1. Who controls your data
Gustamo is the controller of personal data collected through this website and in connection with your orders. This means Gustamo decides why and how that data is used.
Contact details for privacy questions are provided in section 11. If another business is identified as the seller when your order is confirmed, its details should be read together with this policy.
2. Data we collect
- Order and contact data: your name, phone number, delivery address, delivery notes, the products ordered, prices, and order number.
- Messages: information you provide when contacting us through website chat or another support channel.
- Device and usage data: IP address, browser and device information, pages viewed, interactions, approximate location, referral source, and session or advertising identifiers.
- Preferences stored on your device: cart contents, selected language, and light or dark appearance preference.
Please do not include health information or other sensitive personal data in delivery notes or chat unless it is necessary for us to handle your request.
3. How and why we use your data
- To accept, prepare, deliver, and administer your order, including contacting you to confirm it or resolve delivery issues. This is necessary to perform our contract with you.
- To answer questions, provide support, prevent misuse, secure the website, and improve our service. We rely on our legitimate interests where they do not override your rights.
- To comply with accounting, tax, food-safety, consumer-protection, and other legal obligations.
- To understand website performance and measure or personalize advertising. Where applicable law requires it, we rely on your consent, which you may withdraw at any time.
We do not use solely automated decision-making that produces legal or similarly significant effects for you.
5. International transfers
Some service providers may process data outside Poland or the European Economic Area. Where required, we use safeguards recognized by data-protection law, such as an adequacy decision or standard contractual clauses, and apply supplementary measures where appropriate.
6. Storage, security, and retention
Order details are sent securely to Gustamo’s order service. We use reasonable technical and organizational measures intended to protect data, but no online service can guarantee absolute security.
We keep order and transaction records for as long as needed to fulfil the order, handle claims, and meet legal and tax obligations. Support messages are kept only as long as reasonably necessary for the conversation and related records. Analytics and advertising providers apply their own retention periods. We delete or anonymize data when it is no longer required.
7. Your data-protection rights
Subject to the conditions in applicable law, you may ask us to:
- give you access to your personal data and a copy of it;
- correct inaccurate or incomplete data;
- delete data or restrict how it is used;
- provide certain data in a portable format;
- stop processing based on legitimate interests; or
- withdraw consent without affecting earlier lawful processing.
You may also lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych) in Poland, or with the data-protection authority where you live or work.
9. Children
The website and ordering service are not directed to children. Orders may be placed only by people who are at least 18 years old. If you believe a child has provided personal data, please contact us so we can review and, where appropriate, delete it.
10. Changes to this policy
We may update this policy when our service, providers, or legal obligations change. The effective date and version at the top identify the current policy. Material changes may also be highlighted on the website.
11. Contact
To ask a privacy question or exercise your rights, contact us through the chat available on this website. We may ask for information needed to confirm your identity before responding to a rights request.