Privacy policy

Effective from October 7, 2026.

1. Data controller

The controller of your personal data is Wiktor Pluta, ul. Jesienna 199, 42-229 Częstochowa, Poland, who runs the CudoMix online store. Contact for data matters: janusz13115@gmail.com.

2. What data we process and why

Fulfilling your order (name, delivery address, email, phone, order details) – legal basis: performance of a contract (Art. 6(1)(b) GDPR).
Legal obligations, e.g. keeping sales records and handling complaints – legal basis: legal obligation (Art. 6(1)(c) GDPR).
Contact and handling messages, establishing or defending against claims, preventing fraud – legal basis: our legitimate interest (Art. 6(1)(f) GDPR).
Marketing (e.g. newsletter) and analytics or marketing cookies – only with your consent (Art. 6(1)(a) GDPR). You can withdraw your consent at any time.

3. Who we share data with

Shopify – our store platform provider.
Payment operators (Shopify Payments, PayPal) – to process payments.
DSers – the tool we use to pass orders to suppliers.
Product suppliers selling through AliExpress – to ship your package (name, address, phone).
Courier and postal companies – to deliver your package.
Public authorities – when required by law.

4. Transfers outside the European Economic Area

Products are shipped by suppliers in China, so we transfer the data needed for shipping to China. This is necessary to perform the contract (Art. 49(1)(b) GDPR). Service providers such as Shopify may also process data outside the EEA based on European Commission adequacy decisions or standard contractual clauses.

5. How long we keep data

We keep order data for the period required by tax and accounting laws and until the limitation period for claims expires. Data processed based on consent is kept until you withdraw it.

6. Your rights

You have the right to access your data, rectify it, erase it, restrict its processing, port it, object to processing and withdraw your consent. You also have the right to lodge a complaint with the President of the Polish Personal Data Protection Office (UODO).

7. Do you have to provide data?

Providing data is voluntary, but without it we cannot accept and ship your order.

8. Cookies

The store uses cookies that are necessary for it to work, e.g. for the cart. We only save analytics and marketing cookies if you consent in the banner. You can change the settings in your browser.