What stays with us, and what never leaves your browser.
The short version: we keep your delivery address for five years, because Polish accounting law says we must. Your measurements never reach us at all unless you send them with an order. There are no cookies here.
Who is responsible
MALWA sp. z o.o., ul. Przędzalniana 68, 90-338 Łódź, Poland. VAT PL7258842109. Questions about your data: prywatnosc@malwa.pl — a person answers, usually the same day.
Your measurements stay with you
This is the most important paragraph on the page. The measurements you type into the size assistant are saved only in your browser's storage, under the key malwa-fit. We do not send them anywhere, we cannot see them, and we have no way of seeing them.
The same goes for your bag — it sits under the key malwa-bag-v1-en and does not leave your device until you click “place order”. The English bag is kept separately from the Polish one because the two shops price in different currencies.
Clearing your browser data removes both. The “Clear measurements” button does the same thing, only faster.
One exception, stated plainly: if you have measurements saved at the moment you place an order, we attach them to the order. That is so we can check while packing whether the size you chose makes sense. You can see this in the summary before the form is sent.
When you place an order
We collect your name, address, email, phone number and the contents of the order. Legal basis: performance of the sales contract you are entering into. Without this there is no way to send a parcel, so there is nothing here to consent to or refuse.
How long: five years from the end of the year in which we issued the invoice — required by the Polish Accounting Act and tax rules. This is not our decision and we cannot shorten it at your request.
What we do not do: we do not add anyone to a newsletter along the way, we do not profile, we do not sell lists, and we do not send “perhaps something else?” two weeks later. The one message after delivery asks whether it fits — and you are free to leave it unanswered.
This website
No cookies. No analytics. No tracking pixel, no session recording, no advertising tags. Fonts are served from our own server rather than a CDN, so visiting this page tells nobody anything about you except our host.
There is no cookie consent banner either, and that is not an oversight. A banner is needed when something is being tracked.
Who else sees any of this
- Hosting and the form — Netlify, EU region
- Courier and parcel lockers — TODO(client)
- Payments — TODO(client)
- Email — TODO(client)
- Accountant — invoices only
Each of them receives only what the job requires: the courier an address, the payment provider an amount. Each is bound by a data processing agreement, and none of them may use your data for their own purposes.
Your rights
You can ask for a copy of what we hold, for a correction, for deletion, or object to the processing. Write to prywatnosc@malwa.pl; we reply within 30 days, usually within two.
A fair warning: we will not delete accounting documents before the five years are up, even if you ask outright. We will tell you exactly what stays and for how long. Everything else — order history, email address, correspondence — goes at once.
If you think we have handled something badly, you can lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (UODO).
Changes
Last updated: .
Demo note: MALWA does not exist. This is a portfolio demo, not a working shop — nobody is taking orders and nobody is collecting data. A real deployment would need the TODO(client) entries filled in, shop terms and conditions, and a lawyer reading the whole thing: with consumer sales this is not a place to guess.