PRIVACY POLICY — METAPHORIC TOOLS
Version: 1.0 | Effective date: 8 August 2026
This Privacy Policy describes how WOJCIECH WIECONKOWSKI METAPHORIC TOOLS (the Data Controller) processes personal data of users of the online store at metaphorictools.com, in accordance with GDPR (Regulation (EU) 2016/679).
§ 1. DATA CONTROLLER
WOJCIECH WIECONKOWSKI METAPHORIC TOOLS
ul. Śląska 6, 84-230 Rumia, Poland
Tax ID (NIP): 5882256306
REGON: 221709919
Contact: contact@metaphorictools.com
The Controller has not appointed a Data Protection Officer (DPO) as this is not required under GDPR for our type and scale of processing. For all data-related questions, contact us at the email above.
§ 2. WHAT DATA WE COLLECT AND WHY
2.1. Order fulfilment (Art. 6(1)(b) GDPR)
Purpose: concluding and performing the sales contract and delivering the ordered product.
Data: name, delivery address, email, phone (optional), order history, payment data (processed by mBank PayNow — card data is not stored by the Controller).
Retention: 5 years from the end of the tax year (legal obligation).
2.2. Customer account (Art. 6(1)(b) GDPR)
Purpose: enabling customer account functionality in WooCommerce.
Data: name, email, hashed password, order history, saved addresses.
Retention: until account deletion, subject to legal retention obligations.
2.3. Newsletter (Art. 6(1)(a) GDPR — consent)
Purpose: sending newsletters via MailerLite with product news, promotions and educational content.
Data: email address, first name (optional).
Retention: until consent is withdrawn. Unsubscribe via the link in any email or by contacting us.
2.4. Analytics and marketing (Art. 6(1)(a) GDPR — consent)
Tools: Google Analytics 4 (IP anonymisation enabled, data retained 14 months); Meta Pixel (if consent given).
Basis: freely given consent via the CookieYes floating icon at the bottom of the screen. Withdraw at any time by clicking the icon.
2.5. Legal obligations (Art. 6(1)(c) GDPR)
Purpose: fulfilling tax and accounting obligations. Retention: 5 years from end of tax year.
2.6. Legitimate interests (Art. 6(1)(f) GDPR)
Purpose: asserting or defending legal claims, store security, fraud prevention. Retention: up to 6 years.
§ 3. RECIPIENTS OF PERSONAL DATA
Recipient | Role | Transfer outside EEA |
mBank PayNow | Payment processing — DPA in ToS | None (Poland / EEA) |
MailerLite UAB (Lithuania) | Newsletter delivery — DPA in dashboard | None (EEA) |
eHost / WordPress hosting | Server and database hosting — DPA | None (EEA — verify server location with eHost) |
Google LLC | GA4 analytics — consent + SCCs | USA — SCCs + EU-US Data Privacy Framework |
Meta Platforms Ireland | Meta Pixel — consent + SCCs | USA — SCCs |
MK5 accounting firm | Tax/bookkeeping — DPA or service contract | None |
Carriers: FedEx, InPost, DHL | Parcel delivery — data limited to delivery details | Varies by destination country |
§ 4. TRANSFERS OUTSIDE THE EEA
Where data is transferred to the USA (Google LLC, Meta Platforms Ireland), this is done under Standard Contractual Clauses (SCCs) approved by the European Commission. Google also participates in the EU-US Data Privacy Framework. You may request a copy of applicable safeguards by contacting us.
§ 5. YOUR RIGHTS
- Access (Art. 15 GDPR) — obtain confirmation and a copy of your data,
- Rectification (Art. 16) — correct inaccurate or incomplete data,
- Erasure (Art. 17) — request deletion when data is no longer necessary,
- Restriction (Art. 18) — suspend processing in certain circumstances,
- Portability (Art. 20) — receive your data in machine-readable format,
- Object (Art. 21) — object to processing based on legitimate interests,
- Withdraw consent — at any time, without affecting prior lawful processing.
To exercise any right, contact: contact@metaphorictools.com. We respond within 30 days.
To lodge a complaint: Prezes Urzędu Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warsaw, www.uodo.gov.pl. EU consumers outside Poland may contact their local supervisory authority.
§ 6. COOKIES
The Store uses cookies. Full details, including the list of cookies and how to manage your preferences via the floating cookie icon at the bottom of the screen, are set out in the Cookie Policy available on the Store website.
§ 7. SECURITY
- SSL/TLS encryption (HTTPS),
- Passwords stored in hashed form (bcrypt — WordPress standard),
- WordPress admin panel secured with two-factor authentication (2FA),
- Monthly WordPress and WooCommerce updates,
- Daily database backups; weekly full-file backups — retained for 30 days (eHost automated backup),
- Payment data handled exclusively by mBank PayNow (PCI DSS compliant) — no card data stored on the Store server.
§ 8. CHANGES TO THIS POLICY
Material changes will be notified by email or a notice on the Store website. The current version is always available at the Store website.
§ 9. CONTACT
Email: contact@metaphorictools.com
ul. Śląska 6, 84-230 Rumia, Poland