Privacy Policy

Data controller and contact

Miyuko spółka z ograniczoną odpowiedzialnością (Miyuko Sp. z o.o.), ul. Marszałkowska 126/134, 00-008 Warszawa, Poland. NIP: 9542818859; KRS: 0000862619; REGON: 387159226.

For privacy questions and requests, contact trade@miyuko.pl.

Who this policy covers

This policy covers visitors to our website, price list requests, supplier offers, company registrations and contact enquiries, including related correspondence. Business contact details can be personal data even when you act on behalf of a company.

Data we collect

Depending on the form, we collect company name, country, tax identification number, website, contact name, business email, phone or WhatsApp number, product categories, volumes, sales markets, stock location, distribution channel, enquiry details and any offer files you choose to upload. We record the source page and submission time. Our hosting provider also processes technical request information, such as IP address, browser and device information, request times and error logs, to deliver and protect the website. We use an IP-based request limit to help prevent abuse. Please include only information needed for your enquiry. Buyer applications also collect registered and delivery addresses, bank and company account details, document-routing email addresses, department contacts, signatory name, role and date, declarations and supporting company register, tax and signed company documents. We record the application version, submission reference and manual review status. Do not upload identity documents: identity verification is arranged separately after preliminary review.

Purposes and legal bases

We handle business enquiries, assess supplier offers and registrations, and contact company representatives based on our legitimate interests in responding to requests and developing and managing business relationships (GDPR Article 6(1)(f)). Where you personally are a prospective party to a contract, necessary pre-contractual steps requested by you rely on Article 6(1)(b). Website security, prevention of abuse and establishing, exercising or defending legal claims are legitimate interests under Article 6(1)(f). Where a transaction creates accounting, tax or other legal record-keeping duties, the relevant processing relies on Article 6(1)(c). Providing data is voluntary, but without the required details we cannot process the relevant request. Submitting a registration does not itself approve purchases or create a trading contract. Optional newsletter marketing relies on your separate consent under Article 6(1)(a); it is not required to apply and can be withdrawn at any time.

Who receives data

Authorised Miyuko personnel handle enquiries. We use HubSpot to manage submitted contact details, correspondence and uploaded offer files and buyer applications with supporting company documents; Hostinger to host the test site and migrated website, and Vercel for the existing deployment during migration; and Google for business email. These providers and their subprocessors process data to provide their services. Professional advisers and public authorities may receive relevant information where necessary for advice, legal claims or a legal obligation. The website currently loads fonts from Google Fonts, so your browser connects to Google and sends technical request information, including your IP address and browser information, when requesting fonts.

International transfers

Our providers operate internationally, so processing or support access may take place outside the European Economic Area. An EU hosting region alone does not rule out international access. Where required, transfers rely on an applicable European Commission adequacy decision or appropriate safeguards, such as EU Standard Contractual Clauses. Contact us for information about the safeguards applicable to your data or to request a copy.

How long we keep data

For enquiries that do not lead to an ongoing business relationship or transaction, our retention period is up to 12 months after the last relevant contact. This includes contact details, enquiry correspondence, uploaded offer files and unsuccessful buyer applications with supporting documents and bank details. For ongoing business relationships, we keep relevant information for the duration of the relationship. Records needed for accounting, tax or other legal duties are retained for the applicable statutory period; records needed for legal claims may be retained for the relevant limitation period or until the dispute is resolved. These exceptions do not justify retaining unrelated enquiry data indefinitely. Technical logs and backup copies follow the applicable provider's retention and deletion cycles.

Your rights

Subject to the conditions in the GDPR, you can request access, correction, deletion or restriction of processing. You can object to processing based on legitimate interests on grounds relating to your particular situation. Where processing is based on consent or a contract and carried out by automated means, data portability may apply. If we rely on consent for a separate activity, you can withdraw it without affecting earlier lawful processing. Send requests to trade@miyuko.pl. We may need proportionate information to verify your identity. You may complain to the President of the Polish Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO), or the supervisory authority in the EU country where you live, work or consider an infringement to have occurred. You do not have to contact us first.

Cookies and automated decisions

The website currently has no marketing or analytics tracking scripts configured by Miyuko. Hosting and security services may process technical request data needed to deliver and protect the site. We will update this policy and obtain consent where required before introducing optional tracking technologies. The website forms do not make decisions producing legal or similarly significant effects about you. Our trading desk reviews registrations and business enquiries.

Further information

HubSpot data processing, Vercel data processing, Hostinger privacy information, Google privacy information. Supervisory authority: UODO.