Privacy Policy

The data controller is ACE OF WANDS Arturs Spāde, a sole trader registered in Poland (CEIDG), REGON 545309155, NIP 9512652638, business address al. Jana Pawła II 43A/37B, 01-001 Warszawa, Poland. You can reach our privacy contact at contact@podd.gg.

We collect the following categories of personal data:

• Order data — the name, email address, telephone number and delivery address you give at checkout in order to place an order.
• Order data — name, email, phone, delivery address, order contents, order total and status, discount code, optional gift note, marketing choice, and the Terms and personalised-goods acknowledgements recorded at checkout.
• Payment status — payment is taken online through Stripe (Stripe Payments Europe, Limited). Orders are stored with their payment status; this site does not store card details.
• Uploaded images — any image you upload for engraving, see below.
• Other submissions — historical email and phone submitted through a retired form, and newsletter subscription where you asked for it.
• Browser storage — your basket, your checkout details as you type them, the reference of your most recent order and your cookie choice, held in your browser's local storage on your device. If you accept advertising cookies, the Meta pixel also sets _fbp and, where you arrive from an advertisement, _fbc, and Google Analytics sets _ga and _ga_*.

If you order image engraving, the uploaded source PNG and generated PNG/SVG proof are written to server storage so the engraving can be reviewed and produced (see Terms, §5 on moderation). The current application does not require account authentication to open a known proof-file URL. Do not upload an image you would not want stored for order fulfilment.

We process personal data to:

• fulfil and deliver your order (performance of a contract);
• operate your account and order history;
• moderate personalised/engraved content prior to production;
• retain historical records from a retired form, answer contact messages and, where selected, record marketing consent;
• comply with tax, accounting and consumer-law obligations (legal obligation);
• prevent fraud and keep the site secure (legitimate interest).

If, and only if, you choose "Accept all", we use the Meta advertising pixel to measure which advertisements lead to visits and orders, and to show advertisements on Meta's platforms to people who have visited this site, and Google Analytics to measure how the site is used. Choosing "Essential only" means neither is ever loaded, and you can withdraw at any time from Cookie settings in the footer. We do not carry out automated decision-making that produces legal effects for you.

We share data only where necessary to run the service, with:

• our hosting provider, to store data securely.
• Google Ireland Limited, for website analytics — only if you consent.
• Meta Platforms Ireland Limited, for advertising measurement — only if you consent.

Payment is processed by Stripe, operated by Stripe Payments Europe, Limited. The data needed to take your payment is passed to Stripe as a separate controller. No carrier integration is connected at this time.

This service runs only with your consent, and only for as long as you leave it in place. For advertising measurement we use the Meta pixel; for the collection and transmission of that data PODD and Meta Platforms Ireland Limited act as joint controllers, and Meta processes it further for its own purposes under its own terms. Data may be transferred outside the EEA under the European Commission's standard contractual clauses and the EU-US Data Privacy Framework. For website analytics we use Google Analytics, provided by Google Ireland Limited, which receives information about the pages you visit and your device; the IP address is shortened before it is stored. Data may be transferred outside the EEA under the same safeguards. Withdraw at any time from Cookie settings in the footer.

Data from earlier versions of this shop — profiles, saved addresses, credentials, historical form submissions, subscriptions, message content and engraving specifications — is kept until you make a valid rights request, and is anonymised on request. Order, invoice, payment and fulfilment facts remain in anonymised form where they must be retained for tax, accounting or consumer-law obligations. We do not currently apply an automatic deletion schedule to those records.

Engraving source and proof files already written to server storage, and checkout audit records holding the delivery details recorded with an order, are not removed automatically. Email contact@podd.gg to request review of any data you want erased; erasure remains subject to legal retention duties.

Under the GDPR, you have the right to:

• access the personal data we hold about you;
• request correction of inaccurate data;
• request erasure ("right to be forgotten"), subject to legal retention duties;
• restrict or object to certain processing;
• receive your data in a portable format;
• lodge a complaint with your national data protection authority.

To exercise any of these rights — access, a copy of your data, correction, erasure, restriction or objection — email contact@podd.gg. We answer within one month. This website has no customer accounts, so there is nothing for you to sign in to and no stored profile beyond the orders you have placed.

No advertising cookie is set until you choose "Accept all". One functional cookie is set before that, and only one: podd_promo, which holds the discount code currently on offer and the moment it expires. It is first-party, HttpOnly, carries no identifier and is never shared — without it the shop cannot honour a discount it has already shown you. Everything else kept before you choose is in your own browser's local storage, on your device: your basket, your checkout details as you type them, the reference of your most recent order, and the choice you made here. If you accept, the Meta pixel sets _fbp and, where you arrive from an advertisement, _fbc, and Google Analytics sets _ga and _ga_*. Cookie settings in the footer withdraws consent, stops both and deletes those cookies.

Questions or rights requests: email contact@podd.gg. You may also complain to your local supervisory authority, e.g. the Polish UODO, or the authority in your own EU country of residence.