​

​

​

1. Introduction

Flow & Flex (“we”, “our”, “us”) values your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your personal information when you visit our website, make a purchase, or contact us.

We process your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and other applicable data protection laws.

By using our website or purchasing our products, you agree to the terms of this Privacy Policy.

​

2. Data Controller

The data controller responsible for your personal data is:

Flow & Flex
Koszalin, 75-232, Poland
Email: flownflexinfo@gmail.com
Phone: +48 730 590 990

​

3. Personal Data We Collect

We collect and process the following categories of personal data:

​

a. Information You Provide Directly

• Contact details: name, email address, phone number, shipping and billing address.

• Account information (if applicable): username and password.

• Order information: products purchased, payment method, order history.

• Communication data: messages or inquiries sent through our contact forms, email, or customer service channels.

​

b. Information Collected Automatically

• Device and usage data: IP address, browser type, operating system, referring URLs, and website interaction data.

• Cookies and similar technologies: We use cookies to improve your browsing experience, analyze website traffic, and personalize content. You can manage or disable cookies through your browser settings.

​

c. Payment Information

We do not store your full payment card details. Payments are securely processed by third-party payment processors such as PayPal and credit card service providers that comply with PCI-DSS standards.

​

4. Purpose and Legal Basis for Processing

We process your personal data for the following purposes and legal bases:

PurposeLegal Basis (GDPR Article)

To process and deliver your ordersPerformance of a contract (Art. 6(1)(b))

To communicate with you about your orders or inquiriesPerformance of a contract / Legitimate interest (Art. 6(1)(b), (f))

To manage your customer account (if applicable)Performance of a contract (Art. 6(1)(b))

To send marketing communications (only with your consent)Consent (Art. 6(1)(a))

To improve our website and user experienceLegitimate interest (Art. 6(1)(f))

To comply with legal obligations (e.g., tax, accounting)Legal obligation (Art. 6(1)(c))

​

5. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Enable essential website functions.

• Analyze website performance and traffic.

• Provide personalized content and offers.

You can control the use of cookies via your browser settings. For more information, please refer to our [Cookie Policy] (if applicable).

​

6. Data Sharing and Third-Party Service Providers

We share your data only when necessary and with trusted partners who assist in operating our business, including:

• Dropshipping suppliers: to fulfill and ship your orders directly to you.

• Payment processors: such as PayPal and credit card providers for secure payment handling.

• Website hosting and analytics providers: including Wix and integrated analytics tools.

• Logistics and courier companies: for delivery of your products.

• Professional advisors: such as accountants or legal consultants, when necessary for compliance.

All third parties are required to process your data securely and in accordance with the GDPR. They may only use your data for the specific purposes we have instructed.

​

7. International Data Transfers

Some of our third-party providers (such as Wix and PayPal) may process data outside the European Economic Area (EEA).
When such transfers occur, we ensure that your data is protected through:

• Adequacy decisions by the European Commission, or

• Standard Contractual Clauses (SCCs) approved by the European Commission.

​

8. Data Retention

We retain your personal data only for as long as necessary to:

• Fulfill the purposes for which it was collected,

• Comply with legal obligations (such as tax and accounting requirements), or

• Resolve disputes and enforce agreements.

Typically, order-related data is retained for up to 5 years after purchase, unless a longer retention period is required by law.

​

9. Your Rights Under GDPR

You have the following rights regarding your personal data:

• Right of access: Obtain a copy of your personal data.

• Right to rectification: Request correction of inaccurate or incomplete data.

• Right to erasure (“right to be forgotten”): Request deletion of your data in certain circumstances.

• Right to restrict processing: Request limitation of how we use your data.

• Right to data portability: Receive your data in a structured, commonly used format.

• Right to object: Object to processing based on legitimate interests or direct marketing.

• Right to withdraw consent: If processing is based on consent, you may withdraw it at any time.

To exercise your rights, please contact us at flownflexinfo@gmail.com.

​

10. Right to Lodge a Complaint

If you believe that your data protection rights have been violated, you have the right to lodge a complaint with your local supervisory authority.

For Poland, the relevant authority is:
Urząd Ochrony Danych Osobowych (UODO)
Website: https://uodo.gov.pl/

​

11. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, misuse, or disclosure. Our website uses SSL encryption and secure servers provided by Wix.

​

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. The updated version will be posted on this page with the revised effective date.