Privacy Policy
Last updated: October 6, 2026
1. Who We Are
This website is operated by Scrubly ("we", "us"). We are the controller of your personal data in connection with this store. You can contact us at info@sonaya.shop. The store is hosted and powered by Shopify, which processes data on our behalf and, for some features, as an independent controller.
2. Personal Data We Collect
- Contact and delivery details: name, email address, phone number, billing and shipping address.
- Order and payment information: items ordered, order value, payment method and transaction status. Card details are handled by our payment providers and are not stored by us.
- Account information: if you create a customer account, your login details and preferences.
- Messages: what you send us through the contact form or by email.
- Device and usage data: IP address, browser, device, pages viewed and how you interact with the store, collected through cookies and similar technologies.
3. Why We Use Your Data and Our Legal Basis
- To process and deliver your order and handle returns (performance of a contract).
- To provide customer support (contract and our legitimate interest in helping customers).
- To prevent fraud and keep the store secure (legitimate interest).
- To meet legal obligations, such as tax and accounting rules.
- To send marketing emails and show relevant ads (your consent, which you can withdraw at any time).
- To improve the store through analytics (your consent where required, otherwise legitimate interest).
4. Who We Share Data With
We share data only as needed with: Shopify and other IT and hosting providers; payment providers; suppliers, fulfilment partners and carriers who prepare and deliver your order; analytics, marketing and advertising partners (where you have agreed); and public authorities when the law requires it. We do not sell your personal data for money.
5. Cookies
We use cookies and similar technologies that are necessary for the store to work (such as the cart and checkout) and, with your consent, for analytics and marketing. You can change your cookie choices at any time through the cookie banner or your browser settings.
6. International Transfers
Some of our providers are located outside the European Economic Area. In that case we rely on recognised safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision.
7. How Long We Keep Data
We keep personal data only as long as needed for the purposes above. Order and invoice data is kept for the period required by tax and accounting law. Marketing data is kept until you withdraw your consent or unsubscribe.
8. Your Rights
Under data protection law you may have the right to access your data, correct it, delete it, restrict or object to its processing, receive it in a portable format, and withdraw consent at any time. To use these rights, email info@sonaya.shop. You can unsubscribe from marketing emails using the link in every email.
9. Complaints
If you are not satisfied with how we handle your data, you can lodge a complaint with your local data protection authority. In Poland this is the President of the Personal Data Protection Office (UODO).
10. Children
The store is not intended for children, and we do not knowingly collect data from children.
11. Security
We use appropriate technical and organisational measures to protect your data. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security.
12. Changes
We may update this Privacy Policy from time to time. The current version is always published on this page together with the date it was last updated.
13. Contact
Questions about privacy? Email info@sonaya.shop.