The data controller, i.e. the entity that determines the purposes and means of processing personal data, is LYOFOOD Sp. z o.o., with its registered office in Poland at ul. Zagnańska 97A, 25-558 Kielce (hereinafter referred to as “LYOFOOD”), the operator of the online stores available at: www.lyofood.pl, www.lyofood.com, www.lyofood.es, www.lyofood.de, www.lyofood.fr, www.lyofood.dk, www.lyofood.co.uk (hereinafter referred to as the “Store” or the “Website”).

This Privacy Policy describes how we collect, use, store and share personal data when you use the Store, place an order or contact LYOFOOD.

PERSONAL INFORMATION WE COLLECT

Depending on how you use the Store, we may process, in particular:

•  your first and last name;
•  delivery and billing address;
•  email address and telephone number;
•  information relating to your orders and purchase history;
•  payment and transaction information;
•  information provided when you contact us, submit a complaint or make a return;
•  technical information about your device and how you use the Store, such as your IP address, browser type, operating system, time zone, information about the pages and products you view, the source from which you accessed the Website and your interactions with the Website;
•  information stored in cookies and other similar technologies.

Payment-related data may be processed directly by third-party payment service providers. To the extent that it is not necessary, LYOFOOD does not store full payment card details.

HOW DO WE USE YOUR PERSONAL DATA?

We use personal data in particular to:

•  process orders placed through the Store, including payment processing, arranging delivery and providing invoices and order confirmations;
•  communicate with you regarding your order, your use of the Store or the services we provide;
•  handle returns, complaints and enquiries;
•  ensure the proper functioning and security of the Store;
•  detect and prevent fraud and other misuse;
•  analyse the use and performance of the Store;
•  measure the effectiveness of marketing and advertising activities;
•  send marketing communications where we have an appropriate legal basis to do so;
•  comply with legal obligations applicable to LYOFOOD;
•  establish, exercise or defend legal claims.

Technical data and information about how the Store is used may be processed in particular to ensure security, detect misuse, improve the functioning of the Store, conduct statistical analyses and measure the effectiveness of marketing and advertising activities.

LEGAL BASES FOR PROCESSING PERSONAL DATA

Depending on the purpose, we process personal data on the following legal bases:

•   Article 6(1)(b) GDPR – where processing is necessary for the performance of a contract or for taking steps at the request of the data subject prior to entering into a contract, e.g. processing an order;
•   Article 6(1)(c) GDPR – where processing is necessary for compliance with a legal obligation to which LYOFOOD is subject, e.g. tax and accounting obligations;
•   Article 6(1)(f) GDPR – where processing is necessary for the purposes of LYOFOOD’s legitimate interests, such as ensuring the security of the Store, preventing misuse, establishing, exercising or defending legal claims, conducting analyses and, where appropriate, marketing our own products;
•   Article 6(1)(a) GDPR – where processing is based on your consent, in particular in relation to certain marketing activities or the use of technologies for which consent is required.

Where processing is based on your consent, you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal. Consent must be freely given, specific, informed and unambiguous.

COOKIES AND SIMILAR TECHNOLOGIES

The Store uses cookies and other similar technologies that enable the proper functioning of the Store, remember settings, provide statistics, analyse how the Store is used and support marketing activities.

Cookies may be placed by LYOFOOD or by third parties whose services are used on the Store.

Depending on their purpose, we may use, in particular:

•   necessary cookies – required for the proper functioning of the Store, basic functionality, shopping cart and checkout processes, security and the storage of privacy-related preferences;
•   functional cookies – used to remember settings and preferences and to provide additional Store functionality;
•   analytics and statistical cookies – used to analyse how the Store is used, generate statistics and improve its performance;
•   marketing cookies – used for advertising and marketing activities, measuring campaign effectiveness and, where applicable, tailoring advertisements or content to your interests.

Some of the technologies we use may enable us to analyse your activity on the Website or create a profile for analytical or marketing purposes.

Where the use of a technology requires your consent, it is activated in accordance with the choices you make through the consent management tool available on the Store. You may change your cookie preferences or withdraw your consent at any time.

Some Store functions may not work properly or may be limited if certain technologies are blocked. The scope of cookies and similar technologies used may change as a result of changes to the Store, the services we use, applications or technologies.

SHARING OF PERSONAL DATA

In connection with operating the Store, we use external service providers to whom we may transfer personal data to the extent necessary to provide specific services.

We may use, in particular:

•   Shopify – the e-commerce platform used to operate the Store;
•   payment service providers, including Shopify Payments, Mollie, Stripe and other payment providers available in the Store;
•   Klaviyo – for email communications and marketing activities;
•   Google and other analytics and advertising providers – to analyse the use of the Store, measure the effectiveness of activities and conduct marketing activities;
•   providers of applications, integrations and other tools used in the Store;
•   providers of systems used for order processing, warehouse management, accounting and other business processes;
•   courier and logistics companies responsible for deliveries;
•   hosting, IT and technology service providers;
•   providers of marketing, analytics and communication services;
•   providers of accounting, legal, software development or consulting services.

Depending on the type of service, individual providers may process personal data as data processors acting on behalf of LYOFOOD or as independent data controllers. The scope of data shared is limited to information necessary for the relevant purpose.

We may also disclose personal data to public authorities or other authorised entities where disclosure is required by law or is necessary to protect LYOFOOD’s rights and legitimate interests.

MARKETING AND PROFILING

Personal data may be used for marketing activities, including analysing interest in products, measuring campaign effectiveness and tailoring marketing content or communications to your interests. For these purposes, we may use profiling, meaning the automated analysis of certain information relating to your use of the Store or your interest in products.

Profiling used by LYOFOOD does not result in decisions concerning you that produce legal effects or similarly significantly affect you solely on the basis of automated processing of personal data. Where marketing activities require consent under applicable law, such activities are carried out after obtaining the appropriate consent. You may also object to the processing of your personal data for direct marketing purposes, including profiling related to such marketing.

YOUR RIGHTS

In relation to the processing of your personal data, and to the extent provided for by the GDPR, you have the right to:

•   access your personal data;
•   have inaccurate or incomplete data corrected;
•   have your data erased;
•   restrict the processing of your data;
•   receive your data in a portable format;
•   object to the processing of your data;
•   withdraw your consent at any time where processing is based on consent.

In particular, you have the right to object to the processing of your personal data for direct marketing purposes, including profiling related to such marketing. To exercise your rights, you can contact us using the contact details provided in the “Contact Us” section.

You also have the right to lodge a complaint with the competent supervisory authority. In Poland, this is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), if you believe that the processing of your personal data infringes applicable data protection laws.

TRANSFERS OF PERSONAL DATA OUTSIDE THE EUROPEAN ECONOMIC AREA

In connection with the use of certain external service providers, personal data may be transferred outside the European Economic Area. Where this occurs, we use appropriate legal mechanisms required by the GDPR, depending on the specific transfer, including an adequacy decision of the European Commission, Standard Contractual Clauses or other mechanisms provided for by the GDPR.
 

DATA RETENTION

We retain personal data for as long as necessary to fulfil the purpose for which it was collected and thereafter for the period required by law or necessary to establish, exercise or defend legal claims. Data relating to orders may be retained for the period required by tax, accounting and other applicable laws. Data processed on the basis of consent is retained until the consent is withdrawn, unless there is another legal basis for continued processing.

CHANGES TO THIS PRIVACY POLICY

This Privacy Policy is effective as of 1 October 2026.

 

CONTACT US

For more information about our privacy practices, to exercise your rights or to ask any questions about the processing of your personal data, you can contact us at info@lyofood.com or by mail using the details provided below:

LYOFOOD Sp. z o.o.
[Re: Privacy Compliance Officer]
ul. Zagnańska 97A, 25-558 Kielce, Poland