Thank you for visiting Oulani (the “Website”).
This Privacy & Security Policy (the “Policy”) explains what personal information we collect when you use the Website, place an order, create an account, contact us, or otherwise communicate with Oulani; how we use and share that information; how we protect it; and the rights available to you.
For customers and visitors in Poland and the European Economic Area (“EEA”), this Policy is intended to provide the information required under the General Data Protection Regulation (“GDPR”).
Who Is the Data Controller?
The controller of personal data processed through the Website is:
trading as Oulani
Legal business name: RB Consulting Ryszard Biały
Address: Tarcice 9, 80-718 Gdańsk, Polska
Phone: +48 787 589 234
Email: support@oulani.com
NIP : 5832456173
REGON: 192122748
How Do We Use Your Personal Data?
We may collect and use personal data for the following purposes:
- To create and manage your customer account
- To process, confirm, fulfill, deliver, return, and refund orders
- To send order, delivery, and service notifications
- To respond to questions, complaints, and customer-service requests
- To detect and prevent fraud, misuse, and security incidents
- To maintain records required for tax, accounting, consumer-protection, and other legal obligations
- To improve our Website, products, services, and customer experience
- To send marketing communications where you have consented or where otherwise permitted by law
- To operate analytics or advertising technologies where permitted and, where required, only after obtaining consent
Legal Bases for Processing in the EEA
Where the GDPR applies, we process personal data only when we have a lawful basis. Depending on the activity, the legal basis may be:
- Performance of a contract — for example, processing your order, payment, delivery, return, or customer-service request connected with a purchase.
- Compliance with a legal obligation — for example, tax, accounting, consumer-protection, fraud-prevention, or regulatory requirements.
- Legitimate interests — for example, protecting the Website, preventing fraud, improving services, and handling routine business communications, where those interests are not overridden by your rights.
- Consent — for example, certain marketing communications and non-essential cookies or tracking technologies where consent is required. You may withdraw consent at any time.
Categories of Personal Data
Depending on how you interact with us, we may process your name, billing and delivery address, email address, telephone number, account details, order and return history, communications with us, device and browser information, IP address, cookie identifiers, and payment-related transaction information. Full payment-card details are generally processed by our payment service providers rather than stored directly by us.
Non-Personal and Usage Data
We monitor website traffic and usage patterns to improve website design, products, services, promotions, security, and overall user experience. Where usage information identifies or can reasonably be linked to an individual, we treat it as personal data.
Sharing of Information
We do not sell personal information for monetary consideration. We may share personal data where necessary with service providers and other recipients, including:
- Shopify and providers that host or operate our ecommerce infrastructure
- Payment processors and fraud-prevention providers
- Shipping, logistics, and delivery providers
- IT, cloud-hosting, customer-support, email, and security providers
- Analytics or advertising providers where permitted by law and subject to consent where required
- Professional advisers, insurers, auditors, and authorities where required by law
In the event of a merger, acquisition, restructuring, or sale of assets, personal data may be transferred as part of that transaction subject to applicable law.
International Data Transfers
Some service providers may process personal data outside Poland or the EEA. Where GDPR restrictions apply, we use or rely on appropriate transfer mechanisms, such as an adequacy decision, Standard Contractual Clauses, or another lawful safeguard, as applicable.
Cookies and Similar Technologies
A cookie is a small data file stored on your device. We may use strictly necessary cookies to operate the Website and, subject to your choices and applicable law, additional cookies or similar technologies for analytics, personalization, or advertising.
Where consent is required for non-essential cookies, those technologies should not be activated until you have made a choice through the Website’s cookie/privacy controls. You can later change your preferences through the available cookie or privacy settings. Disabling some cookies may limit certain Website features.
Security
Oulani takes reasonable technical and organizational precautions to protect personal information. Sensitive payment information is transmitted through secure checkout systems using encryption such as TLS/SSL. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
Data Retention
We retain personal data only for as long as necessary for the purposes described in this Policy, including to provide services, handle disputes and returns, protect against fraud, and comply with legal, accounting, and tax obligations. Retention periods vary depending on the type of data and applicable law. Marketing data processed on the basis of consent is retained until consent is withdrawn or the data is no longer needed, subject to any legally required records of consent.
Your Rights
Where the GDPR applies, you may have the right to:
- Request access to your personal data and obtain a copy
- Request correction of inaccurate or incomplete data
- Request deletion of personal data in circumstances provided by law
- Request restriction of processing
- Receive certain personal data in a portable format and transmit it to another controller
- Object to processing based on legitimate interests, including direct marketing
- Withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing before withdrawal
- Obtain information about relevant automated decision-making or profiling, where applicable
To exercise your rights, contact support@oulani.com. We may need to verify your identity before completing a request.
Right to Lodge a Complaint
If you believe your personal data has been processed unlawfully, you may lodge a complaint with the Polish supervisory authority:
President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych / UODO)
Personal Data Protection Office, ul. Stanisława Moniuszki 1A, 00-014 Warszawa, Poland
California Privacy Choices
California residents may have additional rights regarding certain disclosures of personal information. Please see our “Do Not Sell My Personal Information” page for information about opt-out requests. These California-specific rights are separate from rights available under the GDPR.
Shipping & Returns Information
- We offer free shipping within Poland.
- Orders are normally processed within 1–2 business days, with delivery typically taking 5–8 business days after dispatch.
- Our 30-day commercial return policy and statutory consumer rights are described in our Return & Refund Policy.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or services. The updated version becomes effective when posted on the Website. Where legally required, we will provide additional notice or request renewed consent.
Contact Information
Oulani
Legal business name: RYSZARD BIAŁY
Address: Tarcice 9, 80-718 Gdańsk, Polska
Phone: +48 787 589 234
Email: support@oulani.com