Privacy policy
Last updated: July 25, 2025
1. Data controller
1.1. The controller of your personal data is the operator of the xWheelzzy online store (xwheelzy.com), e-mail: contact@xwheelzy.com.
1.2. For matters related to the processing of personal data or product safety, you can contact us at: contact@xwheelzy.com.
2. Purposes and legal bases of processing
2.1. We process your personal data for the following purposes:
- Fulfilment of orders, including transferring data to foreign suppliers (Art. 6(1)(b) GDPR – performance of a contract).
- Handling inquiries, complaints and reports concerning product safety (Art. 6(1)(f) GDPR – legitimate interest of the controller).
- Sending the newsletter, if you have given your consent (Art. 6(1)(a) GDPR – consent).
- Analysing website traffic and optimising the store (Art. 6(1)(f) GDPR – legitimate interest of the controller).
- Processing payments through external payment operators (Art. 6(1)(b) GDPR – performance of a contract).
3. What data we collect
3.1. Depending on your activity in the store, we may collect the following personal data:
- First and last name,
- E-mail address,
- Delivery address,
- Phone number,
- Transaction data (processed exclusively by payment operators, e.g. Stripe).
3.2. We do not store payment card data – it is processed directly by payment operators in accordance with their privacy policies.
3.3. Data (first name, last name, delivery address) may be transferred to foreign suppliers in order to fulfil the order. The Customer, as the importer, is informed about this before placing the order.
4. Recipients of personal data
4.1. Your data may be transferred to:
- External product suppliers for the purpose of fulfilling orders,
- Courier and logistics companies,
- Payment operators (e.g. Stripe),
- Shopify Inc. – the provider of the e-commerce platform,
- Entities providing analytics services (e.g. Google Analytics).
4.2. Each recipient processes data in accordance with the GDPR and on the basis of data processing agreements.
5. Data retention
5.1. We store data for:
- The time necessary to fulfil the order, including returns and complaints,
- The period required by law (e.g. 5 years for tax purposes – counted from the end of the year of the transaction),
- The duration of marketing activities – until consent is withdrawn (if applicable),
- The time necessary to handle reports concerning product safety (in accordance with the GPSR).
5.2. We store analytics data for the time necessary to optimise the store, no longer than our legitimate interest requires.
6. Your rights
6.1. Under the GDPR, you have the following rights:
- Access to your data (Art. 15 GDPR),
- Rectification of your data (Art. 16 GDPR),
- Erasure of your data ("right to be forgotten", Art. 17 GDPR),
- Restriction of processing (Art. 18 GDPR),
- Data portability (Art. 20 GDPR),
- Objection to processing (Art. 21 GDPR),
- Withdrawal of consent at any time (Art. 7(3) GDPR).
6.2. To exercise any of these rights, write to: contact@xwheelzy.com.
6.3. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (PUODO) if you believe that your data is being processed unlawfully.
7. Cookies and tracking technologies
7.1. The website uses cookies in order to:
- Ensure the proper functioning of the store,
- Analyse traffic (e.g. Google Analytics),
- Personalise content and ads.
7.2. We use Shopify tools to manage cookies and track activity.
7.3. You can manage your cookie settings yourself in your browser or on the store's website.
8. Data transfers outside the EEA
8.1. In connection with the use of the Shopify platform, your data may be transferred outside the European Economic Area (EEA), mainly to Canada.
8.2. Shopify Inc. applies appropriate safeguards in accordance with the GDPR, including standard contractual clauses. The Customer is informed of such a transfer before placing an order.
9. Product safety (GPSR)
9.1. We process data in order to monitor product safety and carry out product recall procedures, in accordance with the GPSR (General Product Safety Regulation).
9.2. Please send reports concerning product safety to: contact@xwheelzy.com. We respond within 24 hours.
9.3. In the event of a product recall, we will notify you by e-mail and provide instructions for returning the product. Details can be found in the Refund Policy.
10. VAT and customs formalities
10.1. The Customer is the importer of the goods and is responsible for customs formalities and VAT, unless the supplier uses the IOSS scheme, in which VAT is included in the price.
10.2. Information on how VAT is settled and on any customs costs is provided before the order is placed, in a visible place (e.g. in the shopping cart).
11. Changes to the Privacy Policy
11.1. We reserve the right to update this Privacy Policy. The current version of the document is always available on the xwheelzy.com website. Changes take effect upon publication.