assets/shop.js (section legal); this notice then disappears.Privacy Policy
Valid from
We respect your privacy. This page explains what personal data we collect when you use polalens.com or order from us, why, who receives it and what rights you have.
1. Who is responsible for your data
2. What we collect and why
| Situation | Data | Purpose and legal basis | How long |
|---|---|---|---|
| Order | Name, delivery and billing address, email, phone number, order details, payment status | To fulfil the contract and deliver your order (Art. 6(1)(b) GDPR); to keep accounting and tax records (Art. 6(1)(c)) | For the time required by law for accounting and tax documents (several years) |
| Contact form or email | Name, email, message, order number if you give one | To answer your request (Art. 6(1)(b) and (f)) | No longer than needed to handle the request and any follow-up |
| Product review | Name, rating, review text and photos, email (not published) | To publish your review, with your consent (Art. 6(1)(a)); to check that you bought the product (Art. 6(1)(f)) | Until you ask us to remove it |
| Using the website | IP address and technical data in server logs of our hosting provider | Security and operation of the website (Art. 6(1)(f)) | Short-term, as set by the hosting provider |
We do not use your data for automated decision-making or profiling. We do not sell your data.
3. Who receives your data
We pass your data only to companies that help us run the shop, and only as much as they need:
- Shopify – our order system, checkout, payments and storage of orders and reviews (Shopify International Ltd., Ireland, and its group companies).
- Vercel Inc. – hosting of this website (USA).
- Web3Forms – delivers messages sent through the contact form to our email.
- Google Fonts – the website loads its fonts from Google, so Google receives your IP address when a page opens.
- Carriers and postal services – to deliver your parcel.
- Accountants and tax advisers – for bookkeeping.
Some of these providers are located outside the European Economic Area, for example in the USA. They transfer data on the basis of the EU-US Data Privacy Framework or standard contractual clauses.
4. Cookies and local storage
This website does not use advertising or analytics cookies and does not track you. It stores two things in your browser (local storage) only so it works as you expect: the contents of your cart and the currency you chose. You can delete them any time in your browser settings.
The checkout is run by Shopify and uses its own technically necessary cookies to complete your order securely.
5. Your rights
You have the right to:
- access your data and get a copy,
- have inaccurate data corrected,
- have your data erased (where we have no duty to keep it),
- restrict processing or object to processing based on our legitimate interest,
- receive your data in a portable format,
- withdraw consent at any time, for example for a published review. This does not affect processing done before.
Write to and we will answer within one month.
If you think we handle your data unlawfully, you can complain to the Czech data protection authority: Úřad pro ochranu osobních údajů, Pplk. Sochora 27, 170 00 Praha 7, www.uoou.gov.cz, or to the authority in your own country.
6. Security and changes
We protect your data with technical and organisational measures, and payment details are handled only by the payment providers in Shopify checkout. We may update this policy; the current version is always on this page.