Your privacy matters to us. We are committed to protecting your personal data and being transparent about how we use it.
Bolot Studio collects only essential data needed to process your orders: name, email, shipping address, and payment information. We use industry-standard encryption and never sell your data to third parties. Under GDPR, you have the right to access, correct, or delete your data at any time. Contact support@bolotstudio.com for any privacy-related requests.
Last updated: November 2025
BOLOT Limited Liability Company (BOLOT sp. z o.o.)
ul. Władysława Sikorskiego 6A/10, 44-196 Knurów, Poland
Tax ID (NIP): 9691668738
Business Registry (REGON): 540261047
National Court Register (KRS): 0001139800
We have not appointed a Data Protection Officer as we are a small business and do not process special categories of data at large scale. For any privacy-related inquiries, please contact us at support@bolotstudio.com.
We collect only the data necessary to provide our services and improve your experience
Name, email address, shipping address, and phone number (optional) to process and deliver your orders.
Payment details are processed securely through Shopify Payments. We never store your full card details.
IP address, browser type, pages visited, and time spent on our site to improve our services.
Photos you upload for custom prints are stored securely and never shared with third parties.
Under Article 6 of the GDPR, we process your personal data based on the following legal grounds:
Processing your order, payment, shipping, and providing customer support for your purchases.
Marketing communications, newsletters, and non-essential cookies. You can withdraw consent at any time.
Website analytics, fraud prevention, security monitoring, and improving our services.
Tax records, invoices, and accounting documentation as required by Polish and EU law.
To process and fulfill your orders, send confirmations and shipping updates.
To respond to your questions, requests, and provide assistance when needed.
To improve our website, products, and overall customer experience.
With your consent, to send promotional offers and newsletters. You can unsubscribe anytime.
We use cookies and similar technologies to enhance your browsing experience and analyze site traffic.
You can manage your cookie preferences in your browser settings at any time.
We work with trusted partners to provide our services. Your data is shared only as necessary:
Under GDPR and other privacy regulations, you have the following rights regarding your personal data:
Request a copy of all personal data we hold about you.
Request correction of any inaccurate or incomplete data.
Request deletion of your personal data from our systems.
Receive your data in a machine-readable format.
Object to processing of your data for direct marketing.
Withdraw your consent for data processing at any time.
To exercise any of these rights, contact us at support@bolotstudio.com
We implement appropriate technical and organizational measures to protect your personal data:
Your data is primarily processed within the European Economic Area (EEA). When we transfer data outside the EEA, we ensure appropriate safeguards:
Shopify Inc.
Canada & USA
EU-US Data Privacy Framework & Standard Contractual Clauses (SCCs)
Stripe, Inc.
USA
EU-US Data Privacy Framework & Standard Contractual Clauses (SCCs)
Google LLC
USA
EU-US Data Privacy Framework
Microsoft (Clarity)
USA
EU-US Data Privacy Framework & Standard Contractual Clauses (SCCs)
You can request information about the specific safeguards in place by contacting us at support@bolotstudio.com.
We retain your personal data for specific periods based on the purpose of processing:
5 years from order date (required by Polish tax law)
Until account deletion request or 3 years of inactivity
Until consent withdrawal
Maximum 90 days from upload, or immediately upon removal from cart
26 months (anonymized)
3 years from last interaction
Our services are not intended for children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.
We may update this privacy policy from time to time. Significant changes will be communicated via email or a prominent notice on our website before they take effect.
If you have concerns about how we handle your data, please contact us first. You also have the right to lodge a complaint with your local data protection authority. In Poland, this is the President of the Personal Data Protection Office (UODO).
Our team is here to help with any questions about your data or privacy rights. We typically respond within 24-48 hours.
Contact Us