Privacy policy
Last updated: 29 September 2026
This Privacy Policy explains how personal data is processed and how cookies and similar technologies are used in the REXIMPRIMIS online store available at:
👉 www.reximprimis.com (“Store”)
We respect our users’ privacy and take appropriate measures to ensure that personal data is processed securely, transparently and in accordance with applicable law, in particular Regulation (EU) 2016/679 (“GDPR”).
1. Data controller
The controller of your personal data is:
C-TECH Sp. z o.o.
ul. Zamkowa 9
58-530 Kowary
Poland
Tax Identification Number (NIP): 6112139628
REGON: 230457320
KRS: 0000034041
📧 E-mail: store@reximprimis.com
2. Categories of personal data we process
Depending on how you use the Store, we may process in particular:
- first name and surname,
- delivery address and billing address,
- e-mail address,
- telephone number,
- company details, where a purchase is made in connection with a business activity,
- order and payment information,
- information relating to returns and complaints,
- information contained in your correspondence with us,
- IP address and technical information about your device and browser,
- information about your activity in the Store, such as pages viewed, clicks, cart activity and browsing history – to the extent permitted by law and in line with your cookie preferences.
3. Purposes and legal bases for processing
Order processing and performance of the contract
We process personal data for the purposes of:
- accepting and processing orders,
- processing payments,
- delivering products,
- handling returns and other activities connected with the performance of the contract.
Legal basis: Article 6(1)(b) GDPR – performance of a contract, or taking steps at your request before entering into a contract.
Legal obligations
We may process personal data in order to comply with obligations under applicable law, in particular tax, accounting and record-keeping obligations.
Legal basis: Article 6(1)(c) GDPR – compliance with a legal obligation to which the controller is subject.
Customer service
We process personal data in order to answer enquiries, handle correspondence and provide assistance with orders and the use of the Store.
Legal basis: Article 6(1)(b) GDPR where the communication concerns an existing or planned contract, or Article 6(1)(f) GDPR – our legitimate interest in providing customer service and communicating with users.
Direct marketing and newsletter
If you give your consent, we may send you commercial information, newsletters and other marketing communications.
Legal basis: Article 6(1)(a) GDPR – consent.
You may withdraw your consent at any time. Withdrawing consent does not affect the lawfulness of processing carried out before the consent was withdrawn.
Analytics, advertising and remarketing
With your consent, we may use cookies and similar technologies for purposes including:
- analysing traffic and how the Store is used,
- measuring the effectiveness of advertising campaigns,
- personalising advertising,
- remarketing,
- optimising the operation and sales performance of the Store.
This may involve tools such as Google Analytics, Google Ads, Meta Pixel and Microsoft Clarity.
With your consent, data collected by these tools may be used by Meta, Google and other advertising systems to build advertising audiences, for remarketing and to personalise advertising. This involves profiling. We do not make decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you (Article 22 GDPR).
Legal basis: Article 6(1)(a) GDPR – consent, where personal data is processed using non-essential cookies or similar technologies.
Establishment, exercise and defence of legal claims
We may process personal data where necessary to establish, exercise or defend legal claims.
Legal basis: Article 6(1)(f) GDPR – our legitimate interest in protecting our legal rights.
4. Recipients of personal data
In connection with operating the Store, personal data may be disclosed to entities that support us in providing our services, including in particular:
- Shopify – in connection with the operation of the e-commerce platform and the Store’s infrastructure,
- payment service providers,
- courier companies and logistics providers,
- IT, hosting, security and system maintenance providers,
- accounting firms and other providers of accounting, tax or legal services,
- providers of analytics and advertising tools, such as Google and Meta – where the user has given the required consent,
- entities authorised to receive personal data under applicable law.
Depending on the nature of the service, these entities may act as processors on our behalf or as independent controllers.
5. Shopify
The Store runs on the Shopify platform. Shopify processes the data necessary to provide services relating to the operation of the online store, order processing, payments, security and technical infrastructure.
For merchants operating in Europe, Shopify services are generally provided by Shopify International Limited, based in Ireland, subject to Shopify’s applicable contractual and privacy arrangements.
More information about Shopify’s privacy practices:
👉 https://privacy.shopify.com/en
6. Transfers of personal data outside the European Economic Area
Some service providers used by the Store operate globally. As a result, in certain circumstances personal data may be processed or transferred outside the European Economic Area (“EEA”).
Where personal data is transferred outside the European Economic Area, the controller relies on an appropriate legal basis for the transfer, in particular a decision of the European Commission finding an adequate level of protection, including the EU–US Data Privacy Framework for entities covered by that mechanism, or standard contractual clauses approved by the European Commission.
7. Cookies and similar technologies
The Store uses cookies and similar technologies.
Cookies may be used in particular to:
- ensure the proper and secure operation of the Store,
- remember user sessions and preferences,
- operate the cart and the checkout process,
- analyse traffic and how the Store is used,
- carry out advertising and remarketing activities.
Cookies that are necessary for the operation of the Store may be used without additional consent where permitted by applicable law.
Analytics, advertising and other non-essential cookies or similar technologies are activated only after the user has given the appropriate consent, where such consent is required.
In particular, the Store may use:
- Shopify cookies,
- Google Analytics,
- Google Ads,
- Meta Pixel / Facebook Pixel,
- Microsoft Clarity (session recordings and heatmaps; form fields are masked).
- our own cookie rex_click_ids, which stores the advertising click identifier (e.g. gclid, fbclid) for up to 90 days so that an order can be attributed to the advertising campaign; it is set only with marketing consent.
You can manage your cookie preferences using the cookie banner or the privacy settings panel available in the Store, as well as through your browser settings.
You may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the consent was withdrawn.
Country detection. On your first visit we use your IP address to recognise your country and show the Store in the right language and currency. The address is only matched against a database stored on our own server; it is not stored or shared for this purpose. IP Geolocation by DB-IP.
8. Data retention
We retain personal data for as long as necessary for the purposes for which it was collected, depending on the category of data:
- order data – for the duration of the contract and then for the period required by tax and accounting law,
- data relating to complaints and claims – until the relevant claims become time-barred,
- customer account data – until the account is deleted; after deletion, only the data needed to establish, pursue or defend claims, until those claims become time-barred,
- data processed for marketing purposes – until consent is withdrawn or an objection is upheld,
- records of consents given – for as long as needed to demonstrate that consent was obtained.
9. Your rights
Subject to the conditions set out in the GDPR, you may have the right to:
- access your personal data,
- rectify inaccurate personal data,
- request erasure of your personal data,
- request restriction of processing,
- data portability,
- object to processing,
- withdraw consent at any time, where processing is based on consent.
The scope of each right depends on the legal basis and the circumstances of the processing.
To exercise your rights, please contact us:
10. Right to lodge a complaint
If you believe that the processing of your personal data infringes data protection law, you have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO) in Poland or with the competent supervisory authority in a Member State of the European Union, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement.
11. Data security
We use appropriate technical and organisational measures designed to protect personal data against loss, unauthorised access, alteration, disclosure or destruction.
Connections to the Store are protected by SSL/TLS encryption, among other measures.
12. Children’s data
The Store is not directed at children. We do not knowingly collect children’s personal data for purposes unrelated to a lawful transaction or without an appropriate legal basis.
If we become aware that personal data has been obtained in a manner inconsistent with applicable law, we will take appropriate action.
13. External links
The Store may contain links to websites or services operated by third parties.
Once you leave our Store, the processing of your personal data may be governed by the separate privacy policies of those third parties. We encourage you to read those policies.
14. Changes to this Privacy Policy
This Privacy Policy may be updated, in particular in the event of changes to applicable law, the technologies used, our service providers or the way in which the Store operates.
The current version of the Privacy Policy is always available in the Store.
15. Contact
C-TECH Sp. z o.o.
ul. Zamkowa 9
58-530 Kowary
Poland