Contact support@bolotstudio.com for any privacy-related requests.
Last updated: March 2026
BOLOT Limited Liability Company (BOLOT sp. z o.o.)
ul. Władysława Sikorskiego 6A/10, 44-196 Knurów, Poland
Tax ID (NIP): 9691668738
Business Registry (REGON): 540261047
National Court Register (KRS): 0001139800
We have not appointed a Data Protection Officer as we are a small business and do not process special categories of data at large scale. For any privacy-related inquiries, please contact us at support@bolotstudio.com.
We collect only the data necessary to provide our services and improve your experience
Name, email address, shipping address, and phone number (optional) to process and deliver your orders.
Payment details are processed securely through Shopify Payments. We never store your full card details.
IP address, browser type, pages visited, and time spent on our site to improve our services.
Photos you upload for custom prints are stored securely and never shared with third parties.
Under Article 6 of the GDPR, we process your personal data based on the following legal grounds:
Processing your order, payment, shipping, and providing customer support for your purchases.
Marketing communications, newsletters, and non-essential cookies. You can withdraw consent at any time.
Website analytics, fraud prevention, security monitoring, and improving our services.
Tax records, invoices, and accounting documentation as required by Polish and EU law.
To process and fulfill your orders, send confirmations and shipping updates.
To respond to your questions, requests, and provide assistance when needed.
To improve our website, products, and overall customer experience.
With your consent, to send promotional offers and newsletters. You can unsubscribe anytime.
We use cookies and similar technologies to enhance your browsing experience and analyze site traffic.
You can manage your cookie preferences in your browser settings at any time.
We work with the following data processors. All processors have signed Data Processing Agreements (DPAs) with us:
In accordance with GDPR Art. 13(2)(f), we inform you about automated processing of your data:
We analyse browsing patterns (pages visited, time spent, products viewed) to classify your shopping intent into categories (e.g., casual browser, ready-to-buy). This helps us personalise your experience and show relevant content. No automated decisions with legal effects are made based solely on this profiling.
With your marketing consent, we use your purchase history and browsing behaviour to show you relevant advertisements on third-party platforms (Meta, TikTok, Google). You can opt out by withdrawing marketing consent in cookie settings.
You have the right to object to profiling under GDPR Art. 21. To exercise this right, contact us at support@bolotstudio.com or withdraw marketing consent in your cookie settings.
Under GDPR and other privacy regulations, you have the following rights regarding your personal data:
Request a copy of all personal data we hold about you.
Request correction of any inaccurate or incomplete data.
Request deletion of your personal data from our systems.
Receive your data in a machine-readable format.
Object to processing of your data for direct marketing.
Withdraw your consent for data processing at any time.
To exercise any of these rights, contact us at support@bolotstudio.com
We implement appropriate technical and organizational measures to protect your personal data:
Your data is primarily processed within the European Economic Area (EEA). When we transfer data outside the EEA, we ensure appropriate safeguards:
Shopify Inc.
Canada & USA
EU-US Data Privacy Framework & Standard Contractual Clauses (SCCs)
Stripe, Inc.
USA
EU-US Data Privacy Framework & Standard Contractual Clauses (SCCs)
Google LLC
USA
EU-US Data Privacy Framework
Microsoft (Clarity)
USA
EU-US Data Privacy Framework & Standard Contractual Clauses (SCCs)
TikTok (ByteDance Ltd.)
USA, Singapore, and potentially the People's Republic of China
Standard Contractual Clauses (SCCs) + Transfer Impact Assessment (TIA) conducted. TikTok For Business has committed to GDPR-compliant data handling under their Data Processing Addendum. Data transferred to China only for operational purposes under applicable SCCs. You may request our TIA documentation at support@bolotstudio.com.
You can request information about the specific safeguards in place by contacting us at support@bolotstudio.com.
We have conducted a Transfer Impact Assessment (TIA) for TikTok data transfers as required following Schrems II. The assessment is available on request.
We retain your personal data for specific periods based on the purpose of processing:
10 years from order date (required by Polish accounting law Art. 74(2))
Until account deletion request or 3 years of inactivity
Until consent withdrawal, or maximum 3 years from last active engagement
Maximum 90 days from upload, or immediately upon removal from cart
26 months (anonymized)
3 years from last interaction
3 years (GDPR compliance documentation)
Our services are not intended for children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.
We may update this privacy policy from time to time. Significant changes will be communicated via email or a prominent notice on our website before they take effect.
If you have concerns about how we handle your data, please contact us first. You also have the right to lodge a complaint with your local data protection authority. In Poland: President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, www.uodo.gov.pl, tel. 606-950-000. You may also contact the data protection authority in your country of residence.
President of the Personal Data Protection Office (UODO)
ul. Stawki 2, 00-193 Warsaw, Poland
www.uodo.gov.pl · 606-950-000
Our team is here to help with any questions about your data or privacy rights. We typically respond within 24-48 hours.
Contact Us