Privacy policy

PRIVACY POLICY

Last updated: June 19, 2026

Carried In Light operates this store and website, including all related information, content, features, tools, products, and services, in order to provide customers with a personalized shopping experience (the “Services”).

Carried In Light is powered by Shopify, which enables us to provide the storefront, checkout, payment, security, and other e-commerce services.

This Privacy Policy explains how we collect, use, disclose, store, and protect personal information when you:

  • visit or use our website;

  • place an order;

  • provide personalization details;

  • create or use a customer account;

  • submit a cancellation, return, refund, withdrawal, replacement, or complaint request;

  • subscribe to marketing communications;

  • or otherwise communicate with us.

If there is any conflict between our Terms of Service and this Privacy Policy concerning the collection, use, or disclosure of personal information, this Privacy Policy will apply.

Personal Information We Collect

“Personal information” means information that identifies you or can reasonably be linked to you.

Depending on how you interact with our Services, we may collect the following categories of personal information.

Contact Information

This may include:

  • your name;

  • billing address;

  • shipping address;

  • email address;

  • telephone number.

Order and Transaction Information

This may include:

  • products ordered;

  • order number;

  • purchase date;

  • transaction history;

  • payment status;

  • order status;

  • shipping and delivery status;

  • correspondence relating to the order.

Personalization Information

To create personalized products, we may collect information such as:

  • names;

  • dates;

  • locations;

  • dedications;

  • custom text;

  • event or occasion details;

  • astronomical or date-based details;

  • information included in an approved digital proof;

  • other personalization instructions submitted by you.

We use this information to design, prepare, produce, deliver, and support your personalized artwork.

We do not use customer names, dates, custom text, locations, order-specific artwork, or other personalization information in public advertisements, marketing materials, portfolio examples, or social media content unless:

  • you have given us separate permission to do so; or

  • the information has been appropriately anonymized so that it cannot reasonably be linked to an identifiable person.

Sensitive Personal Information

Please do not provide sensitive personal information in personalization details, custom text, emails, forms, or other communications.

In particular, please do not provide information concerning:

  • health;

  • racial or ethnic origin;

  • political opinions;

  • religious or philosophical beliefs;

  • trade union membership;

  • genetic or biometric information;

  • a person’s sex life or sexual orientation.

We do not request or require this information to create our products.

If sensitive personal information is provided unnecessarily, we may delete it or ask you to provide alternative personalization details.

Information About Other People

Personalization details may concern another person, such as:

  • a partner or spouse;

  • a family member;

  • a child;

  • a gift recipient;

  • another person connected with the artwork.

If you provide personal information about another person, you confirm that you are entitled to provide that information to us and to instruct us to use it for the purpose of creating and fulfilling your order.

Where appropriate, you should make this Privacy Policy available to that person.

We use information about other people only as reasonably necessary to prepare, personalize, produce, deliver, and support the ordered product, unless another lawful basis applies.

Payment Information

Payment information may include:

  • payment method;

  • payment status;

  • billing details;

  • transaction-related information.

Payment card information is processed securely by Shopify or our payment service providers.

We do not directly store complete payment card numbers or card security codes.

Customer Account Information

If you create or use a customer account, we may collect:

  • login-related information;

  • account preferences;

  • saved addresses;

  • order history;

  • account activity.

Communications

We may collect information included in communications sent to us, such as:

  • customer service messages;

  • emails;

  • questions;

  • complaints;

  • product instructions;

  • feedback;

  • other inquiries.

Cancellation, Return, Refund, Replacement, Withdrawal, and Complaint Information

If you submit a request concerning an order, we may collect:

  • your name;

  • email address;

  • order number or reference;

  • details of the product concerned;

  • the reason for contacting us;

  • a description of the issue;

  • photographs of the product or packaging;

  • supporting documents;

  • information needed to assess and process the request.

Device and Technical Information

We may automatically collect certain technical information, including:

  • IP address;

  • browser type;

  • device type;

  • operating system;

  • language settings;

  • approximate location derived from technical data;

  • time zone;

  • device identifiers;

  • cookie or similar technology identifiers.

Website Usage Information

We may collect information about how you interact with the Services, including:

  • pages visited;

  • products viewed;

  • search activity;

  • cart activity;

  • checkout activity;

  • referring websites;

  • links or advertisements used to reach the store;

  • interactions with store features;

  • session information.

How We Collect Personal Information

We may collect personal information:

  • directly from you when you place an order, create an account, provide personalization details, complete a form, communicate with us, or submit an order-related request;

  • from a customer who provides limited information about another person for the purpose of creating personalized artwork;

  • automatically through cookies, pixels, local storage, and similar technologies;

  • from Shopify and other providers that help us operate the store;

  • from payment processors;

  • from shipping, production, printing, and fulfillment providers;

  • from analytics, advertising, and marketing providers;

  • from fraud prevention and security providers;

  • from other service providers where necessary to operate the Services.

How We Use Personal Information

We may use personal information for the following purposes.

Providing and Operating the Services

This includes:

  • receiving and processing orders;

  • processing payments;

  • creating customer accounts;

  • arranging production and printing;

  • fulfilling purchases;

  • arranging delivery;

  • providing order and shipping updates;

  • maintaining the operation and security of the store.

Creating and Delivering Personalized Products

We use personalization information to:

  • prepare and design the artwork;

  • perform the required astronomical or date-based calculations;

  • create a digital proof where applicable;

  • communicate with you about personalization details;

  • make corrections requested before approval;

  • print, package, and deliver the final product;

  • handle questions or complaints concerning the finished artwork.

Providing Customer Support

We may use personal information to:

  • respond to questions;

  • provide order assistance;

  • investigate complaints;

  • address delivery issues;

  • process replacement or refund requests;

  • communicate about defects, damage, or order errors.

Handling Cancellation, Withdrawal, Return, Refund, and Complaint Requests

We may use personal information to:

  • identify the order concerned;

  • assess whether a request is eligible;

  • verify information submitted with the request;

  • communicate with the customer;

  • process an appropriate remedy;

  • maintain records required for legal, accounting, and dispute-resolution purposes.

Improving Our Store and Services

We may use information to:

  • understand how visitors use the store;

  • monitor website performance;

  • improve product descriptions and product pages;

  • identify technical problems;

  • improve navigation, checkout, and customer experience;

  • evaluate the performance of our products and marketing.

Where required by law, analytics based on non-essential cookies or similar technologies will be conducted only after obtaining the required consent.

Marketing and Advertising

Where permitted by law, we may use personal information to:

  • send promotional emails;

  • provide information about products or offers;

  • measure advertising performance;

  • understand which marketing channels lead customers to our store;

  • display or support relevant advertising on third-party platforms.

Where consent is required, we will conduct such activities only after consent has been provided.

You may unsubscribe from marketing emails at any time by using the unsubscribe link included in the message or by contacting us.

Security and Fraud Prevention

We may process personal information to:

  • protect customer accounts and transactions;

  • detect suspicious activity;

  • prevent fraud and misuse;

  • maintain the security of the website;

  • enforce our terms;

  • protect our business, customers, and service providers.

Legal and Regulatory Compliance

We may process and retain personal information to:

  • comply with tax and accounting obligations;

  • comply with consumer protection laws;

  • respond to lawful requests from public authorities;

  • establish, exercise, or defend legal claims;

  • comply with other applicable legal and regulatory obligations.

Legal Bases for Processing

Where applicable data protection law requires a legal basis, we rely on one or more of the following.

Performance of a Contract

We process personal information where necessary to:

  • receive and process an order;

  • collect personalization instructions;

  • prepare and create personalized artwork;

  • process payment;

  • arrange production and delivery;

  • provide customer support connected with the order;

  • fulfil our contractual obligations.

Legal Obligations

We process and retain certain personal information where necessary to comply with:

  • tax laws;

  • accounting requirements;

  • consumer protection obligations;

  • regulatory requirements;

  • lawful requests and legal proceedings.

Legitimate Interests

We may process personal information where necessary for our legitimate business interests, provided those interests are not overridden by the rights and freedoms of the person concerned.

These interests may include:

  • operating and improving the store;

  • providing effective customer service;

  • preventing fraud;

  • maintaining website and transaction security;

  • handling complaints and disputes;

  • protecting our legal rights;

  • maintaining necessary business records;

  • understanding the general performance of our Services.

Where personalization information relates to another person who is not the customer placing the order, we may rely on our legitimate interests in fulfilling the customer’s requested personalized order, provided that the processing is limited, proportionate, and does not override the rights and freedoms of that person.

Consent

Where required by law, we rely on consent for activities such as:

  • non-essential analytics cookies;

  • advertising cookies or pixels;

  • certain personalized marketing activities;

  • promotional emails where consent is required;

  • public use of identifiable customer artwork or personalization information.

Where processing is based on consent, you may withdraw your consent at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before the consent was withdrawn.

Cookies and Similar Technologies

We and our service providers, including Shopify, may use cookies, pixels, local storage, and similar technologies.

These technologies may be used to:

  • operate the storefront;

  • maintain security;

  • remember settings and preferences;

  • support customer accounts;

  • maintain the shopping cart;

  • enable checkout and payment functionality;

  • analyze website traffic;

  • understand store performance;

  • measure advertising effectiveness;

  • support marketing activities.

Some cookies and similar technologies are strictly necessary for the operation, security, checkout, and functionality of the store.

Where required by law, non-essential analytics, personalization, and advertising technologies will be used only after you have provided the required consent.

You may accept, reject, or change your preferences through the cookie banner or privacy preference controls available on our store.

You may also manage certain technologies through your browser settings.

Refusing or withdrawing consent to non-essential technologies will not prevent you from placing an order, although certain optional website features may be limited.

How We Disclose Personal Information

We may disclose personal information to third parties where necessary for the purposes described in this Privacy Policy.

Shopify

Our store is hosted and powered by Shopify.

Shopify may process personal information to provide:

  • the online storefront;

  • customer accounts;

  • checkout;

  • payment-related services;

  • Shop Pay;

  • security;

  • fraud prevention;

  • analytics;

  • technical infrastructure;

  • other e-commerce services.

Depending on the Shopify services and privacy settings enabled for our store, Shopify may also process information relating to your interactions with:

  • our store;

  • Shopify services;

  • other merchants using Shopify.

This may be used to provide enhanced services, prevent fraud, improve Shopify products, personalize experiences, measure advertising, or support relevant advertising.

Where applicable law requires consent for non-essential analytics, personalization, or advertising, such processing will take place only after the required consent has been provided.

You may manage or withdraw applicable consent through the cookie and privacy preference controls available on our store.

For more information about Shopify’s processing practices, please review the Shopify Consumer Privacy Policy and the Shopify Privacy Portal.

Payment Service Providers

We disclose information to payment providers where necessary to:

  • authorize payments;

  • complete transactions;

  • prevent payment fraud;

  • process refunds;

  • handle payment disputes.

Shipping and Delivery Providers

We may disclose information such as your name, delivery address, telephone number, email address, and order details where necessary to ship and deliver an order.

Production, Printing, and Fulfillment Providers

Where applicable, we may disclose the information necessary for a provider to:

  • prepare artwork files;

  • print the personalized product;

  • package the order;

  • fulfill and dispatch the order.

We disclose only the information reasonably necessary for the relevant service.

IT, Hosting, and Cloud Service Providers

We may use providers that support:

  • website operation;

  • email;

  • data storage;

  • file management;

  • cybersecurity;

  • technical maintenance;

  • communication with customers.

Analytics and Marketing Providers

Subject to applicable consent requirements, we may disclose information to analytics and advertising providers, such as Google, to:

  • measure website traffic;

  • understand marketing performance;

  • measure conversions;

  • manage advertising campaigns;

  • improve our marketing activities.

Professional Advisers and Public Authorities

We may disclose information to:

  • accountants;

  • legal advisers;

  • insurers;

  • tax advisers;

  • regulatory bodies;

  • courts;

  • law enforcement authorities;

  • other public authorities.

We do so only where necessary for professional advice, legal compliance, protection of rights, or responding to lawful requests.

Business Transfers

If our business is reorganized, sold, transferred, merged, or otherwise changes ownership, personal information may be transferred as part of that transaction, subject to applicable law.

Third-Party Links

Our Services may contain links to websites, social media profiles, or services operated by third parties.

We are not responsible for the privacy practices, security, or content of third-party services.

We recommend reviewing the relevant privacy policy before providing personal information to a third party.

Children’s Privacy

Our Services are intended to be used by adults.

Children should not place orders, create customer accounts, or provide personalization instructions without the involvement of a parent or legal guardian.

An adult customer may provide limited information relating to a child, such as:

  • a first name;

  • a date;

  • a location;

  • an event detail;

where this is necessary to create a personalized product.

The customer must be entitled to provide that information to us.

We do not knowingly use children’s personal information for advertising or direct marketing purposes.

If you believe that a child has provided personal information to us without appropriate involvement or authorization from a parent or guardian, please contact us.

Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy.

We may retain information where necessary to:

  • fulfil and deliver orders;

  • create personalized products;

  • provide customer support;

  • maintain records of approved artwork or proofs;

  • handle complaints, refunds, replacements, and disputes;

  • comply with accounting and tax obligations;

  • comply with consumer protection requirements;

  • prevent fraud;

  • establish, exercise, or defend legal claims;

  • protect our legitimate business interests.

Order, transaction, and invoice information may be retained for the periods required by applicable tax, accounting, and commercial laws.

Personalization details, artwork files, correspondence, and digital proofs may be retained for as long as reasonably necessary to:

  • complete the order;

  • provide post-purchase support;

  • reproduce or correct an order where appropriate;

  • handle complaints or disputes;

  • establish what the customer ordered or approved.

Where possible and appropriate, we may delete or anonymize personalization information when it is no longer needed.

We may not be able to delete certain order-related information immediately where retention is required by law or necessary for the establishment, exercise, or defence of legal claims.

The exact retention period depends on:

  • the type of information;

  • the purpose for which it is processed;

  • legal retention requirements;

  • whether there is an ongoing complaint or dispute;

  • security and fraud prevention needs.

Your Data Protection Rights

Depending on your location and applicable law, you may have the right to:

  • request access to personal information concerning you;

  • obtain a copy of your personal information;

  • request correction of inaccurate or incomplete information;

  • request deletion of personal information;

  • request restriction of processing;

  • object to certain processing based on legitimate interests;

  • object to direct marketing;

  • receive personal information in a structured, commonly used, machine-readable format where the right to data portability applies;

  • withdraw consent where processing is based on consent;

  • lodge a complaint with a competent data protection authority.

These rights may be subject to legal conditions, limitations, and exceptions.

To exercise your rights, contact us using the details provided at the end of this Privacy Policy.

We may request information reasonably necessary to verify your identity before processing your request.

If a request concerns information about another person that was provided as part of a personalized order, we may also need to verify the identity of the person making the request and assess the rights and interests of other people involved.

If you are located in Poland, you have the right to lodge a complaint with:

President of the Personal Data Protection Office
(Prezes Urzędu Ochrony Danych Osobowych)

You may also lodge a complaint with the competent supervisory authority in the country in which you live, work, or believe that an infringement has occurred.

International Data Transfers

Our service providers may process personal information in countries outside your country of residence, including countries outside the European Economic Area or the United Kingdom.

Data protection laws in those countries may differ from those in your country.

Where required by applicable law, international transfers of personal information are protected through recognized legal mechanisms, which may include:

  • an adequacy decision;

  • the European Commission’s Standard Contractual Clauses;

  • the United Kingdom’s approved transfer mechanisms;

  • another lawful transfer safeguard.

Information about safeguards applicable to a particular transfer may be requested by contacting us.

Security

We take reasonable technical and organizational measures to protect personal information against:

  • unauthorized access;

  • accidental loss;

  • misuse;

  • alteration;

  • destruction;

  • unauthorized disclosure.

We also use service providers, including Shopify, that maintain security measures intended to protect information processed through their services.

However, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security.

Automated Decision-Making

We do not currently make decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you.

Shopify, payment providers, and fraud prevention providers may use automated tools to:

  • authorize or decline payments;

  • identify suspicious transactions;

  • prevent fraud;

  • protect accounts and transactions.

Their processing is governed by their own privacy policies and applicable law.

Obligation to Provide Personal Information

You are not generally required by law to provide personal information to us.

However, certain information is necessary to:

  • place and fulfil an order;

  • process payment;

  • prepare a personalized product;

  • arrange delivery;

  • provide customer service;

  • process a complaint, refund, or replacement request;

  • comply with legal obligations.

If you do not provide the necessary information, we may be unable to:

  • accept or fulfil your order;

  • create the requested personalized artwork;

  • process payment;

  • deliver the product;

  • respond fully to a request or complaint.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

  • changes to our Services;

  • changes to Shopify or other service providers;

  • operational changes;

  • legal or regulatory requirements;

  • changes to the way personal information is processed.

When we update this Privacy Policy, we will publish the revised version on this page and update the “Last updated” date.

Contact and Data Controller

For the purposes of applicable data protection law, the controller of personal information processed in connection with this store is:

P.P.H.U. Magdalena Romanowska
VAT ID (NIP): PL7262418945
REGON: 526230550
Niesięcin 52D
95-050 Konstantynów Łódzki
Poland

Email: magdalena.romanowska.poczta@gmail.com
Phone: +48 505 208 891

Please use these contact details if you:

  • have questions about this Privacy Policy;

  • wish to exercise your data protection rights;

  • want to withdraw consent;

  • wish to object to processing;

  • have a complaint concerning the processing of personal information.