Privacy policy

Last updated: 12 September 2026

This Privacy Policy sets out the rules for processing the personal data of users of the THE BIKE LAB online store, including visitors to the website, persons contacting us and customers placing orders.

1. WHAT DATA MAY WE PROCESS?

Depending on how you use the store, we may process in particular:

• your first and last name,
• your e-mail address,
• your phone number,
• your shipping and billing address,
• information required to issue an invoice, including company name and VAT ID,
• information about orders placed and products purchased,
• information relating to payments and the selected payment method,
• the content of correspondence with THE BIKE LAB,
• technical information relating to the use of the website, such as IP address, device type, operating system, browser and information stored using cookies and similar technologies.

We do not store full payment card details. Payments are processed by external payment service providers.

2. PURPOSES AND LEGAL BASES FOR PROCESSING

Personal data may be processed for the following purposes:

Processing orders and performing the sales contract
We process data in order to accept and fulfil your order, arrange shipping, process payments, contact you regarding your order and handle returns and complaints.

The legal basis for processing is the necessity to perform a contract or to take steps at the customer's request prior to entering into a contract.

Compliance with legal obligations
We process data to the extent necessary to comply with obligations arising from, among other things, tax, accounting and consumer protection laws.

Customer communication
If you contact us by e-mail, phone, contact form, chat or through other available channels, we process the information you provide in order to respond to your enquiry and conduct correspondence.

Establishment, exercise or defence of legal claims
We may process data in order to protect the rights of THE BIKE LAB and to establish, pursue or defend against legal claims.

Store security and fraud prevention
We may process technical data in order to ensure the security of the website, detect irregularities and prevent fraud.

Analytics and store development
Data may be processed in order to analyse how the store is used, improve its operation, develop its functionality and better tailor content.

Where applicable law requires consent for specific analytics, personalisation or advertising activities, data is processed for those purposes only after such consent has been obtained.

Marketing
If you subscribe to our newsletter or provide another appropriate consent, we may use your data to send commercial and marketing communications. You may withdraw your consent at any time.

3. SHOPIFY AND SHOPIFY NETWORK INTELLIGENCE

THE BIKE LAB operates using the Shopify platform.

In connection with the technical operation of the store, Shopify processes certain user and customer data, in particular information relating to visits to the store, use of its features, placing orders, processing transactions, security and the provision of technology services.

Shopify Network Intelligence is enabled in the store.

As part of this feature, Shopify may process information about users' activity at THE BIKE LAB together with information derived from interactions with other merchants using Shopify and with Shopify services.

This information may be used to provide enhanced Shopify services, in particular for:

• personalising user experiences,
• improving Shopify products, services and features,
• analysing how stores and services are used,
• better tailoring content and advertising,
• measuring the effectiveness of advertising and marketing activities,
• preventing fraud and improving service security.

In connection with the provision of these services, information relating to user activity may be processed by Shopify and entities involved in providing technology, analytics and advertising services.

More information about how Shopify processes customer data can be found here:

Shopify Consumer Privacy Policy

Information about user rights and options for managing certain ways in which Shopify processes data is also available through the Shopify Privacy Portal:

Shopify Privacy Portal

4. DATA RECIPIENTS

Data may be disclosed to entities that support us in operating the store, in particular:

• Shopify – the provider of the e-commerce platform,
• payment service providers, including Shopify Payments, Przelewy24 and PayPal,
• courier companies and logistics providers, including, depending on the shipment, DPD, InPost, FedEx and Poczta Polska,
• providers of accounting, legal and IT services,
• analytics and marketing service providers, where such services are used by the store and where the processing of data for those purposes complies with applicable law.

We disclose data only to the extent necessary for the relevant purpose.

5. PAYMENTS

Payments in the store may be processed by external payment service providers, in particular Shopify Payments, Przelewy24 and PayPal.

A payment service provider may receive information necessary to process the transaction, authenticate the payment, process refunds and prevent fraud.

The processing of data by individual payment service providers is governed by their respective privacy policies.

6. SHIPPING

In order to fulfil an order, information necessary to deliver the shipment, such as your first and last name, address, phone number and e-mail address, may be disclosed to the carrier handling the shipment.

Depending on the order, we use, among others, the services of DPD, InPost, FedEx and Poczta Polska.

7. COOKIES AND SIMILAR TECHNOLOGIES

The store uses cookies and similar technologies.

Some of these technologies are necessary for the proper operation of the store, including shopping cart functionality, login, security and the purchasing process.

Other cookies and similar technologies may be used for analytics, personalisation or advertising purposes.

Cookies and similar technologies used for analytics, personalisation or advertising purposes are activated in accordance with the preferences selected by the user and, where required by law, after obtaining the user's consent.

This also applies to processing associated with Shopify Network Intelligence and Shopify services based on personalisation and user activity data.

Users may change their preferences or withdraw their consent at any time using the privacy settings available in the store.

8. DATA RETENTION

We retain data for as long as necessary to fulfil the purpose for which it was collected.

Data relating to orders and accounting documents is retained for the period required by applicable law.

Data relating to legal claims may be retained until the applicable limitation periods have expired.

Data processed on the basis of consent may be processed until consent is withdrawn, unless another legal basis exists for continued processing.

9. TRANSFERS OF DATA OUTSIDE THE EUROPEAN ECONOMIC AREA

Some technology providers used by the store, in particular global IT service providers, may process data outside the European Economic Area.

In such cases, data transfers are carried out in accordance with applicable data protection laws and using appropriate legal mechanisms and safeguards.

10. YOUR RIGHTS

To the extent provided for under the GDPR, you have the right to:

• access your personal data,
• rectify your data,
• erase your data,
• restrict processing,
• data portability,
• object to processing,
• withdraw consent at any time where processing is based on consent.

Withdrawal of consent does not affect the lawfulness of processing carried out before the consent was withdrawn.

To exercise your rights, please contact us at: dominik@thebikelab.pl.

11. COMPLAINT TO A SUPERVISORY AUTHORITY

If you believe that your personal data is being processed unlawfully, you have the right to lodge a complaint with:

the President of the Personal Data Protection Office (UODO).

12. DATA SECURITY

We use appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, alteration or disclosure.

The connection to the store is secured using encrypted HTTPS.

13. AUTOMATED PROCESSING AND PERSONALISATION

Some Shopify features and analytics or marketing services may use automated data processing to personalise content, analyse user behaviour, improve the operation of the store and tailor advertising.

Where such processing requires consent under applicable law, it is carried out after consent has been obtained and in accordance with the user's privacy preferences.

14. CHANGES TO THIS PRIVACY POLICY

This Privacy Policy may be updated, among other reasons, if the way the store operates changes, if the services or technology providers we use change, or if applicable law changes.

The current version of this Privacy Policy is always available on the THE BIKE LAB website.

15. CONTACT

If you have any questions regarding the protection of personal data, you may contact the data controller:

TMX NATALIA JABŁOŃSKA
ul. Florencka 2/3
62-080 Tarnowo Podgórne
Poland
VAT ID: 7812083379
REGON: 361254397
E-mail: dominik@thebikelab.pl
Phone: +48 534 754 330