Privacy policy

Privacy Policy

Last updated: 14 September 2026

AirVex ("we", "us", "our") respects your privacy. This Privacy Policy explains what personal data we collect when you visit airvex.shop, how we use it, and your rights.

As AirVex is established in Poland and sells to consumers in the United Kingdom, this Privacy Policy applies UK data protection law (the UK GDPR and the Data Protection Act 2018) to our customer data, and Polish/EU data protection law (the GDPR, Regulation 2016/679) applies to us as a Polish trader.

Who We Are

AirVex is a trading name of Stanisław Turczak, a sole proprietor (jednoosobowa działalność gospodarcza) registered in Poland:

  • Business address: ul. Generała Tadeusza Kutrzeby 54a, 52-213 Wrocław, Poland
  • Tax identification (NIP): PL8993060051
  • Business registration (REGON): 544877957
  • Contact email: airvex.shop@gmail.com
  • Contact phone: +48 662 183 583

We are the data controller for personal data collected through airvex.shop.

What We Collect

We collect the following categories of personal data:

Information you provide us directly:

  • Contact and identity: name, email address, phone number, delivery and billing address
  • Order and payment information: items purchased, order history, payment method (we do not store full card numbers — see "Payment Data" below)
  • Communications: messages you send us, including customer support requests, product reviews, and feedback
  • Subscription preferences: shipment frequency, pause and cancellation choices

Information collected automatically when you visit our site:

  • Device and connection: IP address, browser type, operating system, device identifiers, referring website
  • Usage: pages viewed, products browsed, time on site, checkout progress, interactions with our emails
  • Cookies and similar technologies: see the "Cookies" section below

We do not knowingly collect personal data from children under 16. If you believe a child has provided us data, contact us and we delete it.

Payment Data

Payments are processed by our payment providers, which may include Shopify Payments, Stripe, PayPal, or other authorised processors enabled at checkout. Card details are entered directly into their systems and are not stored on our servers.

We receive limited confirmation data — such as transaction ID, last four digits of the card, and billing address — that we need to fulfil your order, prevent fraud, and manage refunds.

Why We Use Your Data (Lawful Basis)

Under UK and EU data protection law we must have a lawful basis for using your data. Here is what we do and why:

What we do Lawful basis
Process and fulfil your order Performance of a contract
Provide customer support and communicate about your order Performance of a contract
Manage subscriptions and recurring billing Performance of a contract
Prevent fraud, verify identity, and secure our site Legitimate interests
Send marketing emails and SMS to existing customers about similar products Legitimate interests, with opt-out in every message
Send marketing to new subscribers who signed up on our site Consent
Measure site performance and improve the shopping experience Legitimate interests
Comply with tax, accounting, consumer protection, and other legal obligations Legal obligation

You can withdraw consent for marketing at any time using the unsubscribe link in every marketing email, by replying STOP to any marketing SMS, or by emailing airvex.shop@gmail.com.

Who We Share Your Data With

We share personal data only with parties that help us run the business:

  • Shopify — our e-commerce platform, hosts your account and order data
  • Payment processors (Shopify Payments, Stripe, PayPal, and any others enabled at checkout) — process your payment and manage refunds
  • Our international fulfilment partner based in mainland China — receives your name, address, phone, and order details to pick, pack, and dispatch your parcel
  • Shipping carriers (Royal Mail, DPD, Evri, DHL, Yun Express, and equivalents) — deliver your parcel
  • Email and SMS providers — send order updates and, where you have opted in, marketing
  • Analytics and advertising partners (such as Google, Meta) — help us measure site performance and target advertising
  • Subscription management platform (Loop Subscriptions) — manages recurring billing for subscribers
  • Customer support tools — help us respond to your emails
  • Professional advisers such as accountants and lawyers, where needed for tax or legal compliance
  • Public authorities when required by law

We do not sell your personal data.

International Transfers

Some of the processors and fulfilment partners we work with are based outside the United Kingdom and the European Economic Area. Notably:

  • Our fulfilment partner is based in China
  • Some of our technology and analytics providers are based in the United States

When we transfer your data outside the UK and EEA, we use appropriate safeguards — most commonly the UK's International Data Transfer Agreement, the EU Standard Contractual Clauses, or adequacy decisions issued by the UK government or the European Commission. You can request a copy of these safeguards by emailing airvex.shop@gmail.com.

How Long We Keep Your Data

We keep personal data only as long as we need it for the purposes we collected it for:

  • Order and transaction records: 6 years, to meet UK and Polish tax and accounting requirements
  • Account data: while your account is active, plus 3 years after last activity
  • Subscription records: while your subscription is active, plus 6 years after it ends
  • Marketing preferences: until you withdraw consent or unsubscribe
  • Customer support messages: 3 years from the last message
  • Analytics data: up to 26 months in aggregated form

After these periods, we delete or anonymise the data.

Your Rights

Under UK and EU data protection law, you have the following rights:

  • Access — receive a copy of the personal data we hold about you
  • Rectification — ask us to correct inaccurate data
  • Erasure — ask us to delete your data (the "right to be forgotten"), subject to legal exceptions (for example, we may need to keep order records for tax purposes)
  • Restriction — limit how we use your data
  • Objection — object to processing based on legitimate interests, including for marketing
  • Portability — receive your data in a machine-readable format so you can move it elsewhere
  • Withdraw consent — for anything we do based on your consent

To exercise any of these rights, email airvex.shop@gmail.com. We respond within one month.

If you are unhappy with how we handle your data, you can complain to your local data protection authority:

  • United Kingdom (for customer data): Information Commissioner's Office at ico.org.uk
  • Poland (supervisory authority over AirVex as a Polish trader): President of the Personal Data Protection Office (Prezes UODO) at uodo.gov.pl

Cookies

Our website uses cookies and similar technologies to remember your cart, keep you logged in, measure site performance, and support advertising. You can control cookies through your browser settings or through the cookie preferences shown on your first visit to the site.

Where required by law (including under UK PECR and the EU ePrivacy Directive), we ask for your consent before setting non-essential cookies.

Security

We use administrative, technical, and physical safeguards to protect your data. These include encryption of data in transit (HTTPS), access controls, and reliance on trusted processors such as Shopify for payment handling.

No system is 100% secure. If we become aware of a personal data breach affecting you, we notify you and the relevant supervisory authority within the timeframes required by law.

Changes to This Policy

We may update this Privacy Policy from time to time. The "last updated" date at the top reflects any changes. Material changes are notified by email or through a banner on our site.

Contact

For any privacy question, or to exercise your rights, email airvex.shop@gmail.com.