Privacy Policy
Your information, treated with care.
01 / Who is responsible
The controller is Iryna Petkevych, operating Divine Alchemy by Iren as a sole trader in Poland. NIP: 7831880800.
Business and correspondence address: ul. Zamknięta 10 lok. 1.5, 30-554 Kraków, Poland.
Email: divinealchemybyiren@gmail.com
Telephone: +48 794 721 604
Use these contact details for privacy questions or requests concerning your personal data. The goods-return address is listed separately in Returns & Refunds.
02 / What we use and why
Orders and customer service
To handle an order we use the information supplied at checkout, such as your name, contact details, billing and delivery address, ordered items, and transaction or payment status. Processing needed to take requested steps before a purchase and fulfil a purchase relies on Article 6(1)(b) GDPR. Required accounting and other statutory records rely on Article 6(1)(c).
Patron Cabinet accounts
You can register on the My Account page. The site stores account details and connects your account with its order history and addresses. Guest checkout is also enabled. The current cabinet includes a membership card and a Fragment Collection; automatic purchase-based fragment awards and the wishlist are not yet available. Necessary account administration relies on Article 6(1)(b).
Contact forms and B2B enquiries
The contact form requests your name, email address, subject and message. Wholesale enquiries are sent by email and may include company details and a completed order workbook. We use these details to answer you and prepare the requested proposal or order. Contract-related requests rely on Article 6(1)(b); other correspondence and the handling or defence of claims may rely on our legitimate interests under Article 6(1)(f).
Providing information needed for an order or a reply is voluntary, but we may be unable to fulfil the request without it. Avoid sending information unrelated to your enquiry.
03 / Service providers and recipients
The site uses WordPress, WooCommerce and Kadence. Hosting is provided through Namecheap EasyWP. Jetpack is installed and connected; Jetpack Stats is currently inactive. Enquiries can reach the business Gmail address listed above.
WooPayments is installed but currently runs in test mode. The live payment arrangements must be confirmed before orders are taken. Payment services may process transaction and fraud-prevention information under their own notices.
Order fulfilment may require sharing the necessary delivery and contact information with the delivery provider selected for the order. The couriers and EU destinations are not finalised. See Delivery & Payment.
The contact page and footer contain links to Instagram, Facebook and TikTok. Following one takes you to a separate service governed by its own privacy arrangements.
04 / How long information is kept
Retention depends on why information is held: the period needed to handle an enquiry or order, maintain an account, meet applicable accounting requirements, or establish, exercise or defend claims.
05 / Your rights
Depending on the applicable conditions, you may request access, correction, erasure, restriction, portability, or object to processing. Where processing relies on consent, you can withdraw it without affecting the lawfulness of earlier processing. Some records may need to be retained under a legal obligation.
Contact the controller using the details above. You may also complain to a competent supervisory authority, including Poland’s President of the Personal Data Protection Office (UODO). See UODO for current information.
Automated decisions
07 / Security and changes
The website is served over HTTPS. No internet service can promise absolute security.
This notice should be updated when the site’s services or processing change. The date at the top identifies this version.