Privacy Policy

1. Data controller

The data controller is [Business name], NIP [XXXXXXXXXX], based in Katowice, Poland ("KeyFit", "we"). Contact: [email address].

2. What we collect

To process an order we collect: name, shipping and billing address, email, phone (optional), and order contents. Payment card details are handled entirely by Stripe — we never see or store them. If you create an account, we also store your saved addresses and Mac fitment profile (model, color, keyboard language) so you don't have to re-enter it.

3. Why we process it (legal basis)

• Order fulfillment and customer service — contract performance (Art. 6(1)(b) GDPR)
• Invoicing and tax records — legal obligation (Art. 6(1)(c) GDPR)
• Transactional emails (order confirmation, shipping updates) — contract performance
• Cookieless analytics (Vercel Analytics) — legitimate interest (Art. 6(1)(f) GDPR)
• Ad targeting (Google/Meta pixels) — consent only, gated behind the cookie banner

4. Who we share it with

Payment processing: Stripe. Order fulfillment: the courier selected at checkout. Transactional email: anypost.com. Hosting: our infrastructure provider. Advertising (only if you accept the cookie banner): Google Ads and Meta — order value and a hashed version of your email may be shared with Meta for conversion measurement. We do not sell personal data.

5. Retention

Order and invoice records are kept for the period required by Polish tax law (currently 5 years from the end of the tax year). Account data is kept until you delete your account.

6. Your rights

Under GDPR you have the right to access, correct, delete, or export your data, and to object to or restrict processing. Contact [email address] to exercise these rights, or lodge a complaint with the Polish data protection authority (UODO).