Privacy and Cookie Policy

Faretti Sp. z o.o.

Last updated: 5 August 2026

This policy applies to customers in the United Kingdom and is written in accordance with the UK GDPR and the Data Protection Act 2018.

1. Who we are and how to contact us

1. The controller of your personal data is:

Faretti Sp. z o.o.
ul. Elizy Orzeszkowej 1B/53

48-304 Nysa, Poland
Company registration (REGON): 384926398
VAT: PL7532454975
Email: shop@farettishoes.co.uk

1. For any question about your personal data, write to shop@farettishoes.co.uk or to the postal address above.

1. We have not appointed a Data Protection Officer, as we are not required to do so. All data protection enquiries are handled at the address in paragraph 2.

1. This policy covers the online shop at farettishoes.co.uk (the “Shop”). Our shops in other countries operate under separate domains and have their own privacy policies.

2. What data we collect

Information you give us:

• name, delivery address and billing address
• email address and telephone number
• company details and VAT number, if you order as a business
• the content of messages you send us
• information needed to handle returns, refunds and complaints, including bank details where a refund is due

Information collected automatically:

• IP address, browser type, operating system
• date and time of your visit, referring page
• pages viewed, products browsed, time spent on the Shop
• identifiers from cookies and similar technologies

Browsing the Shop does not require you to provide personal data. Mandatory fields in our forms are always marked.

We do not collect special category data (Article 9 UK GDPR).

3. Why we use your data, our lawful basis, and how long we keep it

Providing your data is voluntary but necessary to place an order — without it we cannot fulfil your purchase. Consent to marketing is entirely optional and does not affect your ability to buy from us.

Where we place or read information on your device, we also rely on the Privacy and Electronic Communications Regulations 2003 (PECR).

4. Who we share your data with

We share your data only with providers necessary to run the Shop. Each acts under a written contract meeting Article 28 UK GDPR requirements.

Shop platform and hosting

• Shopify International Limited (Ireland) and Shopify Inc. (Canada)

Payments

• Shopify Payments — card payments (the settling entity is identified at checkout)
• PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg
• PayPro S.A. (Przelewy24), ul. Pastelowa 8, 60-198 Poznań, Poland

Delivery

• UPS Polska Sp. z o.o., ul. Prądzyńskiego 1/3, 01-222 Warsaw, Poland — international deliveries including the UK
• InPost S.A., ul. Pana Tadeusza 4, 30-727 Kraków, Poland — domestic deliveries in Poland

Marketing and analytics

• edrone Sp. z o.o., ul. Lekarska 1, 31-203 Kraków, Poland — email and SMS campaigns, behavioural analytics
• Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland — Google Analytics, Google Ads
• Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland — Meta Pixel, Facebook and Instagram advertising
• TikTok Information Technologies UK Limited, London, United Kingdom — TikTok Pixel and advertising campaigns

Others

• accountants, legal advisers and IT providers, to the extent necessary
• public authorities, where we are required by law to disclose

5. International transfers

Because we are established in Poland, your data leaves the United Kingdom as a matter of course. Some of our providers also process data in the United States and Canada.

We rely on:

• the UK adequacy regulations covering the European Economic Area and Canada,
• the UK Extension to the EU-US Data Privacy Framework, for certified US providers such as Google and Meta,
• the International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses, together with additional technical safeguards, in all other cases.

You can request a copy of the safeguards we use by writing to shop@farettishoes.co.uk.

6. Your rights

You have the right to:

1. access the personal data we hold about you and receive a copy (Article 15),
2. rectification of inaccurate or incomplete data (Article 16),
3. erasure (Article 17),
4. restriction of processing (Article 18),
5. data portability (Article 20),
6. object to processing based on our legitimate interests, on grounds relating to your particular situation. Where we process your data for direct marketing, you may object at any time and we will stop (Article 21),
7. withdraw consent at any time, without affecting processing carried out before withdrawal (Article 7(3)).

To exercise any of these rights, email shop@farettishoes.co.uk. We respond within one month; for complex requests we may extend this by up to two further months and will tell you if we do.

Complaints

If you are unhappy with how we handle your data, you can complain to the UK supervisory authority:

Information Commissioner's Office (ICO)

Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

Helpline: 0303 123 1113

ico.org.uk

We would appreciate the chance to address your concerns first, so please do contact us before approaching the ICO.

7. Cookies and similar technologies

1. Cookies are small text files stored on your device when you use our Shop. We also use comparable technologies such as pixels, local storage and SDKs.

1. We use the following categories:

1. On your first visit you will see a banner allowing you to accept or reject each category. Cookies requiring consent are only set once you have actively agreed.

1. You can change or withdraw your consent at any time using the "Cookie settings" link in the Shop footer.

1. You can also delete or block cookies in your browser. Blocking strictly necessary cookies may prevent you from placing an order.

1. Retention varies by cookie, from the length of your session up to 24 months. A full list is available in the cookie settings panel.

8. Profiling and automated decision-making

1. We use profiling for marketing: based on your activity in the Shop we select which adverts and messages to show you. This only happens where you have consented to marketing cookies.

1. We do not make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you (Article 22).

9. Security

1. We apply technical and organisational measures appropriate to the risk, including encrypted transmission (SSL/TLS), access controls and regular backups.

1. Only authorised personnel can access your data, and only to the extent needed for their role. All are bound by confidentiality obligations.

10. Changes to this policy

1. We may update this policy, for example when the law changes or we adopt new tools. The current version is always available in the Shop with the date of the last update.

1. We will notify registered customers by email of any significant change.