Privacy Policy

Last updated: July 12, 2026

1. Who We Are

This website (veryniceguitars.com) is operated by:

Under the European Union General Data Protection Regulation (GDPR), we act as the Data Controller for the personal information you provide to us.

2. Introduction

We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you visit our website, make a purchase, or communicate with us.

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by updating the date at the top of this policy and, where appropriate, via a prominent notice on our website or by directly emailing you.

3. The Data We Collect & Why We Process It

We aim to keep data collection to the absolute minimum required to provide you with a high-quality experience. We process your data based on specific legal grounds under the GDPR:

• Order & Identity Data: Your name, shipping address, billing address, email address, and telephone number.
  Legal Basis: Performance of a Contract (Article 6(1)(b) GDPR) to process, ship, and communicate about your order, and Legal Obligation (Article 6(1)(c) GDPR) to fulfill Polish tax and accounting regulations.
• Communication Data: Information provided when you use our online chat, message boards, or direct contact channels.
  Legal Basis: Legitimate Interest (Article 6(1)(f) GDPR) to efficiently respond to your inquiries and provide quality customer support.
• Technical & Usage Data (Derivative Data): IP address, browser type, operating system, access times, and pages viewed before/after accessing the Site.
  Legal Basis: Legitimate Interest (Article 6(1)(f) GDPR) to maintain site security, fix errors, and optimize website performance, or Consent (Article 6(1)(a) GDPR) where tracking and marketing cookies are deployed.

4. Cookies

A cookie is a small text file downloaded to your device when you visit our Site. We use functional cookies (necessary for the shopping cart and checkout functionalities to work), performance cookies, and analytical cookies.

• Necessary Cookies: These are essential for the operation of the website and are loaded automatically.
• Non-Essential Cookies: Tracking, performance, or marketing cookies are only deployed if you give us your explicit, affirmative consent via our cookie banner.

You can manage, restrict, or disable cookies at any time through your browser settings, though doing so may prevent certain site features from working correctly. For comprehensive information, visit allaboutcookies.org .

5. Embedded Content from Other Websites

Pages on this site may include embedded content (e.g., videos, images, social media widgets). Embedded content from other websites behaves in the exact same way as if the visitor has visited the external website directly. These websites may independently collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content.

6. Who We Share Your Data With

We do not sell your personal data. We only share your data with trusted third-party service providers essential to running our business operations:

• Codarius Sp. z o.o.: Our e-commerce platform provider, who hosts our online store infrastructure.
• SalSoft Sp. z o.o.: Our certified accounting and bookkeeping services provider in Poland.
• Google LLC: For website analytics (Google Analytics), used to understand traffic patterns.
• Shipping & Courier Services: Independent fulfillment partners used to physically deliver your purchases.

We may also disclose your information if required to do so by applicable laws, a court order, or a lawful request by public authorities.

7. How Long We Retain Your Data

We adhere to the storage limitation principle. We retain your personal information only as long as strictly necessary for the purposes it was collected:

• Order and Accounting Data: Retained for 5 years from the end of the calendar year in which the tax payment deadline expired, in strict compliance with Polish tax law.
• Customer Support Communications: Retained for up to 2 years following our last active contact, unless required for ongoing legal claims or dispute resolutions.

8. Data Transfers Outside the EEA

With our e-commerce operations hosted by Codarius Sp. z o.o. (a company based in Poland), your primary store data is stored and processed within the European Economic Area (EEA). If any underlying sub-processors (such as international analytics or global IT infrastructure tools) transfer data outside the EEA, we ensure that appropriate safeguards, such as European Commission-approved Standard Contractual Clauses (SCCs), are in place to maintain a level of protection equivalent to the GDPR.

9. Your Data Protection Rights

Under the GDPR, you possess the following rights regarding your personal data, which you can exercise free of charge :

• Right of Access: You can request copies of the personal data we hold about you.
• Right to Rectification: You can ask us to correct inaccurate or incomplete information.
• Right to Erasure ("Right to be Forgotten"): You can request that we delete your data under certain conditions (subject to overriding statutory tax retention obligations).
• Right to Restrict Processing: You can request that we limit how we utilize your data.
• Right to Object: You can object to our processing of your data based on legitimate interests.
• Right to Data Portability: You can request that we transfer your collected data to another organization or directly to you.

If you make a formal request, we have one month to respond to you. To exercise any of these rights, please contact us via email at info@veryniceguitars.com .

Right to Lodge a Complaint

If you believe that we are processing your personal data unlawfully, you have the right to lodge a formal complaint with the competent supervisory authority in Poland:

10. Do Not Track Signals

Please note that because there is currently no universal industry consensus or technical standard on how to interpret "Do Not Track" browser settings, we do not alter our automated data collection practices when we encounter a DNT signal.