Ziołowy Dwór Marek Gorczyca (trading as “Herbal Mansion”).

• NIP: 6851218021
• VAT: PL6851218021
• REGON: 180856431
• EORI: PL685121802100000

Contact: sales@herbalmansion.com

Data you provide (Order & Account Data)

• Name, billing and shipping address
• Email address, phone number
• Order details (products, quantities, notes)
• Payment-related information processed by payment providers (we do not store full card details)
• Customer support messages

Data collected automatically (Device & Usage Data)

• IP address, browser type, device information, time zone
• Cookies and similar technologies
• Pages/products viewed, referrers/search terms, interaction events

Marketing preferences

• Newsletter/SMS subscription status and consent/opt-out records
• Advertising interaction data where enabled

• Process and fulfill orders (payments, packing, shipping, confirmations, invoices)
• Communicate with you about orders and support
• Handle returns/refunds where applicable
• Prevent fraud and secure transactions
• Improve the Site (analytics, performance, debugging)
• Marketing (optional): newsletters/SMS and relevant ads where enabled

• Contract — to process orders and provide services
• Legal obligation — accounting/tax and mandatory compliance
• Legitimate interests — fraud prevention, security, analytics, service improvement
• Consent — marketing emails/SMS (where required) and non-essential cookies/ads (where required)

You can withdraw consent at any time by unsubscribing or contacting us.

We use cookies and similar technologies for essential site functions, preferences, analytics, and advertising where enabled.

• Essential: site operation, security, checkout
• Preferences: remembering choices (where enabled)
• Analytics: understanding site usage and improving performance
• Advertising: relevant ads/remarketing (where enabled)

You can manage cookies via your browser settings and (where available) our cookie banner/preferences tool.

We share personal data only as needed to operate the Site and fulfill orders, including with:

• Shopify (store platform, hosting, checkout)
• Payment providers (depending on checkout method)
• Shipping carriers (e.g., Poczta Polska, and courier partners such as DPD/UPS depending on destination and availability)
• Analytics and advertising tools (where enabled)
• Email/SMS service providers (where enabled)

We may disclose data if required by law or to protect rights and prevent fraud.

Shopify and some service providers may process data outside the EEA (for example in Canada or the United States). Where required, we rely on safeguards such as Standard Contractual Clauses (SCCs) or other lawful transfer mechanisms.

If you subscribe to marketing communications, you can unsubscribe at any time via the link in our emails or by contacting sales@herbalmansion.com.

For SMS (where available), follow the opt-out instructions in the message (e.g., replying STOP where applicable). Message and data rates may apply.

We keep personal data only as long as necessary for the purposes described above, including legal/accounting requirements. Order records are typically retained for several years to comply with tax and accounting rules.

We use reasonable technical and organisational measures to protect your data. Payment transactions are handled by secure payment providers; we do not store full card details.

Depending on your location, you may have rights to access, correct, delete, restrict, port, or object to processing of your personal data, and to withdraw consent at any time.

To exercise rights, contact: sales@herbalmansion.com

You may also lodge a complaint with your local supervisory authority (in Poland: UODO).

There is no consistent industry standard for responding to “Do Not Track” signals, so we may not respond to them in a uniform way.

The Site is not intended for children and we do not knowingly collect personal data from children.

We may update this Privacy Policy to reflect changes in our practices, technology, or legal requirements. The “Last updated” date will be revised accordingly.

Privacy questions, data requests, or complaints: