Privacy Policy

1. Data controller

Ride Lab, Chełm, ul. — (uzupełnij w Ustawieniach), e-mail: ridelabchelm@gmail.com.

2. What we collect and why

• Orders: name, phone, e-mail (optional), delivery address (if chosen), notes. Purpose: performing the sales contract (Art. 6(1)(b) GDPR), accounting obligations (c), legal claims (f). Retention: 5 years from the end of the tax year.
• Requests and contact: the contact details and message you provide. Purpose: replying (f). Retention: up to 12 months.
• Online payments: processed by Stripe Payments Europe, Ltd. (Ireland) as an independent controller — we never receive card data. See stripe.com/privacy.
• Visit statistics: page path, language, referrer and a hash of IP + browser — no personal identification. Purpose: traffic statistics (f). Retention: 90 days.

3. Cookies and browser storage

No marketing or tracking cookies. We only use browser storage (localStorage) for your cart and language, and a session cookie for the admin panel. These do not require consent.

4. Recipients

Hosting: Railway Corp. (EU servers — EU West region). Payments: Stripe. Data is not sold or shared with other parties.

5. Your rights

Access, rectification, erasure, restriction, portability, objection, and the right to lodge a complaint with the Polish supervisory authority (UODO). Contact: ridelabchelm@gmail.com.