Privacy policy


🔒 GDPR-Compliant Privacy Policy

1. General Information

This Privacy Policy explains how YOC Platform processes personal data of users in connection with the operation of our online store hosted on the Shopify platform.

In accordance with Articles 13 and 14 of the General Data Protection Regulation (GDPR), we inform you that the data controller is:

YOC Sp. z o.o.
ul. Zeylanda 1/5, 60-808 Poznań, Poland
📧 sale@yocplatform.com

2. Purposes and Legal Basis for Processing

Personal data is processed in accordance with GDPR for the following purposes:

Purpose of Processing Legal Basis
Conclusion and performance of a sales contract Art. 6(1)(b) GDPR
Management of user account Art. 6(1)(b) GDPR
Handling inquiries and communications Art. 6(1)(f) GDPR (legitimate interest)
Compliance with tax and accounting obligations Art. 6(1)(c) GDPR
Marketing of our own products Art. 6(1)(f) GDPR or Art. 6(1)(a) GDPR (consent)
Fraud prevention and ensuring security Art. 6(1)(f) GDPR

3. Categories of Processed Data

We only process data necessary to achieve the above purposes, including:

  • Name and surname, e-mail address, phone number

  • Delivery and billing address

  • Invoice data (where applicable)

  • User account data (login, password)

  • Order and payment history

  • IP address, device and browser data

  • Inquiries and correspondence with us

4. Data Sharing and Transfers

Personal data may be shared with the following recipients:

  • Shopify, as the hosting and data processing provider (based on a Data Processing Agreement),

  • IT service providers, courier and payment providers, accounting firms, marketing agencies, and hosting providers,

  • Public authorities where required by law.

We do not transfer personal data outside the European Economic Area (EEA) unless appropriate safeguards are in place in accordance with GDPR (e.g. Standard Contractual Clauses).

5. Data Subject Rights

Under GDPR, you have the following rights:

  • Right of access to your data,

  • Right to rectification,

  • Right to erasure (“right to be forgotten”),

  • Right to restriction of processing,

  • Right to data portability,

  • Right to object to processing,

  • Right to withdraw consent (where consent is the basis for processing),

  • Right to lodge a complaint with a supervisory authority (in Poland: President of the Personal Data Protection Office – UODO).

To exercise your rights, please contact us at:
📧 sale@yocplatform.com
📮 YOC Sp. z o.o., ul. Zeylanda 1/5, 60-808 Poznań, Poland

6. Data Retention Period

We retain personal data:

  • For the duration of the contract and as required by law (e.g. 5 years for accounting records),

  • Until consent is withdrawn (where consent is the legal basis),

  • For the period necessary to establish, exercise, or defend legal claims.

7. Cookies and Technical Data

We use cookies and similar technologies to:

  • Ensure proper functioning of the store,

  • Analyze user behavior,

  • Deliver personalized advertising (with prior consent).

Users may manage cookie settings in their browser. Details are provided in our Cookies Policy.

8. Data Security

We apply appropriate technical and organizational measures to secure personal data against:

  • Loss, unauthorized access, alteration, or destruction,

  • Unauthorized disclosure.

Our store uses an SSL certificate and relies on Shopify’s security infrastructure.

9. Changes to the Privacy Policy

We reserve the right to make changes to this Privacy Policy. The updated version will always be published on our website with the date of entry into force.