Privacy and Cookies Policy | Setter Label

1. General information

1. This Privacy Policy sets out the rules for processing personal data and using cookies and similar technologies in the Setter Label online store available at setterlabel.com, hereinafter referred to as the “Store”.
2. We respect the privacy of people visiting Setter Label and process personal data only to the extent necessary to operate the Store, process orders, communicate with users and pursue the other purposes described in this Policy.
3. Personal data is processed in accordance with applicable law, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council (the “GDPR”).

2. Personal data controller

The controller of personal data is:

Marta Kowalska

selling under the Setter Label brand as an unregistered business activity,

address: Mochnackiego 15/19, 93-160 Łódź, Poland

email: info@setterlabel.com

telephone: +48 574 914 395

hereinafter referred to as the “Controller”.

For matters concerning privacy and the processing of personal data, please contact:

info@setterlabel.com

3. Data we may process

Depending on how the Store is used, we may process in particular:

• full name,
• email address,
• telephone number,
• information required to arrange delivery,
• information about the selected Parcel Locker,
• information about the order and purchased products,
• information provided in connection with product personalisation,
• information provided when contacting Setter Label,
• information required to issue a receipt or invoice if requested by the Buyer,
• payment information visible in connection with a bank transfer received,
• order history,
• customer account information,
• the email address used for voluntary newsletter subscription,
• information about consents given,
• IP address,
• technical information concerning the device and browser,
• information stored in cookies or similar technologies.

We do not require information that is not necessary for a specified purpose.

4. Orders and performance of the contract

We process information provided when placing an order in order to:

• accept the order,
• conclude and perform the sales contract,
• prepare the product,
• carry out personalisation,
• communicate about the order,
• receive payment,
• prepare the parcel,
• hand the parcel over to the carrier,
• handle any returns and complaints.

The principal legal basis for processing is Article 6(1)(b) GDPR, namely the need to take steps at the Buyer's request and to perform the concluded contract.

Where the law requires the Controller to retain specified information or documentation, the legal basis is Article 6(1)(c) GDPR, namely compliance with a legal obligation.

Data may also be retained to the extent necessary to establish, exercise or defend legal claims. The legal basis in this case is Article 6(1)(f) GDPR, namely the Controller's legitimate interest.

Providing the data necessary to process an order is voluntary, but failure to provide it may prevent the contract from being concluded or performed.

5. Product personalisation

When ordering a personalised product, we may process content supplied by the Buyer, for example:

• name,
• inscription,
• date,
• artwork,
• photograph,
• other information required to create an individual design.

This data is used primarily to make the ordered product.

If the Buyer supplies materials containing the personal data of other people, the Buyer should have the right to use those materials for the purpose of fulfilling the order.

We do not use materials supplied for personalisation for advertising, publication on social media or presentation of completed work without an appropriate legal basis or separate consent.

6. Payments by bank transfer

Payments at Setter Label are currently made by bank transfer.

In connection with a transfer received, we may receive information such as:

• the account holder's full name,
• account number,
• transfer amount,
• transaction date,
• payment reference.

This data is processed to identify the payment, process the order, maintain required records and make any necessary refund.

Banks and other institutions participating in the transfer also process data in accordance with their own legal obligations.

7. Delivery – InPost

To arrange delivery, we may provide the InPost operator with the information required to dispatch and handle the parcel, in particular:

• full name,
• telephone number,
• email address,
• information about the selected Parcel Locker,
• parcel information.

Data is provided only to the extent necessary to arrange delivery, handle the parcel and process any transport-related return or complaint.

8. Customer account

If a user creates an account with Setter Label, we process account-related data in order to:

• maintain the account,
• enable sign-in,
• provide access to order history,
• make future purchases easier,
• manage customer data.

Creating an account is voluntary.

The user may request deletion of the account at any time.

Deleting an account does not automatically delete information about transactions already completed if further retention is required by law or necessary to protect legal claims.

9. Contact form and email contact

If you contact Setter Label using the contact form or by email, we may process:

• name,
• email address,
• telephone number, if provided,
• the content of the message,
• other information voluntarily included in the message.

We process this data in order to reply and conduct correspondence.

If the message concerns an order or the conclusion of a contract, processing may be based on Article 6(1)(b) GDPR.

In other cases, processing may be based on the Controller's legitimate interest in communicating and responding to enquiries – Article 6(1)(f) GDPR.

10. Complaints, returns and other enquiries

We process data supplied in connection with a complaint, return or another order-related enquiry in order to:

• accept the enquiry,
• contact the Buyer,
• handle the complaint,
• perform obligations arising from applicable law,
• agree how the product will be delivered or collected,
• make any necessary refund.

We may ask for photographs of the product if they will help us handle the enquiry efficiently.

16. Server logs and security

When the Store is used, the server may automatically record technical information such as:

• IP address,
• date and time of connection,
• the requested page address,
• browser information,
• operating system information,
• information about errors and operation of the website.

This information may be processed in order to:

• ensure the Store operates correctly,
• protect against abuse and attacks,
• diagnose errors,
• ensure security,
• perform technical administration.

Processing is based on the Controller's legitimate interest in ensuring the security and proper operation of the Store.

17. Recipients of data

Personal data may be entrusted or disclosed only to entities whose involvement is necessary to operate the Store or provide a particular service.

Depending on the circumstances, these may include:

• InPost – for delivery purposes,
• banks and institutions participating in payment processing,
• the hosting provider,
• the email service provider,
• entities providing technical support for the Store and PrestaShop,
• the newsletter system provider, if an external service is used,
• accounting, tax or legal service providers, where necessary,
• analytics or marketing tool providers – only to the extent resulting from the tools used and the consents given,
• public authorities, where disclosure is required by law.

We provide data to service providers acting on our behalf only to the extent necessary for them to perform their tasks.

18. Transfers of data outside the European Economic Area

As a rule, we seek to use solutions that enable data to be processed within the European Economic Area.

If the Store uses external tools whose providers process data outside the EEA, transfers will be made in accordance with Chapter V of the GDPR, for example on the basis of a European Commission adequacy decision or appropriate safeguards provided for in the GDPR.

If such tools are introduced, their providers, purposes and operating principles will be identified in the current version of this Policy or in the available consent management mechanism.

19. How long we retain data

We retain data only for as long as necessary for the purpose for which it was collected.

In particular:

Orders and contracts – for the period required to perform the contract and subsequently for the period required by law and necessary to establish, exercise or defend legal claims.

Tax and sales records – for the period prescribed by applicable law. As a rule, tax documents are retained until the limitation period for the tax liability expires, usually 5 years from the end of the calendar year in which the tax payment deadline occurred.

Customer account – until it is deleted, subject to information that we must retain for other reasons.

Correspondence – for the period required to close the matter and subsequently for a period justified by the possibility of legal claims.

Complaints – for the period required to handle them and for an appropriate period connected with the Seller's liability and any legal claims.

Newsletter – until consent is withdrawn, although basic information documenting consent previously given may be retained for the period necessary to demonstrate the Controller's compliance with the law.

Cookies – for the lifetime of the relevant cookie or until it is deleted by the user; for consent-based cookies, also until consent is withdrawn.

The GDPR requires the retention period or the criteria used to determine it to be specified and requires data not to be retained for longer than necessary for the purpose for which it is processed.

22. Automated decision-making and profiling

Setter Label does not make decisions about customers based solely on automated processing that produce legal effects concerning them or similarly significantly affect them.

If analytics or advertising tools enabling the creation of audience groups or the personalisation of advertising are used in the future, they will be activated only after the required consent has been obtained, with the option to withdraw it later.

23. Data security

The Controller uses appropriate technical and organisational measures intended to protect data against:

• unauthorised access,
• loss,
• unauthorised alteration,
• disclosure,
• destruction.

The safeguards used are adjusted to the nature of the data processed and the existing risks.

24. External links and websites

The Store may contain links to external websites or services.

After leaving setterlabel.com, the rules for data processing may be determined by the owner of the relevant website.

We recommend reading that website's privacy policy before providing any data.

25. Social media

Setter Label may maintain social media profiles.

When such profiles are used, the operator of the relevant social media service may also process user data in accordance with its own terms and privacy policy.

The mere presence of a link to a Setter Label profile does not mean that a Store user is automatically subscribed to the newsletter or that information provided during the ordering process is used for marketing purposes.

26. Voluntary provision of data

Providing data is generally voluntary.

Some information is nevertheless necessary to complete a particular action.

For example:

• without contact details, we will not be able to process an order correctly,
• without the required delivery information, we will not be able to dispatch a parcel,
• without an email address, an account requiring email sign-in cannot be created,
• without an email address, it is not possible to subscribe to the newsletter.

Consent to the newsletter and optional cookies is not a condition of making a purchase.

27. Amendments to the Privacy Policy

This Privacy Policy may be updated, in particular in the event of:

• changes in the law,
• changes in the way the Store operates,
• the introduction of new functions,
• changes in the way deliveries or payments are processed,
• the implementation of new analytics, marketing or technical tools.

The current version of this Policy is always available at setterlabel.com.

Changes do not affect the lawfulness of processing carried out before they were introduced.

28. Contact

If you have questions about privacy, personal data or cookies, please contact us:

email: info@setterlabel.com

telephone:+48 574 914 395

Effective date of this Policy: 1 September 2026.