Privacy Policy

1. This Privacy Policy defines the rules for processing personal data obtained through the website https://puresoapco.com/, hereinafter referred to as the “Website”. 2. The owner of the Website and at the same time the Data Controller is Joanna Zurawska, S80 4TX Whitwell Worksop, 78a Holmefield Road, hereinafter referred to as the Controller. 3. Personal data collected by the Controller through the Website are processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation), also referred to as GDPR. 4. The Controller makes every effort to respect the privacy of Clients visiting the Website.

§ 1 Type of processed data, purposes and legal basis

1. The Controller collects information concerning natural persons performing legal actions not directly related to their business activity, natural persons conducting business or professional activity on their own behalf, and natural persons representing legal entities or organizational units without legal personality granted legal capacity by law, conducting business or professional activity on their own behalf, hereinafter jointly referred to as Clients. 2. The Controller processes Clients’ personal data in connection with the use of the contact form service on the Website for purposes necessary to perform a contract or to take steps prior to entering into a contract – the legal basis is Article 6(1)(b) GDPR. 3. When using the contact form, the Client provides the following data:
  • email address
  • first name
  • phone number
4. While using the Website, additional information may be collected, in particular: IP address assigned to the Client’s computer or the external IP address of the Internet service provider, domain name, browser type, access time, operating system type. Navigation data may also be collected, including information about links and references the Client clicks on or other actions taken on the Website for purposes related to service provision, as well as for technical, administrative, analytical and statistical purposes – in this respect, the legal basis is also Article 6(1)(f) GDPR, i.e. necessity for the purposes of the legitimate interests pursued by the Controller, such as ensuring IT security, managing the Website and improving its functionality and services.

§ 2 Data recipients

1. Clients’ personal data are transferred to service providers used by the Controller to operate the Website. Depending on contractual arrangements and circumstances, these service providers either act on the Controller’s instructions regarding the purposes and methods of processing (processors) or independently determine the purposes and methods of processing (controllers).
  • 1.1. Processors. The Controller uses providers who process personal data only on its instructions, including hosting providers, accounting services, marketing systems, website traffic analysis systems and marketing campaign effectiveness analysis systems.
  • 1.2. Controllers. The Controller uses providers who do not act solely on instructions and independently determine purposes and methods of processing, including electronic payment and banking service providers.
2. Location. Service providers are mainly based in Poland and other countries of the European Economic Area (EEA). 3. Upon request, the Controller provides personal data to authorized public authorities, in particular to organizational units of the Prosecutor’s Office, Police, President of the Personal Data Protection Office, President of the Office of Competition and Consumer Protection or the President of the Office of Electronic Communications.

§ 3 Data retention period

1. Clients’ personal data are stored:
  • 1.1. If the basis for processing is consent, data are processed until consent is withdrawn and thereafter for a period corresponding to the limitation period for claims – generally six years, and for periodic benefits and business-related claims – three years.
  • 1.2. If the basis is contract performance, data are processed for as long as necessary to perform the contract and thereafter in accordance with limitation periods.

§ 4 Cookies mechanism, IP address

1. The Website uses small files called cookies. They are stored by the Controller on the user’s end device if the browser allows it. Cookies usually contain the domain name, expiration time and a unique randomly generated number. 2. The Controller uses two types of cookies:
  • 2.1. Session cookies: deleted after closing the browser session.
  • 2.2. Persistent cookies: stored until deleted or expired.
3. Own cookies are used to:
  • 3.1. analyze and audit website traffic and create anonymous statistics to improve website structure and content.
4. External cookies are used to:
  • 4.1. display a map indicating the Controller’s office location using maps.google.com (external cookie administrator: Google Inc., USA).
5. Cookies are safe and do not allow viruses or malicious software to enter users’ computers. Users can restrict or disable cookies in their browsers. 6. The Controller may collect IP addresses for technical, statistical and security purposes.

§ 5 Rights of data subjects

Data subjects have the right to: 1. Withdraw consent at any time
  • 1.1. Withdraw any granted consent
  • 1.2. Withdrawal is effective from the moment of submission
  • 1.3. Does not affect legality of previous processing
  • 1.4. May limit use of certain services
2. Object to processing
  • 2.1. Object based on personal situation under Article 6(1)(e,f) GDPR
  • 2.2. Opt-out of marketing communications constitutes objection
3. Right to erasure (“right to be forgotten”)
  • 3.1. Request deletion of all or some data
4. Right to restriction of processing 5. Right of access and copy 6. Right to rectification 7. Right to data portability 8. Right to lodge a complaint 9. Requests are processed within one month (or two months if complex). 10. Complaints and inquiries can be submitted to the Controller.

§ 6 Changes to the Privacy Policy

1. The Privacy Policy may change without notice. 2. Questions should be sent to: glamservisuk@gmail.com 3. Last updated: 26.11.2025