Privacy policy

Effective from: 2026-10-15

This policy explains what data we collect when you visit worthkeeping.pl, sign up for our newsletter, or buy from our shop - why we do it, who receives the data and what rights you have. We collect only what we need and we say plainly what happens to each piece of information. The Polish version of this policy prevails in case of any discrepancy.

1. Who is responsible for your data

The controller is NUTRADE spółka z ograniczoną odpowiedzialnością (the Worth Keeping brand), ul. 3 Maja 54A, 42-622 Świerklaniec, Poland, KRS 0000846891, NIP (tax ID) 6452565672, REGON 386348698. For any matter concerning your data, write to info@worthkeeping.pl. We have not appointed a data protection officer, as we are not required to.

2. What we process, why and on what legal basis

2.1. Orders

• Data: first and last name, e-mail address, phone number, billing address and delivery address or the chosen parcel locker, contents and value of the order, payment status and transaction identifier, tracking number and delivery status, and for company purchases - company name and tax ID. We also keep proof of the contract: the version of the terms you accepted, the date and time of acceptance, your IP address and browser identification.
• Purpose and basis: entering into and performing the sales contract (Art. 6(1)(b) GDPR); handling withdrawals and complaints and documenting sales for tax purposes (Art. 6(1)(c) GDPR); establishing, exercising and defending claims and preventing abuse (Art. 6(1)(f) GDPR - our legitimate interest).
• Providing the data is voluntary, but without it we cannot fulfil an order. The carrier needs your phone number to deliver the parcel and send the pick-up code.
• We never receive your card details - you enter them in fields that belong to the payment provider.

2.2. Newsletter ("Bliscy")

• Data: e-mail address, date and time of sign-up, where you signed up (e.g. home page, checkout), the page language and the country determined from your IP address at sign-up (the IP address itself is not stored), and information about messages sent to you: whether they were opened and which links were clicked.
• Purpose and basis: sending information about the brand, new products and offers on the basis of your consent (Art. 6(1)(a) GDPR and Art. 398 of the Polish Electronic Communications Law). Measuring opens and clicks helps us write less often and about what readers actually care about.
• You can unsubscribe at any time using the link in the footer of every message or by writing to us. After you unsubscribe we keep only the address with a note that consent was withdrawn - solely so that nothing else is sent to it and so that we can show consent was given and withdrawn.
• Abandoned-basket reminders and post-purchase review requests are sent only to newsletter subscribers.
• If your visit started from one of our ads, right after you answer the cookie banner (also when you decline) we may show a window offering a newsletter sign-up in exchange for a discount code (currently -20% on the whole order, valid for an hour). A sign-up from this window needs no confirmation link: the ticked box in the window is the consent, and the code is shown at once. We read that the visit started from an ad from the page address (the ad tags in the link); nothing is stored in your browser for this. On our side we record that the window was shown and which ad platform the visit came from (e.g. Facebook) and, once sent, the e-mail address given and the code issued (one code per address). With marketing consent we add our browser identifier, so that a second code is not shown later in another window. Some visitors (at random, about 1 in 5) are not shown the window; for every visit from an ad we also record whether the page was closed or hidden (e.g. by switching apps) within 30 seconds - to check that the window does not get in the way; if it does, it switches itself off. We keep this record for 12 months.

2.3. Order-related messages

Order and payment confirmations and information about shipping, invoices, returns and refunds are necessary to perform the contract (Art. 6(1)(b) GDPR). They contain no advertising and no open tracking.

2.4. Back-in-stock notification

The e-mail address you leave on a sold-out product is used to send one message when the product returns (Art. 6(1)(a) GDPR). We do not use it afterwards.

If you have allowed marketing in the cookie settings (section 3.2), we link this address to your visit history so that the shop staff can see it in our panel next to that history. It is for viewing only: we send nothing to this address apart from the one back-in-stock message, we do not add it to the newsletter and we do not pass it to advertising platforms. The link disappears together with the address - once the notification is sent, after one year at the latest, or earlier at your request.

2.5. Reviews

A product review can only be written from a signed link we send by e-mail after the order has been delivered - so every published review comes from someone who actually bought that product from us. Opening the link stores a wk_review cookie in your browser (7 days) and opens the review page for that order, which shows the order number and every item in it with its photo and variant, and prefills the signature field with the first name from the order. The cookie lets you come back to an unfinished review without opening the link from the e-mail again.

We process the rating, the title and text of the review, the name you give and the link to the order the review concerns. The review text, rating and name are published in the shop after moderation on the basis of your consent, given by submitting the review (Art. 6(1)(a) GDPR). We process the link to the order in order to check that the author really bought the product and to be able to mark that next to the review - this is a seller's obligation towards consumers (Art. 6(1)(c) GDPR). We remove a review at your request.

2.6. Withdrawals, returns and complaints

The content of your statement or complaint, the items returned, photos sent with a complaint and, if you choose to give it, a bank account number for the refund. Basis: obligations under consumer law (Art. 6(1)(c) GDPR) and defence against claims (Art. 6(1)(f) GDPR).

2.7. Correspondence

Messages sent to info@worthkeeping.pl and our replies are processed in order to deal with your request (Art. 6(1)(f) GDPR, or (b) where the matter concerns a contract).

2.8. Security and operation of the site

• The server records the IP address, time, requested address and browser identification in technical logs. Logs are kept for 14 days.
• To protect against abuse (mass form submissions, attempts to guess addresses) we count requests per IP address; the counters expire after a few minutes up to an hour.
• Your choices in the consent window are recorded as proof (time, scope of consent, browser identification, an irreversible hash of the IP address).
• Basis: Art. 6(1)(f) GDPR - shop security and accountability for consent.

3. Behavioural analytics and profiling

We measure how the site is used with our own tool, running on our own server. What is recorded, and how, depends on your choice in the consent window.

3.1. Without consent - aggregate statistics only

• We store no identifier in your browser and load no third-party tools. Events from a visit are linked by a value computed on the server from the IP address and browser identification, which changes every day and is irreversible - the IP address cannot be recovered from it and two different days cannot be connected.
• We record: pages visited, time actually spent on the page, scroll depth, click positions, visibility of individual page blocks, device and browser type, window size, country, traffic source (including campaign parameters in the address) and the page-quality signals described in 3.3.
• This is used solely for aggregate statistics and heat maps. Never to send messages, personalise content or pass on to anyone. Raw records are deleted after 30 days.
• Basis: our legitimate interest in measuring and improving our own site (Art. 6(1)(f) GDPR). You may object by writing to us.

3.2. With consent to analytics and marketing - a profile

• Analytics consent: we store a measurement session identifier in your browser (the wk_sk cookie) and enable Google Analytics 4. GA4 then also sees the course of your purchases: products viewed, changes to the basket, going to checkout, the order placed (number, value and products) and a newsletter sign-up - without your name, address, e-mail or phone number.
• Marketing consent: we store the wk_xid identifier (valid for one year) and build a profile. It includes: visit history, products viewed with view counts and time, additions to and removals from the basket, search terms, clicks and scrolls, traffic source, and reactions to our messages. When you give us an e-mail address (newsletter, order), we link your earlier history to it. An address left for a back-in-stock notification is linked to the history for viewing in our panel only (section 2.4).
• From the profile we automatically compute a product-interest score and an overall readiness-to-buy score. They are used to: adapt content on the site (e.g. "recently viewed"), choose the subject of the messages we send, and pass your e-mail address as an irreversible hash (SHA-256) to Meta for advertising purposes (custom audiences). Profiling does not lead to decisions with legal or similarly significant effects (Art. 22 GDPR) - it affects neither prices nor product availability.
• Under the same consent we enable the Meta pixel and the TikTok pixel and send purchase-funnel events (product view, add to basket, checkout started, payment started, purchase with value, newsletter sign-up) from our server to Meta, TikTok and Google: an event identifier, the address of the page viewed, hashes of your e-mail address and phone number (given in the order or, if we already know them from your earlier order or the newsletter, with the other events from the same browser), IP address, the country derived from the IP address, browser identification, a hash of our browser identifier (also in the Meta pixel and the TikTok pixel) and identifiers from those platforms' cookies. When you start paying and when you buy, we also send Meta an irreversible hash (SHA-256) of your first name, last name, city, postal code and country from the order form - Meta uses them only to match the event to the account in which you saw the ad. On the order confirmation page the Meta pixel and the TikTok pixel also record the purchase itself (value, product codes) with the same event identifier, so the purchase counts once.
• Under the same consent, once per visit, our server tells Meta about an engaged visit (the "ZaangazowanaWizyta" event) when the page has been on your screen for at least 2 minutes in total, or when you come back to us and stay for at least 20 seconds. We send: the reason (time or return), the length of the visit in seconds, the visit number, the address of the page viewed, IP address, the country derived from the IP address, browser identification, identifiers from Meta's cookies (_fbp, _fbc), a hash of our browser identifier and hashes of your e-mail address and phone number if we know them (from an order or the newsletter). Meta uses this to show ads to people who were genuinely interested in the shop (custom audiences) and to measure how well ads work.
• Under the same consent, once per visit and product, our server tells Meta about engagement with a specific product (the "ZaangazowanieProdukt" event) when its page has been on your screen for at least 30 seconds in total. We send: the product code (SKU), its name, price and category (e.g. blankets), the time on the product page in seconds, and the same technical data as for an engaged visit. Meta uses this to show ads for a category or product to people who were interested in it (e.g. a blanket promotion only to people who spent longer looking at blankets).
• Under the same consent, when the page has been on your screen for at least 10 seconds in total, we may once show you a personal discount code valid for one hour. We record that the code was shown (together with our browser identifier, so it is never shown again), the code itself, and whether it was added to the basket and used in an order. The code works only in the browser in which it was shown. If that code runs out unused and you come back at least three more times, we may once show you a second, smaller code valid for 30 minutes - to do this we count your later visits. Under the same consent, while you are on the site, our staff may also pick one of the shop's current codes and show it to you in a window. We then record when it was shown and whether it was copied, added to the basket or closed. We keep the record of a code being shown for 12 months.
• Basis: your consent (Art. 6(1)(a) GDPR and Art. 399 of the Polish Electronic Communications Law). Raw event records are deleted after 180 days; aggregate counters are kept longer as they contain no individual events.

3.3. Detailed behavioural signals

In both modes (in the first - in aggregate only) we also record:

• hovering over an element and for how long (desktop only), and on touch screens a long press and which page block was visible and for how long;
• which product photos were opened, in what order, for how long, and zooming;
• video playback;
• how forms are filled in: which field, how long, returns to a field, validation errors and where filling stopped. We never record what is typed into fields;
• selecting and copying a fragment of our own content (selections inside form fields are ignored);
• signs of problems: repeated clicks in one spot, clicks on non-clickable elements, very fast scrolling, going back to the previous page, the on-screen keyboard covering the submit button;
• actual loading times on your device (LCP, INP, CLS, server response time), the connection class and data-saver mode reported by the browser, and whether the site is open in an in-app browser (e.g. Instagram).

We do not record your screen, do not log keystrokes and do not use fingerprinting.

3.4. IP address

Behavioural data contains only an irreversible hash of the IP address, computed with a secret server key. The full IP address is stored in two places only: in server logs (14 days) and with an order as proof of the contract. It is passed to advertising platforms only with marketing consent.

3.5. Changing or withdrawing consent

The "Privacy settings" link in the footer of every page reopens the consent window. Withdrawing consent is as easy as giving it and takes effect immediately: we delete the identifier from your browser, stop adding to the profile and remove your address from advertising audiences. Withdrawal does not affect the lawfulness of earlier processing. You can ask us to delete the whole profile.

4. Who receives your data

Only those needed to run the shop:

For the collection and transmission of data through the Meta and TikTok pixels we are joint controllers with those companies; further processing takes place under their own responsibility and privacy policies. We never sell data. We may disclose it to public authorities where the law requires.

5. Transfers outside the European Economic Area

Our server and e-mail are located in the European Union. Stripe, Google and Meta may transfer data to the USA - on the basis of the European Commission's adequacy decision (EU-US Data Privacy Framework) and otherwise standard contractual clauses. TikTok may transfer data to third countries (including the USA, Singapore and Malaysia), and its staff in other countries, including China, may have remote access - on the basis of standard contractual clauses. If you do not want such transfers, do not give marketing consent - the shop works fully without it.

6. How long we keep data

7. Your rights

You have the right to: access your data and receive a copy, rectification, erasure, restriction of processing, data portability, object to processing based on our legitimate interest (including profiling), and withdraw consent at any time. An objection to direct marketing is always honoured.

The shop keeps no customer accounts, so every one of these rights takes a single message: write to info@worthkeeping.pl and we reply within one month at the latest. Analytics and marketing consent you can withdraw yourself at any time - see section 3.5. We cannot delete accounting documents before the legally required period ends.

You may also lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, Poland, uodo.gov.pl) or with the supervisory authority of your country.

8. Where the data comes from

We receive data directly from you. Payment status comes from Stripe and delivery status from InPost.

9. Children

The shop is intended for adults. We do not knowingly collect data from persons under 16.

10. Cookies

The full list of cookies, their purpose and lifetime is on the Cookies page. In short: necessary cookies (basket, your consent decision, payment protection) always work; analytics and marketing cookies - only with your consent.

11. Changes to this policy

We update the policy when the way the shop works or the law changes. Newsletter subscribers are informed of significant changes by e-mail. The current version and its effective date are always on this page.