Privacy Policy

V.2.1.

July 21, 2026

Our privacy policy (full version below) may be updated occasionally, and we encourage you to review it regularly to stay informed.

FAQ

What information do you collect and why?

  • We collect personal information mainly to fulfill your orders, improve our website and services, and communicate with you effectively.

  • Information collected includes what you provide directly (e.g., name, email, payment details) and data automatically collected (e.g., IP address, device info) to ensure security and optimize user experience.

  • Our website is intended for adults. We do not knowingly collect data from children under 18 and take steps to delete any such data if discovered.

  • We do not collect or process sensitive personal information or sell your data to third parties.

What steps is Cult taking to protect my privacy?

  • We carefully select privacy-friendly software and service providers, preferring EU vendors when possible. Your data may be shared with these trusted third parties under strict privacy agreements.

  • We implement robust organizational and technical safeguards to protect your information, though no online system can be perfectly secure.

  • You have rights to access, update, or delete your personal information and to opt out of marketing communications at any time.

How do I withdraw consent or opt out of marketing communications?

  • You have rights to access, update, or delete your personal information and to opt out of marketing communications at any time. Contact privacy@cultsool.com or see our complete Privacy Policy below for details.

Cult Sp.Z.o.o. Privacy Policy

  1. Data Controller

1.1. The controller of your personal data is Cult sp. z o.o., ul. Bukowska 82–84, 60-396 Poznań, Poland, KRS No. 0001138052, NIP: 5223317446 (“Cult,” “we,” “us,” or “our”).

1.2. For questions about personal data, you may contact us at: privacy@cultsool.com.

  1. Personal Data We Collect

2.1. We collect personal data that you provide directly when you use the Website, place an order, or contact us. This may include:

  • name and surname;

  • address (billing and/or delivery);

  • email address;

  • telephone number;

  • company name, tax/VAT number and other business details (for Business Customers);

  • order details (products, quantities, price, payment method);

  • any additional information you provide in messages, complaints, or requests.

2.2. We may also collect certain technical data automatically when you use the Website, such as IP address, device information, browser type, and usage data, to the extent permitted by law.

  1. Purposes and Legal Basis for Processing

3.1. We process personal data for the following purposes:

  • to operate the Website and provide access to its content;

  • to process and fulfil orders, including delivery, age and identity verification, complaints, returns and refunds;

  • to comply with legal obligations, including tax, accounting, excise, and alcohol‑sale regulations;

  • to handle customer service inquiries and communications;

  • to prevent fraud and protect the security of the Website and our systems;

  • where you have given consent, to send marketing communications and analyse Website usage for marketing purposes.

3.2. The legal bases for processing are:

  • performance of a contract or steps taken at your request prior to entering into a contract (e.g. order processing);

  • compliance with legal obligations to which we are subject (e.g. tax, accounting, excise, and alcohol‑related legal requirements);

  • our legitimate interests, where allowed by law (e.g. security, fraud prevention, defending legal claims, improving the Website);

  • your consent, where required or chosen as the basis (e.g. certain marketing communications).

  1. Data Recipients and Transfers

4.1. Your personal data may be shared with:

  • carriers and logistics partners involved in delivery and handover of goods;

  • payment service providers and financial institutions, including Shopify Payments, in order to process payments and prevent fraud;

  • IT and hosting providers that support the Website and our systems;

  • analytics providers that process Website usage data in a privacy‑preserving manner (e.g. Umami or similar tools);

  • accounting, tax, and legal advisors;

  • public authorities where required by law (e.g. tax authorities, customs, excise authorities).

4.2. We do not sell your personal data to third parties.

4.3. We prefer EU‑based or otherwise privacy‑friendly software and service providers where possible. Where data is transferred outside the European Economic Area, we rely on appropriate safeguards under applicable law, such as standard contractual clauses or other permitted mechanisms.

  1. Data Retention

5.1. We retain personal data only as long as necessary for the purposes described in this Policy, or as required by law.

5.2. For order and contract data, retention periods are determined by applicable tax, accounting, and other legal requirements, which may require us to keep certain data for several years.

5.3. Marketing data is retained until you withdraw your consent or object to processing, unless a shorter period applies.

  1. Rights of Data Subjects

6.1. Under applicable data protection law, you may have the right to:

  • access your personal data and obtain information about how it is processed;

  • request correction of inaccurate or incomplete data;

  • request deletion of your data in certain circumstances;

  • request restriction of processing in certain circumstances;

  • receive your data in a structured, commonly used and machine-readable format and, where applicable, request transmission to another controller;

  • object to processing based on legitimate interests;

  • withdraw consent at any time where processing is based on consent (without affecting the lawfulness of processing before withdrawal).

6.2. You may exercise these rights by contacting us at privacy@cultsool.com. We will respond within the time limits required by law.

  1. Automated Decision-Making and Profiling

7.1. We do not currently use automated decision-making, including profiling, that produces legal effects or similarly significant effects on individuals, except where required or permitted by law (e.g. certain fraud‑prevention measures by payment providers).

  1. Cookies and Tracking Technologies

8.1. The Website may use cookies and similar technologies to support functionality, analyse usage, and, where you have consent, enable marketing.

8.2. We prefer privacy‑conscious analytics tools (such as Umami or equivalent) that minimise or avoid the use of personal data and do not rely on cross‑site tracking.

8.3. Information about the types of cookies we use and how to manage your cookie preferences is provided in our Cookie Notice.

  1. Security

9.1. We implement appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing, accidental loss, destruction, damage, or disclosure.

9.2. We select service providers with strong privacy and security practices, preferring EU‑based vendors where possible, and configure them to limit data collection and retention to what is necessary.

9.3. While we use reasonable security measures, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

  1. Changes to This Policy

10.1. We may update this Privacy Policy from time to time by publishing the updated version on the Website.

10.2. The updated version will indicate the date of the last update. Continued use of the Website or placing orders after changes take effect means you accept the updated Policy.

  1. Contact and Supervisory Authority

11.1. For any questions or requests concerning this Policy or the processing of your personal data, please contact us at privacy@cultsool.com.

11.2. You also have the right to lodge a complaint with a data protection supervisory authority, including the President of the Personal Data Protection Office (Urząd Ochrony Danych Osobowych) in Poland.