Privacy policy
Last updated: July 14, 2026
This Privacy Policy sets out how Bilovit (the “Website” and any case form of the personal pronoun “we”) collects, uses and discloses the personal information of Users who visit the website, use our services via the website, make a purchase on the website at bilovit.com (the “Website”) or otherwise communicate with us in connection with the Website (collectively, the “Services”). For the purposes of this Privacy Policy, the term “User” refers to a user of the Services, whether a customer, a website visitor or any other individual whose information we collect in accordance with this Privacy Policy.
Please read this Privacy Policy carefully.
Changes to this Privacy Policy
We may update this Privacy Policy, including to reflect changes to our practices or for other operational, legal or regulatory reasons. We will post the amended Privacy Policy on the Website, update the ‘Last updated’ date of this Privacy Policy, and take any other steps required by applicable law.
Collection and use of your personal information
In order to provide the Services, we collect and have collected over the past 12 months personal information about you from various sources set out below. The information we collect and use in this way varies depending on how you interact with us.
In addition to the specific uses set out below, we may use the information collected about you to communicate with you, provide or improve the Services, comply with any applicable legal obligations, enforce any applicable terms and conditions governing the Services, and protect or defend the Services, our rights and the rights of our users or others.
Personal information collected
The types of personal information we collect about you depend on how you interact with the Website and use our Services. We use the term ‘personal information’ to refer to information that identifies, relates to, describes, or is capable of being associated with you. The sections below describe the categories and specific types of personal information we collect.
Information collected directly from you
Information provided to us directly by you via our Services may include:
- Contact details, including your full name, address, telephone number and email address.
- Order information, including the User’s full name, billing address, delivery address, payment confirmation, email address and telephone number.
- Account information, including your username, password, security questions and other information used for the security of your account.
- Customer service information, including information you provide in your communications with us, for example by sending a message via the Services.
Certain features of the Services may require you to provide us directly with specific information about yourself. You are not obliged to provide such information, but doing so may prevent you from using or accessing these features.
Collection of usage information
We may also automatically collect certain information about your interaction with the Services (“Usage Data”). To do this, we may use cookies, pixels and similar technologies (“Cookies”). Usage Data may include information about the User’s use of and access to the Website and the User’s account, including device information, browser information, network connection information, IP address information and other information relating to the User’s interaction with the Services.
Information obtained from third parties
We may also obtain information about a user from third parties, including suppliers and service providers who may collect information on our behalf, such as:
- Companies operating the Website and Services, e.g. Shopify.
- Our payment processors, who collect payment information (for example, information about your bank account, credit or debit card, or billing address) in order to process your payments for the purpose of fulfilling your orders and delivering the products or providing the services you have ordered, in order to fulfil our obligations under the contract we have with you.
- When you visit the Website, open or click on emails sent to you by us, or interact with the Services or our advertisements, certain information may be automatically collected by us or by third parties with whom we collaborate using online tracking technologies, such as pixels, web beacons, software development kits, third-party libraries and cookies.
Any information we obtain from third parties will be processed in accordance with this Privacy Policy. Please also see the section below entitled Third-party websites and links.
Use of your personal information
- Provision of products and services. We use your personal information to provide you with Services, to fulfil our contract with you, including processing your payments, fulfilling your orders, sending you notifications relating to your account, purchases, returns, exchanges or other transactions, creating and maintaining your account and managing it in other ways, fulfilling deliveries, facilitating returns and exchanges, and using other features related to your account. We may also enhance your shopping experience by allowing Shopify to link your account to other Shopify services that you may choose to use. In this case, Shopify will process your information in the manner set out in its Privacy Policy and Consumer Privacy Policy.
- Marketing and advertising. We may use your personal information for marketing and promotional purposes, for example, to send you marketing, advertising and promotional communications by email, text message or post, and to display advertisements for products or services. This may include using your personal information to better tailor the Services and adverts on the Website and other websites. If you are a resident of the European Economic Area (EEA), the legal basis for these data processing activities is our legitimate interest in selling our products, in accordance with Article 6(1)(f) of the GDPR.
- Security and fraud prevention. We use your personal information to detect, investigate or take appropriate action in relation to any fraudulent, illegal or malicious activities. If you choose to use the Services and register an account, you are responsible for ensuring the security of your account credentials. We strongly recommend that you do not share your login details, including your username and password, with anyone. If you believe your account has been compromised, please contact us immediately regarding this matter. If you are a resident of the European Economic Area (EEA), the legal basis for these data processing activities is our legitimate interest in ensuring the security of our website for you and other customers, in accordance with Article 6(1)(f) of the GDPR.
- Communication with you and improving our services. We use your personal information to provide you with appropriate service and to improve our Services. It is in our legitimate interest to respond to your needs, provide you with effective services and maintain a business relationship with you in accordance with Article 6(1)(f) of the GDPR.
Cookies
Our Website, like many other websites, uses cookies. Further information on the cookies we use in connection with the operation of our shop via Shopify can be found at https://www.shopify.com/legal/cookies. We use cookies to provide and improve the Website and Services (including to remember your actions and preferences), to carry out analyses and to better understand your interactions with the Services (in our legitimate interest relating to the administration, improvement and optimisation of the Services). In addition, we may allow third parties and service providers to use cookies on the Website to better tailor services, products and adverts on the Website and other websites.
Most browsers automatically accept cookies by default, but you can set your browser to delete or reject cookies using the browser controls. Please note that deleting or blocking cookies may adversely affect your experience and may cause certain Services, including specific features and overall functionality, to malfunction or become unavailable. Furthermore, blocking cookies may not fully prevent us from sharing information with third parties, such as our advertising partners.
Our website also recognises the GPC (Global Privacy Control) signal, which allows you to opt out of certain uses or disclosures of your information. If you notify us of your preferences via GPC, we will treat the signal as a valid opt-out request for sharing/targeted advertising for the associated browsers or devices, and if we are able to link the device sending this signal to a Shopify account, we will also apply this opt-out request to that account. Further information about the Global Privacy Control service can be found at https://globalprivacycontrol.org/. We do not recognise ‘Do Not Track’ signals that may be sent from your web browsers or devices other than Global Privacy Control signals.
Disclosure of personal information
In certain circumstances, we may disclose your personal information to third parties for purposes relating to the performance of a contract, for lawful purposes, and for other reasons, subject to the provisions of this Privacy Policy. These circumstances may include sharing personal information:
- With service providers or other third parties who provide services on our behalf (e.g. IT management, payment processing, data analysis, customer service, cloud data storage, fulfilment and dispatch).
- Business and marketing partners for the purpose of providing services and displaying adverts to you. Our business and marketing partners will use your information in accordance with their own privacy policies.
- Where you instruct us to disclose information, or otherwise consent to our disclosure of certain information about you to third parties, for example to dispatch your products or in connection with your use of social media widgets or login integrations, with your consent.
- To our affiliates or other entities within our group of companies, in our legitimate interest in conducting a successful business.
- In connection with a business event, e.g. a merger or insolvency, in order to comply with all relevant legal obligations (including to respond to court summonses, search warrants and similar requests), to fulfil any relevant terms of service, and to protect or defend the Services, our rights and the rights of our users or others.
Over the past 12 months, we have disclosed the following categories of personal information and sensitive personal information relating to users for the purposes set out above in the sections ‘How we collect and use your personal information’ and ‘How we disclose personal information’:
| Category | Categories of recipients |
|---|---|
|
|
We do not use or disclose your sensitive personal information without your consent or for the purpose of drawing conclusions about your characteristics.
With your consent, we share personal information for advertising and marketing purposes as follows.
We have ‘sold’ and ‘shared’ (as those terms are defined under applicable law) personal information within the last 12 months for the purposes of advertising and marketing activities in the following ways.
| Category of personal information | Categories of recipients |
|---|---|
| Identifying information, e.g. name, email address and telephone number | Business and marketing partners |
| Commercial information, e.g. records of products or services purchased | Business and marketing partners |
| Usage data | Business and marketing partners |
Third-party websites and links
The Website may contain links to websites or other online platforms operated by third parties. If you use these links to visit websites that do not belong to our affiliate partners or associated entities, you should familiarise yourself with the privacy and security policies and other relevant provisions applicable to those websites. We do not guarantee, nor do we accept any liability for, the privacy or security of such websites, including the accuracy, completeness or reliability of the information contained on them. Information posted by a User in public or semi-public areas, including information shared by the User on third-party social media platforms, may also be visible to other users of the Services or those platforms, without any restrictions on its use being imposed by us or a third party. The inclusion of such links by us does not in itself imply any endorsement of the content on such platforms or of their owners or operators, unless otherwise specified within the Services.
Children’s data
The Services are not intended for use by children, and we do not knowingly collect any personal information from children. If you are a parent or guardian of a child who has provided us with their personal information, you may contact us using the details provided below to request its deletion.
As of the Effective Date of this Privacy Policy, we have no actual knowledge that we ‘share’ or ‘sell’ (as those terms are defined under applicable law) personal information about individuals under the age of 16.
Security and retention of User information
Please note that no security measures are perfect or impenetrable, and that we cannot guarantee ‘perfect security’. Furthermore, any information you send to us may not be secure whilst in transit. We recommend that you avoid using unsecured channels to send us confidential or sensitive information.
The length of time we retain your personal information depends on various factors, such as whether we need it to manage your account, provide the Services, comply with legal obligations, resolve disputes or fulfil other provisions of the relevant agreements and policies.
Your rights
Depending on your place of residence, you may have some or all of the rights listed below in relation to your personal information. However, these rights are not absolute and may only apply in specific circumstances; where permitted by law, we may refuse your request.
- Right to know / right of access to personal information. You may have the right to request access to the personal information we hold about you, including information regarding the ways in which your information is used and shared by us.
- Right to erasure of personal information. You may have the right to request the erasure of your personal information held by us.
- Right to rectify personal information. You may have the right to request that we rectify any inaccurate personal information we hold about you.
- Right to data portability. You may have the right to receive a copy of the personal information we hold about you and to request that it be transferred to a third party, subject to certain circumstances and exceptions.
- Right to opt out of sales, sharing or targeted advertising. You may have the right to prohibit us from ‘selling’ or ‘sharing’ your personal information, or to opt out of the processing of your personal information for purposes deemed to be ‘targeted advertising’, as defined in the relevant privacy legislation. Please note that if you visit the Website with the GPC opt-out signal enabled, then, depending on your location, we will automatically treat this signal as a request to opt out of the ‘sale’ or ‘sharing’ of information for the device and browser you are using to visit the Website.
- Restriction of processing. You may request that we cease or restrict the processing of your personal information.
- Withdrawal of consent. Wherever we require your consent to process your personal information, you may have the right to withdraw that consent.
- Appeal. If we refuse to comply with your request, you may have the right to appeal against our decision. To do so, you should reply directly to our refusal.
- Managing communication preferences. We may send you promotional emails, and you may opt out of receiving them at any time by using the unsubscribe option displayed in our emails. If you opt out, we may still send you non-promotional emails, such as those relating to your account or orders.
You may exercise any of these rights as specified on the Website or by contacting us using the contact details provided below.
We will not discriminate against you for exercising any of these rights. Before we can provide a substantive response to your request, we may need to collect information from you (e.g. your email address or account details) to verify your identity. In accordance with the provisions of applicable law, you may appoint an authorised representative to submit a request on your behalf in order to exercise your rights. Before accepting such a request from an authorised representative, we will require the representative to provide appropriate authorisation to act on your behalf, and we may also require you to verify your identity directly with us. We will respond to your request in a timely manner, in accordance with the requirements of the applicable law.
Complaints
If you have any complaints regarding how we process your personal information, please contact us using the contact details provided below. If you are not satisfied with our response to your complaint, then depending on your place of residence, you may have the right to appeal against our decision (by contacting us using the contact details provided below) or to lodge a complaint with your local data protection authority. A list of the relevant data protection supervisory authorities within the EEA can be found here.
International users
Please note that we may transfer, store and process your personal information outside your country of residence. Your personal information is also processed by staff and external service providers and partners in these countries.
If we transfer your personal information outside Europe, we will rely on recognised data transfer mechanisms, such as the Standard Contractual Clauses adopted by the European Commission or any equivalent documents adopted by the relevant authority in the United Kingdom, unless the data is transferred to a country that has been recognised as providing an adequate level of protection.
Contact
If you have any questions regarding our privacy practices or this Privacy Policy, or if you wish to exercise any of your rights, please contact us by telephone or email at kontakt@bilovit.com or write to us at NMM Sp. z o.o., Bocheńska 3, 17, 31-061 Kraków, Poland.
Within the meaning of the relevant data protection legislation, and unless expressly stated otherwise, we are the controller of your personal information.