Applicable Entity: Marcin (operator of jofmkh, hereinafter referred to as “we”, “us” or “our”)

Applicable Scope: This Privacy Policy applies to your access and use of our website (https://jofmkh.com/), purchase of our core product “Mini Bag Model Decorations”, and use of related services (including order processing, customer service, and after-sales support, collectively referred to as “Services”).

We respect your privacy and recognize the importance of protecting your personal data. This Privacy Policy is intended to transparently inform you of why and how we collect, use, store, disclose, and protect your personal information, as well as your rights regarding your personal data. By using our Services, you acknowledge that you have read, understood, and agreed to the terms of this Policy.

1. Definition of Personal Information

For the purpose of this Policy, “Personal Information” refers to information (in electronic or other forms) that can identify a specific natural person individually or in combination with other information, in accordance with relevant laws (e.g., Poland’s Data Protection Act and the EU General Data Protection Regulation (GDPR)).

  • General Personal Information: Includes your name, email address, phone number, shipping address, device model, browser type, operating system version, login IP address, and browsing records on our website.
  • Sensitive Personal Information: Includes your payment-related information (e.g., partial credit card digits, bank account information), precise shipping address, and transaction records. We will take stricter protective measures for sensitive personal information.

2. Collection and Use of Personal Information

We only collect personal information that is necessary for providing Services and complying with legal obligations, and will not collect irrelevant information without your consent.

2.1 Information You Voluntarily Provide

We collect information you actively submit when using our Services, including but not limited to:

  • Order & Purchase Information: Name, email address (service@jofmkh.com for correspondence), phone number, and shipping address (e.g., Kolonia Prusów 7777, 34-360 Milówka, Poland) to process your order, arrange delivery, and send order confirmations.
  • Payment Information: When you make a payment, you may provide partial payment details (e.g., credit card issuer, last 4 digits of the card number) to complete transactions. We do not store your full credit card information—this data is processed directly by third-party payment gateways (see Section 5 for details).
  • Customer Service Information: Information you provide when contacting us (e.g., inquiry content, order number) to respond to your questions, handle complaints, or provide after-sales support.

2.2 Information Automatically Collected

When you access our website or use our Services, we may automatically collect technical information through secure technical means, including:

  • Device information: Hardware model, unique device identifier, operating system type, and software version.
  • Network information: IP address, access network type (e.g., Wi-Fi, mobile data), and network quality data.
  • Usage information: Pages you browse, time spent on pages, product viewing records, and operation logs (e.g., adding items to cart).

The purpose of collecting this information is to:

  • Optimize website performance and user experience (e.g., adapting to your device type, fixing loading errors).
  • Analyze user preferences to improve our product recommendations (e.g., showing popular Mini Bag Model colors).
  • Ensure the security of our Services (e.g., detecting abnormal login attempts).

3. Storage of Personal Information

3.1 Storage Location

We store your personal information in servers located within the European Union (or regions that meet EU data protection standards) to ensure compliance with GDPR and Polish data protection laws. We will not transfer your information to regions without adequate privacy protection unless we obtain your explicit consent and take appropriate security measures (e.g., data encryption).

3.2 Storage Period

We only store your personal information for the minimum period necessary to achieve the purposes stated in this Policy:

  • Order-related information (e.g., name, shipping address, transaction records) will be retained for 7 years after your order is completed (to comply with Polish tax and commercial record-keeping laws).
  • Customer service records will be retained for 2 years after the resolution of your inquiry (to handle potential follow-up questions).
  • Automatically collected technical information (e.g., IP address, browsing logs) will be retained for 6 months, unless longer retention is required by law.

Once the retention period expires, we will securely delete or anonymize your personal information (anonymized data cannot be used to identify you).

4. Protection of Personal Information

We take industry-standard security measures to prevent your personal information from being lost, misused, accessed, disclosed, altered, or destroyed. Specific measures include:

  • Data Encryption: All data transmitted between you and our website is protected by Secure Socket Layer (SSL) technology. Sensitive information (e.g., payment-related data) is stored using AES-256 encryption.
  • Payment Security: We comply with Payment Card Industry Data Security Standard (PCI-DSS) requirements to ensure the security of payment transactions.
  • Access Control: Only authorized personnel (e.g., customer service staff, order managers) have access to your personal information, and they are bound by strict confidentiality obligations.
  • Technical Updates: We regularly update our website security systems (e.g., firewalls, anti-virus software) to address emerging security risks.

Note: No method of transmission over the internet or electronic storage is 100% secure. While we take all reasonable precautions, we cannot guarantee absolute security. You are also responsible for protecting your account security (e.g., not sharing your email password with others).

5. Disclosure of Personal Information

We will not sell, rent, or disclose your personal information to third parties for commercial purposes, except in the following cases:

  • Third-Party Service Providers: We may share necessary information with trusted third parties to provide Services on our behalf, including:
    • Payment processors (e.g., PayPal, credit card companies): To process your payment (they have their own privacy policies, and we are not responsible for their data practices).
    • Logistics providers (e.g., DHL, Polish Post): To deliver your Mini Bag Model orders (we only share your name, shipping address, and phone number).
  • Legal Requirements: We may disclose your information if required by law (e.g., a court order, government investigation) or to protect our legitimate rights (e.g., preventing fraud).
  • With Your Consent: We will disclose your information to third parties only if you have given explicit consent (e.g., agreeing to share your order feedback with our partners).

6. Your Rights Regarding Personal Information

Under GDPR and Polish data protection laws, you have the following rights regarding your personal information. To exercise these rights, please contact us via the method in Section 10:

  • Right of Access: You may request a copy of the personal information we hold about you.
  • Right of Correction: You may request to correct inaccurate or incomplete information (e.g., updating your shipping address).
  • Right to Erasure (“Right to Be Forgotten”): You may request the deletion of your personal information if it is no longer necessary for the purposes stated in this Policy, or if you withdraw your consent.
  • Right to Withdraw Consent: You may withdraw your consent to the collection/use of your information at any time (this will not affect the legality of processing before withdrawal).
  • Right to Data Portability: You may request to receive your personal information in a structured, machine-readable format (e.g., a CSV file) or transfer it to another service provider.
  • Right to Object: You may object to the processing of your information for direct marketing or other non-essential purposes.

We will respond to your request within 30 days of receiving it. If we cannot fulfill your request (e.g., due to legal obligations), we will explain the reason in writing.

7. Use of Cookies

We use “Cookies” (small text files stored on your device) to improve your experience on our website. Cookies help us:

  • Remember your preferences (e.g., language settings, currency).
  • Track website traffic and analyze user behavior (e.g., which Mini Bag Model colors are most viewed) to optimize our services.
  • Maintain session security (e.g., preventing unauthorized access to your cart).

Types of Cookies We Use:

  • Necessary Cookies: Essential for the website to function (e.g., cookies that remember your cart items). You cannot disable these cookies without affecting service functionality.
  • Analytical Cookies: Used to collect anonymous usage data (e.g., Google Analytics cookies). This data is not linked to your personal information.

Managing Cookies:

You can control or disable cookies through your browser settings (e.g., Chrome, Firefox, Safari). However, disabling non-necessary cookies may reduce your website experience (e.g., you may need to re-enter your preferences each time you visit).

8. Protection of Minors

We do not intentionally collect personal information from minors under the age of 16. If you are a parent or guardian and discover that your child has provided us with personal information, please contact us immediately. We will delete the information within 15 days of verifying your identity and relationship to the minor.

To use our Services (e.g., placing an order), minors must obtain the explicit consent of their parent or guardian.

9. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in laws, technology, or our business practices. When we make material changes (e.g., changes to how we collect or disclose information), we will:

  • Post the updated Policy on our website (https://jofmkh.com/) with a new “Last Updated” date.
  • Notify you via email (if you have provided your email address) at least 7 days before the changes take effect.

We encourage you to review this Policy regularly to stay informed about how we protect your privacy. Your continued use of our Services after the changes take effect constitutes your acceptance of the updated Policy.

10. Contact Us

If you have any questions, complaints, or requests regarding this Privacy Policy or your personal information, please contact us via:

  • Email: service@jofmkh.com (preferred method—we respond within 2 business days).
  • Physical Address: Marcin, Kolonia Prusów 7777, 34-360 Milówka, Poland.
  • Website: You may also submit an inquiry through the “Contact Us” page on https://jofmkh.com/.

If you are not satisfied with our response, you may file a complaint with the Polish data protection authority (Urząd Ochrony Danych Osobowych, UODO) or the relevant EU data protection supervisory authority.