GDPR / Data Protection

Privacy & Data Protection Policy (GDPR)

Last updated: 21.08.2025
Seller: Picasso Poland Sp. z o.o. (trading as Indian House)
Email: office@indianhouse.pl
Address: Aleja Krakowska 37, 05-090 Janki, Poland


1. Introduction

We respect your privacy and are committed to protecting your personal data.
This Privacy & Data Protection Policy explains how we collect, use, store, and protect your information when you visit our website, shop with us, or use our services.

This policy complies with the General Data Protection Regulation (EU) 2016/679 (GDPR) and Polish data protection law.

By using our Services, you consent to this policy.


2. Who We Are

The data controller responsible for your personal data is:

Picasso Poland Sp. z o.o. (Indian House)
Aleja Krakowska 37, 05-090 Janki, Poland
Email: office@indianhouse.pl


3. Data We Collect

When you use our website or shop with us, we may collect the following data:

  • Identity data: name, surname, billing/shipping address

  • Contact data: email, phone number

  • Order data: purchase details, delivery preferences

  • Payment data: processed securely via third-party payment providers (we do not store full card details)

  • Marketing data: your communication and marketing preferences

  • Technical data: IP address, browser type, device information

  • Behavioural data: browsing activity, interactions, purchases (via Google Analytics & Meta Pixel)


4. How We Use Your Data

We use your personal data for:

  1. Order processing & delivery – to process your purchase, issue invoices, and deliver your products.

  2. Customer service – to answer questions, handle returns, refunds, or complaints.

  3. Email marketing (with consent) – newsletters, promotions, and updates, managed through Zoho CRM. You can unsubscribe anytime.

  4. Analytics & website performance – using Google Analytics and Meta Pixel to understand behaviour and improve our store.

  5. Legal compliance – accounting, tax, fraud prevention, and consumer rights.


5. Legal Basis for Processing

We process personal data on the following legal grounds:

  • Contract performance (Art. 6(1)(b) GDPR) – to process and deliver your orders.

  • Legal obligation (Art. 6(1)(c) GDPR) – for tax and accounting compliance.

  • Consent (Art. 6(1)(a) GDPR) – for newsletters, email marketing, cookies, and remarketing.

  • Legitimate interest (Art. 6(1)(f) GDPR) – to improve our services, prevent fraud, and market relevant products.


6. Sharing of Data

We only share your data with trusted service providers necessary to operate our business:

  • Shopify – our e-commerce platform & payment processing.

  • Zoho CRM – for customer relationship management and email marketing.

  • Google Analytics – to analyze traffic and behaviour (anonymized where possible).

  • Meta Pixel (Facebook/Instagram) – for targeted advertising and campaign measurement.

  • Delivery companies – to ship your order (e.g., DHL, DPD, InPost).

  • Legal authorities – if required by law.

We do not sell your data to third parties.


7. International Transfers

Some of our service providers (Shopify, Zoho, Meta, Google) may store data outside the EU/EEA. In such cases, transfers are protected under:

  • Standard Contractual Clauses (SCCs),

  • Adequacy decisions by the EU Commission, or

  • Other GDPR-approved safeguards.


8. Data Retention

We keep your data only as long as necessary:

  • Orders & invoices – kept for 5 years (tax law requirement).

  • Marketing data – until you withdraw consent.

  • Cookies & analytics data – typically 26 months (Google default) or shorter, depending on settings.


9. Your Rights Under GDPR

You have the right to:

  • Access your data (Art. 15)

  • Rectify incorrect data (Art. 16)

  • Request deletion (“right to be forgotten”) (Art. 17)

  • Restrict processing (Art. 18)

  • Data portability (Art. 20)

  • Object to processing (Art. 21), including direct marketing

  • Withdraw consent at any time

➡️ To exercise your rights, contact us at office@indianhouse.pl.

If you believe your data rights are violated, you may file a complaint with UODO (Urząd Ochrony Danych Osobowych) in Poland.


10. Cookies & Tracking

We use cookies and tracking technologies to improve your browsing experience.

  • Essential cookies – required for the website to function (shopping cart, checkout).

  • Analytics cookies – via Google Analytics, to measure traffic and improve usability.

  • Advertising cookies – via Meta Pixel, to deliver personalized ads.

You can manage or disable cookies through your browser settings.


11. Data Security

We implement technical and organizational measures to protect your personal data against loss, misuse, or unauthorized access, including encryption, secure servers, and restricted access.


12. Contact Us

For privacy or GDPR questions, please contact us:

📧 Email: office@indianhouse.pl
📍 Address: Aleja Krakowska 37, 05-090 Janki, Poland
📞 Phone: +48 579 292 551