Datenschutzerklärung

Last updated: October 1, 2026

This Privacy Policy explains how we collect, use and protect your personal information when you visit lipastick.com or buy from us, and what rights you have.

1. Who we are

The controller of your personal data is WALLSTYLE Sp. z o.o., trading as Lipastick, pl. Gen. Walerego Wróblewskiego 3A/7, 50-413 Wrocław, Poland (NIP: 8992983807). For any privacy questions or requests, contact us at sale@lipastick.com.

2. What information we collect

  • Information you provide: name, email address, postal address, phone number and order details when you place an order, contact us, fill in a form or subscribe to our newsletter.
  • Information collected automatically: technical data such as IP address, browser type, device, operating system, pages visited and the date and time of your visit, collected through cookies and similar technologies.
  • Payment information: card payments are processed directly by our payment providers. We never see or store your full card details.

We do not collect special categories of personal data (such as health, religious or political information).

3. How and why we use your information

Purpose Legal basis (GDPR)
Processing and delivering your order, handling returns, replacements and complaints Performance of a contract – Art. 6(1)(b)
Answering your questions and messages Contract / legitimate interest – Art. 6(1)(b), (f)
Accounting, tax and customs obligations Legal obligation – Art. 6(1)(c)
Sending newsletters and promotional offers Your consent – Art. 6(1)(a)
Analytics and advertising cookies Your consent – Art. 6(1)(a)
Keeping our website secure, preventing fraud and protecting our rights Legitimate interest – Art. 6(1)(f)

4. Who we share your information with

We share only the information needed for each service, and only with trusted providers that are required to protect it:

  • our e-commerce platform and website hosting provider;
  • payment providers (card payments and PayPal);
  • delivery companies (FedEx, UPS, USPS and other carriers) – to deliver your order;
  • email, customer service and review tools;
  • analytics and advertising partners – only if you have consented to these cookies;
  • tax, customs and other public authorities, courts and professional advisers, where required by law.

We do not sell your personal information for money.

5. International transfers

Some of our service providers are located outside the European Economic Area, for example in the United States, and orders to the USA are shipped there. When personal data is transferred outside the EEA, we rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses or adequacy decisions.

6. How long we keep your information

We keep your personal data for 60 months, unless a longer period is required by law (for example, accounting or tax regulations) or is necessary to establish or defend legal claims. Newsletter data is kept until you unsubscribe. After that, your data is deleted or anonymized.

7. Your rights (EU/EEA and UK)

Under the GDPR, you have the right to:

  • access your personal data and receive a copy of it;
  • correct inaccurate or incomplete data;
  • request the deletion of your data;
  • restrict or object to the processing of your data, including for direct marketing;
  • receive your data in a portable format (data portability);
  • withdraw your consent at any time, without affecting processing carried out before the withdrawal.

To exercise your rights, email us at sale@lipastick.com. We may ask you to confirm your identity. You also have the right to lodge a complaint with the Polish supervisory authority – the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl) – or with the data protection authority in your country.

8. Your rights (California residents)

If you live in California, you have the right to know what personal information we collect, use and disclose; to request its deletion or correction; and to opt out of the “sale” or “sharing” of your personal information for cross-context behavioral advertising. We do not sell personal information for money, but some advertising cookies may be considered “sharing” under California law. You can opt out by rejecting advertising cookies in our cookie banner or by emailing us at sale@lipastick.com. We will not discriminate against you for exercising any of these rights.

9. Cookies

Cookies are small files stored on your device that help our website work and remember your preferences. We use:

  • Necessary cookies – required for the cart, checkout and security. They are always on.
  • Analytics cookies – help us understand how visitors use the website so we can improve it.
  • Marketing cookies – used to show you relevant ads and measure our campaigns.

Analytics and marketing cookies are used only with your consent, which you give or refuse in the cookie banner. You can change your choice at any time in the banner or in your browser settings.

10. Security

We use appropriate technical and organizational measures to protect your personal information against loss, theft and unauthorized access. All transactions on our website are carried out over an encrypted connection.

11. Children’s privacy

Our website is not intended for children. We do not knowingly collect personal information from children without the consent of a parent or legal guardian. If you believe your child has provided us with personal information, please contact us at sale@lipastick.com and we will delete it.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date.

13. Contact us

If you have any questions about this Privacy Policy, please contact us at sale@lipastick.com or by mail: WALLSTYLE Sp. z o.o., pl. Gen. Walerego Wróblewskiego 3A/7, 50-413 Wrocław, Poland.