Privacy policy

[data-custom-class='body'], [data-custom-class='body'] * { background: transparent !important; } [data-custom-class='title'], [data-custom-class='title'] * { font-family: Arial !important; font-size: 26px !important; color: #000000 !important; } [data-custom-class='subtitle'], [data-custom-class='subtitle'] * { font-family: Arial !important; color: #595959 !important; font-size: 14px !important; } [data-custom-class='heading_1'], [data-custom-class='heading_1'] * { font-family: Arial !important; font-size: 19px !important; color: #000000 !important; } [data-custom-class='heading_2'], [data-custom-class='heading_2'] * { font-family: Arial !important; font-size: 17px !important; color: #000000 !important; } [data-custom-class='body_text'], [data-custom-class='body_text'] * { color: #595959 !important; font-size: 14px !important; font-family: Arial !important; } [data-custom-class='link'], [data-custom-class='link'] * { color: #3030F1 !important; font-size: 14px !important; font-family: Arial !important; word-break: break-word !important; }

Last updated: August 18, 2026

This Privacy Policy explains how Doostomz ("Doostomz", "we", "us", or "our") collects, uses, stores and shares personal information when you visit or use our website at https://doostomz.com, create an account, place an order, submit a custom request, subscribe to our newsletter, submit a product review, or otherwise contact or interact with us.

Doostomz is operated by:

Doostomz - Dominik Hoffmann
ul. Czubińskiego 6/6 80-215 Gdańsk
Poland

Email: doostomz@gmail.com
Phone: +48 519 475 826

For the purposes of the European Union General Data Protection Regulation (GDPR), we are the data controller responsible for your personal information, except where a third party processes information independently as described in this Privacy Policy.

By using our website and services, you acknowledge that you have read and understood this Privacy Policy.

1. WHAT PERSONAL INFORMATION DO WE COLLECT?

The information we collect depends on how you interact with Doostomz.

Information you provide directly

We may collect information that you voluntarily provide to us, including:

  • first and last name;

  • email address;

  • telephone number;

  • billing and shipping address;

  • account information;

  • order and purchase information;

  • information submitted through our contact or custom-request forms;

  • information about the custom product or design you are requesting;

  • photographs, reference images or other files you voluntarily submit as part of a custom request;

  • information you provide when contacting customer support;

  • information you provide when submitting a product review;

  • newsletter and marketing preferences;

  • information you provide when exercising your privacy rights.

You are not required to provide every type of information listed above. However, certain information is necessary to create an account, process an order, provide a custom service, deliver products or respond to your request.

Account information

Our store allows customers to create and use customer accounts.

Depending on the features available through Shopify customer accounts, we may process information associated with your account, including your name, email address, order history, account preferences and information necessary to provide account functionality.

Shopify's current customer-account system supports passwordless sign-in and allows customers to view their profile, orders and order status.

Custom requests

If you use our Custom Request form, we may collect the information you submit through the form, including your contact information, project details, design requirements, photographs, reference materials and other information necessary to prepare a quote or discuss your requested custom product.

Our custom-request form is provided using HulkApps / HulkForm. HulkApps states that, where it processes customer data on behalf of a merchant under European data protection law, it acts as a processor.

Please do not submit sensitive personal information through a custom-request form unless it is strictly necessary for your request.

Payment information

When you purchase products from Doostomz, payment information is processed through the payment services available through Shopify and the payment providers selected at checkout.

Depending on the payment method you choose, this may include:

  • Shopify Payments;

  • payment cards;

  • BLIK;

  • Apple Pay;

  • Google Pay;

  • other payment methods made available through Shopify;

  • PayPal.

We do not intentionally store complete payment card numbers or security codes on our own systems.

Payment information may be processed directly by Shopify, the relevant payment processor or PayPal in accordance with their respective privacy policies and terms.

Shopify's current Shopify Payments terms state that Shopify and relevant payment processors may process customer payment data to provide payment services and for purposes such as fraud prevention, regulatory compliance and payment processing.

2. INFORMATION COLLECTED AUTOMATICALLY

When you visit or use our website, certain technical information may be collected automatically.

This may include:

  • IP address;

  • browser type and version;

  • operating system;

  • device type;

  • language and regional settings;

  • referring website;

  • pages visited;

  • products viewed;

  • links or buttons interacted with;

  • dates and times of visits;

  • approximate location derived from IP address;

  • information about website activity;

  • information necessary to maintain security and prevent fraud.

This information may be processed by Shopify and other service providers used to operate, secure and improve our website.

We currently do not use Google Analytics on Doostomz.

If we introduce Google Analytics or another analytics service in the future, we will update this Privacy Policy and, where required, our cookie-consent settings before or when the relevant technology is introduced.

3. HOW DO WE USE YOUR PERSONAL INFORMATION?

We may use personal information for the following purposes:

Providing and operating our store

We process information to:

  • operate and maintain Doostomz;

  • provide access to customer accounts;

  • process and fulfill orders;

  • process payments;

  • arrange shipping and delivery;

  • provide order updates;

  • handle returns, refunds and complaints;

  • provide customer service;

  • respond to inquiries;

  • provide custom design and customization services.

Custom orders and quotations

We may use information submitted through our Custom Request form to:

  • understand your requirements;

  • communicate with you;

  • prepare quotations;

  • discuss designs;

  • prepare or manufacture custom products;

  • provide previews or design concepts;

  • fulfill the resulting order.

Customer accounts

We use account information to provide customer-account functionality, including access to order history, account information and order status.

Reviews

We use Judge.me to collect and display product reviews.

If you submit a review or are invited to review a product you purchased, certain information associated with your purchase and review may be processed by Judge.me.

Judge.me states that, when it receives personal data from merchants through e-commerce platforms, it generally acts as a data processor for the merchant. Judge.me may process reviewer information to provide review functionality and may connect a review with the relevant product purchase.

Newsletter and marketing

If you subscribe to our newsletter or otherwise provide the required marketing consent, we may use your email address to send:

  • news about Doostomz;

  • new product announcements;

  • promotions;

  • discounts;

  • special offers;

  • other marketing communications.

You can unsubscribe from marketing emails at any time by using the unsubscribe link included in the message or by contacting us.

We do not use your subscription to send unrelated third-party advertising.

Security and fraud prevention

We may process information to:

  • detect and prevent fraud;

  • protect our website and customers;

  • investigate suspicious activity;

  • prevent abuse of our services;

  • maintain technical security.

Legal and accounting obligations

We may process and retain information when necessary to:

  • comply with tax and accounting obligations;

  • maintain legally required business records;

  • respond to lawful requests from authorities;

  • establish, exercise or defend legal claims;

  • comply with applicable laws and regulations.

4. LEGAL BASES FOR PROCESSING

Where the GDPR applies, we process personal information using one or more of the following legal bases.

Performance of a contract

We process information when it is necessary to enter into or perform a contract with you, including:

  • processing and fulfilling orders;

  • processing payments;

  • delivering products;

  • handling returns and refunds;

  • providing custom services;

  • managing customer accounts;

  • communicating with you about your order.

Legal obligations

We process information when necessary to comply with legal obligations, including tax, accounting and other statutory requirements.

Legitimate interests

We may process information where necessary for our legitimate business interests, provided that those interests do not override your rights and freedoms.

Examples may include:

  • website security;

  • fraud prevention;

  • maintaining and improving our services;

  • responding to customer inquiries;

  • defending legal claims;

  • maintaining business records;

  • improving customer experience;

  • understanding how our store is used.

Consent

Where consent is required by law, we will ask for your consent before processing personal information for the relevant purpose.

This may include certain marketing communications and certain non-essential cookies or similar technologies.

You may withdraw consent at any time. Withdrawal does not affect processing that was lawful before your consent was withdrawn.

5. WHO DO WE SHARE PERSONAL INFORMATION WITH?

We do not sell your personal information.

We may share personal information with trusted service providers where necessary to operate our business and provide our services.

Shopify

Our online store is hosted and operated using Shopify.

Shopify processes customer information in connection with the operation of the store, including orders, customer accounts, checkout, payment services, fraud prevention, security and other Shopify services.

Shopify's current privacy documentation explains that merchants are generally responsible for determining how customer data is handled and that Shopify acts as a processor where it processes customer data on the merchant's instructions.

Payment providers

Depending on the payment method selected at checkout, relevant information may be shared with:

  • Shopify Payments;

  • payment providers integrated with Shopify;

  • PayPal;

  • Apple Pay;

  • Google Pay;

  • other payment providers necessary to complete the transaction.

These providers may process information independently where required for their own legal, security, fraud-prevention, regulatory or payment-processing obligations.

Shipping and delivery providers

We may share information necessary to deliver your order with the shipping or courier company selected to fulfill the delivery.

This may include your name, delivery address, email address, telephone number and shipment information.

HulkApps / HulkForm

Information submitted through our Custom Request form may be processed by HulkApps / HulkForm for the purpose of providing the form and transmitting the information to us.

HulkApps' current Data Processing Addendum identifies HulkApps as a processor where it processes customer data on behalf of a customer under European data protection law.

Judge.me

We use Judge.me to collect, manage and display product reviews and related review requests.

Judge.me may process information relating to purchases and reviewers to provide its review services. Judge.me states that merchants are generally controllers of buyer/reviewer data received through their e-commerce platforms and Judge.me acts as a processor for that data.

Professional advisers and authorities

We may disclose information to:

  • accountants;

  • legal advisers;

  • insurers;

  • auditors;

  • courts;

  • government authorities;

  • tax authorities;

  • law enforcement authorities;

where reasonably necessary or legally required.

Business transfers

If Doostomz is involved in a merger, acquisition, restructuring, sale of assets or similar business transaction, personal information may be transferred as part of that transaction, subject to applicable data-protection requirements.

6. INTERNATIONAL DATA TRANSFERS

Some of our service providers may process personal information outside the European Economic Area (EEA).

Where personal information is transferred outside the EEA, we rely on appropriate legal safeguards required by applicable data-protection law, such as an adequacy decision, Standard Contractual Clauses or other legally recognized transfer mechanisms, where applicable.

For example, Shopify states that personal information may be transferred to and processed in regions outside the EEA, including Canada and the United States, subject to applicable data-protection safeguards.

Third-party providers may have their own international data-transfer arrangements.

7. COOKIES AND SIMILAR TECHNOLOGIES

Doostomz uses cookies and similar technologies necessary for the operation, security and functionality of the website.

Depending on your settings and applicable law, we may also use cookies or similar technologies for:

  • remembering preferences;

  • maintaining shopping-cart functionality;

  • customer-account functionality;

  • checkout functionality;

  • security and fraud prevention;

  • measuring website performance;

  • marketing and advertising;

  • other optional functionality.

Non-essential cookies will be used in accordance with applicable consent requirements.

Our cookie practices are also described in our separate Cookie Policy.

We may update our cookie practices if we add new services, applications, analytics tools or advertising technologies.

8. HOW LONG DO WE KEEP PERSONAL INFORMATION?

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer period is required or permitted by law.

Different categories of information may therefore be retained for different periods.

Orders and transaction records

Information relating to purchases may be retained for as long as necessary to:

  • fulfill the order;

  • handle returns, complaints and warranties;

  • comply with accounting and tax obligations;

  • establish or defend legal claims.

Customer accounts

Account information may be retained while your customer account remains active.

Where you request deletion of your account, we will delete or anonymize information that we are not legally required to retain.

Certain information may need to be retained after account deletion where required by law or necessary to establish, exercise or defend legal claims.

Custom requests

Information relating to custom requests may be retained for as long as necessary to:

  • communicate with you;

  • prepare or fulfill the requested service;

  • maintain relevant business records;

  • handle disputes or claims.

Newsletter subscriptions

Marketing information is retained while you remain subscribed or until you withdraw your consent, unless another lawful basis for retention applies.

When you unsubscribe, we will stop using your information for the relevant marketing communications, although we may retain a minimal record of your opt-out where necessary to ensure that we respect your preference.

Reviews

Reviews and information associated with reviews may remain available for as long as reasonably necessary to operate our review system, subject to your rights and applicable law.

9. YOUR PRIVACY RIGHTS

Depending on where you live and applicable law, you may have the following rights regarding your personal information:

  • the right to access your personal information;

  • the right to receive a copy of your personal information;

  • the right to correct inaccurate or incomplete information;

  • the right to request deletion of your personal information;

  • the right to request restriction of processing;

  • the right to object to certain processing;

  • the right to withdraw consent where processing is based on consent;

  • the right to data portability where applicable;

  • the right not to be subject to certain solely automated decisions producing legal or similarly significant effects, where applicable;

  • the right to lodge a complaint with a data protection authority.

These rights are not absolute and may be subject to legal exceptions.

10. HOW TO EXERCISE YOUR RIGHTS

To exercise your privacy rights, contact us at:

doostomz@gmail.com

Please describe your request clearly and provide enough information for us to identify the relevant account or information.

For security reasons, we may need to verify your identity before completing certain requests.

We will respond within the time required by applicable data-protection law.

If you are located in the European Economic Area and believe that your personal information has been processed unlawfully, you also have the right to lodge a complaint with the data protection authority responsible for your country.

For customers in Poland, the relevant supervisory authority is the President of the Personal Data Protection Office (UODO).

11. MARKETING COMMUNICATIONS

You can unsubscribe from Doostomz marketing communications at any time.

Every marketing email should provide an appropriate way to unsubscribe.

Unsubscribing from marketing communications does not prevent us from sending essential service-related communications, such as:

  • order confirmations;

  • payment confirmations;

  • shipping information;

  • account-related messages;

  • responses to customer inquiries;

  • other communications necessary to provide services you have requested.

12. CHILDREN'S PRIVACY

Our website and services are intended for adults and are not directed at children.

We do not knowingly request or intentionally collect personal information from children where doing so would be unlawful.

If you believe that a child has provided personal information to us unlawfully, please contact us at doostomz@gmail.com so that we can review the situation and take appropriate action.

13. UNITED STATES PRIVACY RIGHTS

Doostomz serves customers internationally, including customers in the United States.

Certain U.S. states provide residents with additional privacy rights. Where such laws apply to our processing of your information, we will provide the rights and protections required by the applicable law.

Depending on the applicable state law, these rights may include:

  • the right to know what personal information is collected;

  • the right to access personal information;

  • the right to correct inaccurate information;

  • the right to request deletion;

  • the right to obtain a portable copy of personal information;

  • the right to opt out of certain forms of targeted advertising, sale or sharing of personal information;

  • the right to limit certain uses of sensitive personal information, where applicable;

  • the right not to be discriminated against for exercising privacy rights.

We do not sell personal information for monetary consideration.

If you wish to exercise a privacy right, contact us at doostomz@gmail.com.

We may need to verify your identity before processing a request.

14. DO-NOT-TRACK SIGNALS

Some browsers provide a Do-Not-Track ("DNT") setting.

There is currently no universally accepted technical standard requiring websites to respond to DNT signals in a particular way.

Unless required by applicable law, Doostomz does not currently treat DNT browser signals as a separate legally binding opt-out mechanism.

We may update this practice if applicable standards or legal requirements change.

15. DATA SECURITY

We use reasonable technical and organizational measures designed to protect personal information against unauthorized access, alteration, disclosure, loss or destruction.

These measures include security controls provided through Shopify and our other service providers.

However, no method of transmission over the Internet or method of electronic storage can be guaranteed to be completely secure.

You are responsible for maintaining the security of your account credentials and should notify us promptly if you believe that your account or personal information has been compromised.

16. THIRD-PARTY WEBSITES AND SERVICES

Our website may contain links to third-party websites, services, applications or social-media platforms.

We are not responsible for the privacy practices of third parties that operate independently from Doostomz.

When you interact with a third-party service, that service's own privacy policy may apply.

This includes services such as payment providers, social-media platforms and other third-party applications or websites.

17. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect:

  • changes to our services;

  • changes to the technologies we use;

  • changes to our data-processing practices;

  • changes to applicable laws or regulations;

  • changes to our service providers.

When we make changes, we will update the "Last updated" date at the top of this Privacy Policy.

If we make material changes that significantly affect how we process personal information, we may provide additional notice where required by law.

18. CONTACT US

If you have questions about this Privacy Policy, our processing of personal information, or your privacy rights, contact us:

Doostomz - Dominik Hoffmann
ul. Czubińskiego 6/6 80-215 Gdańsk
Poland

Email: doostomz@gmail.com
Phone: +48 519 475 826

19. REQUEST TO ACCESS, CORRECT OR DELETE YOUR DATA

You may contact us at doostomz@gmail.com to request access to, correction of, restriction of or deletion of your personal information, subject to applicable law.

We will assess each request in accordance with the law applicable to the processing concerned.

Where information must be retained for legal, accounting, security or other lawful purposes, we may retain that information for the required period even if you request deletion.

Last updated: August 18, 2026

ul { list-style-type: square; } ul > li > ul { list-style-type: circle; } ul > li > ul > li > ul { list-style-type: square; } ol li { font-family: Arial ; }