Privacy policy

Lifted Clothing Privacy Policy

Last updated: June 17, 2026

1. Who we are

This Privacy Policy explains how personal data is processed in connection with the Lifted Clothing online store available at lifted.clothing (the “Store”).

The controller of your personal data is:

Miro Nowa Perspektywa Sp. z o.o.
ul. Podolska 21, 81-321 Gdynia, Poland
KRS: 0001072476
NIP: 7011177154
EU VAT: PL7011177154
REGON: 527070337
EORI: PL701117715400000
Email: [email protected]
Phone: +48 571 669 028

2. Personal data we collect

Depending on how you use the Store, we may process the following categories of personal data:

  • Contact and delivery information, including your name, email address, telephone number, shipping address and billing address.
  • Order information, including products purchased, order value, discounts, order history, returns, exchanges, cancellations, complaints and related communications.
  • Payment information, including payment status, transaction identifiers, payment confirmations and limited payment details provided by payment providers. We do not normally receive your full payment-card number.
  • Account information, if you create a customer account, including account credentials, preferences and account activity.
  • Customer service information, including messages sent through email, contact forms or Shopify Inbox chat.
  • Marketing information, including email and SMS subscription status, marketing consents, communication preferences and interactions with marketing messages.
  • Technical and usage information, including IP address, browser and device information, identifiers, pages viewed, products clicked, cart and checkout events, referral information and interactions with the Store.
  • Cookies and similar technologies, including pixels, local storage, Shopify Customer Events and other technologies described in Section 9.

3. How we obtain personal data

We obtain personal data:

  • directly from you when you place an order, create an account, contact us, use chat, request a return or subscribe to email or SMS marketing;
  • automatically when you use the Store, through necessary technologies, cookies, pixels, analytics tools and similar technologies, according to your consent choices where required; and
  • from service providers involved in payments, delivery, fraud prevention, analytics, marketing and operation of the Store.

4. Why we process personal data and our legal bases

We process personal data for the following purposes:

  • Processing and delivering orders, handling returns, exchanges, complaints and customer support. The legal basis is performance of a contract or taking steps at your request before entering into a contract under GDPR Article 6(1)(b).
  • Processing payments and confirming transactions. The legal basis is performance of a contract under GDPR Article 6(1)(b).
  • Operating the Store, including cart, checkout, security, consent management, essential localization and requested customer-support functionality. The legal basis is performance of a contract and/or our legitimate interest in operating a secure and functional online store under GDPR Article 6(1)(b) and Article 6(1)(f).
  • Preventing fraud and protecting the Store, customers and payment processes. The legal basis is our legitimate interest in preventing abuse, fraud and security incidents under GDPR Article 6(1)(f).
  • Complying with legal, tax and accounting obligations. The legal basis is compliance with a legal obligation under GDPR Article 6(1)(c).
  • Sending email and SMS marketing, including newsletters, offers and abandoned-cart or browse-abandonment communications. The legal basis is your consent under GDPR Article 6(1)(a).
  • Analytics, attribution and Store improvement, including understanding Store performance, customer journeys, technical issues and campaign effectiveness. Where non-essential cookies or similar technologies are used, the legal basis is your consent under GDPR Article 6(1)(a).
  • Advertising and retargeting, including measuring conversions and presenting more relevant advertising. The legal basis is your consent under GDPR Article 6(1)(a).
  • Establishing, exercising or defending legal claims. The legal basis is our legitimate interest in protecting our rights under GDPR Article 6(1)(f).

Providing your name, contact details, delivery address and required payment information is necessary to place and fulfil an order. If you do not provide this information, we may be unable to process your purchase.

Creating an account and subscribing to email or SMS marketing are optional.

5. Marketing, profiling and automated decisions

We use Klaviyo for email and SMS marketing, newsletter and discount forms, customer communications, segmentation and abandoned-cart or browse-abandonment messages.

Where you have given the required consent, we may use information about your browsing activity, purchases, cart activity and marketing interactions to place you in customer or audience segments. This helps us send more relevant communications, measure campaigns and show more relevant advertising.

You can unsubscribe from marketing emails using the unsubscribe link included in each email. You can unsubscribe from SMS marketing using the instructions provided in the message, such as replying STOP where supported, or by contacting us.

Withdrawing consent does not affect processing carried out before the withdrawal.

We do not use automated decision-making that produces legal effects concerning you or similarly significantly affects you within the meaning of GDPR Article 22.

6. Who receives personal data

We disclose personal data only where necessary to operate the Store, provide services, fulfil orders, conduct consent-based analytics and marketing, or comply with legal obligations.

Recipients may include:

  • Shopify, which provides the ecommerce platform, hosting, cart, checkout, security, analytics, Customer Events, web-pixel infrastructure and related Store services.
  • Shopify Inbox, which provides customer-support chat when you choose to use it.
  • Payment providers, including Shopify Payments, Skrill and Przelewy24, for payment processing, fraud prevention and regulatory compliance.
  • Shipping, logistics and fulfilment providers, including carriers and shipping platforms needed to deliver and manage orders.
  • Klaviyo, for email and SMS marketing, customer communications, forms, segmentation and consent-based onsite tracking.
  • TinyCookie, which provides the cookie-consent banner and stores your consent choices.
  • Transcy, which provides translation, language, country and currency functionality. Some technologies support essential localization, while optional preference or tracking technologies operate according to your cookie choices.
  • Google Analytics 4 and Shopify Analytics, for consent-based traffic and Store analytics.
  • Triple Whale, for consent-based marketing analytics, revenue measurement and advertising attribution.
  • Propel Replays & Heatmaps, for consent-based session replay, heatmaps, usability analysis and identifying technical problems. It may process information about pages viewed, clicks, scrolling and other interactions with the Store. Sensitive payment and password fields are not intended to be recorded.
  • Meta and TikTok, for consent-based advertising, conversion measurement, audience measurement and retargeting.
  • Professional and operational service providers, including IT, security, hosting, accounting, tax, legal and compliance providers.
  • Authorities, courts and other legal recipients, where disclosure is required by law or necessary to protect our rights, customers or the Store.

Some providers process personal data on our behalf as processors. Other providers, particularly payment providers and certain platform services, may act as independent controllers for their own purposes under their own privacy terms.

7. International transfers

Some service providers or their subprocessors may process personal data outside the European Economic Area, the United Kingdom or Switzerland.

This may include processing in:

  • Canada, including certain Shopify operations; and
  • the United States, including certain analytics, marketing, advertising, technology and payment providers.

Where required, transfers are protected using an applicable adequacy decision, participation in the EU-US Data Privacy Framework, the European Commission’s Standard Contractual Clauses, or other legally recognised safeguards.

You may contact us at [email protected] for further information about the safeguards applicable to a particular transfer and, where available, to request a copy.

8. How long we retain personal data

We retain personal data only for as long as needed for the purposes described in this Policy, including:

  • Order and customer-support data: for as long as needed to fulfil the order, handle returns, complaints and disputes, and protect legal claims.
  • Tax and accounting records: for the period required by applicable Polish law, generally five years calculated according to the relevant tax and accounting rules.
  • Security and fraud-prevention data: for as long as reasonably needed to prevent abuse, investigate incidents and protect legal claims.
  • Email and SMS marketing data: until you withdraw consent, unsubscribe or object, subject to retaining minimal suppression or consent records where necessary for compliance.
  • Cookie, analytics and advertising data: according to the applicable technology, provider settings and consent preferences. More detailed information may be available through the Store’s cookie settings.

Data may be retained for longer where required by law or where necessary for ongoing complaints, disputes, investigations or legal proceedings.

9. Cookies and similar technologies

We use cookies and similar technologies, including pixels, local storage and Shopify Customer Events.

The Store uses the following categories:

  • Strictly required technologies: used for security, sessions, cart, checkout, consent storage and other services necessary for the Store to operate. These cannot normally be disabled.
  • Functionality technologies: used for optional language, country, currency and preference features. Some localization functionality may be necessary to provide the version of the Store requested by you, while optional preference technologies are controlled through the Functionality setting.
  • Analytics technologies: Google Analytics 4, non-essential Shopify Analytics, Triple Whale and Propel Replays & Heatmaps. These are used only after the relevant consent where required.
  • Marketing technologies: Meta Pixel, TikTok Pixel and Klaviyo onsite tracking. These are used only after the relevant consent where required.

When you first visit the Store, the cookie banner allows you to accept all optional technologies, accept required technologies only, or manage individual categories. Optional categories are disabled unless you choose to enable them.

You can change or withdraw your cookie choices at any time through the cookie settings available on the Store. Refusing optional cookies will not prevent you from using the Store’s essential shopping and checkout functions.

10. Your data-protection rights

Subject to the conditions set out in applicable law, you may have the right to:

  • access your personal data and receive a copy;
  • correct inaccurate or incomplete data;
  • request deletion of personal data;
  • request restriction of processing;
  • receive certain data in a portable format;
  • object to processing based on legitimate interests;
  • object at any time to direct marketing; and
  • withdraw consent at any time where processing is based on consent.

To exercise these rights, contact us at [email protected].

We may request information necessary to verify your identity. We will respond without undue delay and normally within one month. Where permitted by the GDPR, this period may be extended by up to two additional months due to the complexity or number of requests. We will inform you if an extension is required.

11. Complaints

You have the right to lodge a complaint with a competent data-protection supervisory authority.

In Poland, the supervisory authority is:

President of the Personal Data Protection Office
Prezes Urzędu Ochrony Danych Osobowych
ul. Stanisława Moniuszki 1A
00-014 Warszawa, Poland
https://uodo.gov.pl

You may also contact the supervisory authority in the EU or EEA country where you live, work or believe an infringement occurred.

12. Children

We do not knowingly rely on consent provided by a child under 16 for consent-based marketing, analytics or advertising processing without valid authorization from the holder of parental responsibility where such authorization is legally required.

If you believe that a child has provided personal data without the required authorization, contact us at [email protected].

13. Security

We use appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.

No online system can guarantee absolute security. You should protect your account credentials and contact us if you suspect unauthorised use of your account or personal data.

14. Shopify relationship

The Store is hosted by Shopify. Shopify generally processes Store and customer data on our behalf under its data-processing terms. For certain Shopify services, including Shop, Shop Pay, Shopify Network Intelligence or other enhanced services, Shopify may process personal data as an independent controller under its own privacy terms.

To learn more about Shopify’s processing, you can review Shopify’s privacy information at https://www.shopify.com/legal/privacy.

15. Changes to this Policy

We may update this Privacy Policy when our services, providers, technologies or legal obligations change.

The current version will be published on the Store. The “Last updated” date at the top shows when the Policy was most recently revised.

16. Contact

For questions, requests or concerns relating to privacy or personal data, contact:

Miro Nowa Perspektywa Sp. z o.o.
Email: [email protected]
Phone: +48 571 669 028