Privacy Policy

This Privacy Policy explains how personal information is collected and used when you visit bzubzi.com, download a free story, purchase a product, join our mailing list, or contact us (together, the “Services”).

The data controller responsible for your personal information is:

Bzubzi Studio A. Orlowska
Sole proprietor registered in Poland
ul. Serwituty 25
02-233 Warsaw, Poland, European Union
Tax Identification Number (NIP): 1132383091
EU VAT ID: PL1132383091
Email: hello@bzubzi.com

In this Policy, “Bzubzi Studio,” “we,” “us,” and “our” refer to the controller identified above.

This Policy applies to personal information processed through bzubzi.com and related forms, checkout pages, emails, and customer-support communications controlled by Bzubzi Studio.

It does not govern the independent privacy practices of third-party websites or services that you choose to visit. Those services provide their own privacy notices.

The information we collect depends on how you interact with the Services.

Where the General Data Protection Regulation (GDPR) or similar law applies, we process personal information only when we have a valid legal basis.

We use your email address to deliver a free story or other resource you request. Transactional delivery messages are separate from marketing messages.

We send newsletters, product announcements, activities, offers, and other promotional emails when you have agreed to receive them or when another lawful basis expressly permits them. Each marketing email contains an unsubscribe link. You may also unsubscribe by contacting hello@bzubzi.com.

Unsubscribing from marketing does not prevent us from sending service messages that are necessary to complete an order, deliver a requested file, respond to you, or provide important information about a transaction.

We may retain limited information on a suppression list after you unsubscribe so that we can respect your request and avoid adding you back to marketing communications by mistake.

The Website may use the following categories of cookies and similar technologies:

• Strictly necessary technologies, which support functions such as security, shopping carts, checkout, account login, downloads, and saved privacy choices;
• Preference technologies, which remember choices such as language or display settings;
• Analytics technologies, which help us understand Website use and improve performance; and
• Advertising technologies, which may measure campaigns, limit repeated advertisements, build audiences, or support personalized advertising.

Analytics technologies are used only with your consent where the law requires it. Our advertising measurement tools, described in Section 7, currently operate as set out there. You can change your cookie choices through the Website’s cookie settings at any time. You can also limit cookies using your browser settings, although blocking necessary cookies may affect checkout, login, or download functions.

Browsers may transmit a “Do Not Track” signal, but there is no universally accepted standard for responding to it. Where applicable law requires us to recognize an opt-out preference signal, such as the Global Privacy Control, we will treat the supported signal as an opt-out request for that browser or device.

With the required consent, we may use analytics tools, such as Google Analytics, to understand Website traffic and interactions.

We use the Meta Pixel and Meta’s Conversions API, provided by Meta Platforms, Inc. and Meta Platforms Ireland Limited, to measure the results of our advertising and to show our ads to people who may be interested in our stories. These tools may receive online identifiers (such as cookie IDs and Meta browser identifiers), IP address, browser and device information, pages viewed, and events such as viewing a story, signing up for the free story, starting checkout, or completing a purchase. Some events may be sent from our server as well as from your browser. We do not send your payment card details to Meta. Meta processes this information under its own Privacy Policy and may use it to match events to its users and to improve its own services.

We may also use advertising and campaign-measurement tools from Pinterest, which work in a similar way and receive similar information.

Depending on the technology and applicable U.S. state law, this disclosure may be considered “sharing,” “targeted advertising,” or a “sale” even though we do not sell personal information for money.

You can limit these tools by changing the Website’s cookie settings, using your browser’s privacy settings, or turning off personalized ads in your Facebook and Instagram ad preferences (facebook.com/adpreferences). You can also ask us to opt out by emailing hello@bzubzi.com, and we will act on valid requests. If you are in the EEA, UK or Switzerland, you may object to this processing by writing to us.

We do not sell lists of customer or subscriber information.

We may disclose personal information to service providers and other recipients where necessary for the purposes described in this Policy, including:

• website hosting, content delivery, backups, and technical support providers;
• WordPress and WooCommerce tools used to operate the store;
• payment processors, including Stripe;
• advertising and measurement platforms such as Meta and Pinterest, as described in Section 7;
• email-delivery and mailing-list providers, such as Flodesk or MailPoet where enabled;
• analytics, advertising, and campaign-measurement providers used with the required consent;
• security, spam-prevention, fraud-prevention, and diagnostic providers;
• professional advisers, accountants, tax advisers, insurers, and legal advisers;
• public authorities, regulators, courts, or law-enforcement bodies where disclosure is legally required; and
• a purchaser, successor, or adviser involved in a genuine sale, reorganization, or transfer of all or part of the business, subject to appropriate confidentiality and legal safeguards.

Service providers may process personal information only for the contracted services or as otherwise permitted by law. Some integrated services may also act as independent controllers for particular processing; their own privacy notices explain those activities.

We may disclose information when reasonably necessary to enforce our Terms, protect the Website and its users, investigate fraud or security incidents, or establish, exercise, or defend legal claims.

Bzubzi Studio is based in Poland, but some service providers may process information in the United States or other countries outside the European Economic Area (EEA).

When GDPR-protected information is transferred outside the EEA, we rely on an appropriate legal safeguard where required. Depending on the recipient and circumstances, this may include:

• an adequacy decision adopted by the European Commission, including a recipient’s valid participation in an approved framework where applicable;
• the European Commission’s Standard Contractual Clauses; or
• another transfer mechanism permitted by data-protection law.

You may contact us for more information about the safeguards relevant to your information.

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, security, and dispute-resolution requirements.

Our general retention approach is:

• Orders, invoices, and accounting records: for the period required by Polish tax and accounting law and, where necessary, until related legal claims expire;
• Customer accounts and download records: while the account remains active and for a reasonable period afterward, unless longer retention is legally necessary;
• Marketing information: until you unsubscribe or withdraw consent, after which limited suppression information may be retained to honor your choice;
• Free-download delivery records: for as long as reasonably necessary to deliver the resource, demonstrate the request, manage the mailing relationship, and resolve delivery issues;
• Customer-service communications: for as long as necessary to resolve the matter and for a reasonable follow-up or legal-claims period;
• Consent records: for as long as needed to demonstrate compliance and until relevant claims or regulatory periods expire; and
• Cookie, analytics, and advertising information: according to the lifetime disclosed in the cookie settings and the relevant provider configuration.

We may keep anonymized or aggregated information that no longer identifies you.

We use reasonable technical and organizational safeguards designed to protect personal information. These may include access controls, reputable service providers, software updates, secure connections, backups, and payment processing through specialist providers.

No internet transmission or storage system is completely secure. If we become aware of a personal-data breach, we will investigate it and notify the relevant authority and affected individuals when required by law.

Depending on where you live and the law that applies, you may have the right to:

• request access to personal information we hold about you;
• request correction of inaccurate or incomplete information;
• request deletion of your information;
• request restriction of processing;
• object to processing based on legitimate interests or to direct marketing;
• withdraw consent at any time;
• receive certain information in a portable format and transmit it to another controller;
• opt out of targeted advertising or certain disclosures treated as a sale or sharing under applicable law;
• appeal a refusal of a privacy request where applicable law provides that right; and
• lodge a complaint with a data-protection authority.

These rights are subject to legal conditions and exceptions. For example, we may need to keep transaction information required for tax purposes even after a deletion request.

To exercise a right, email hello@bzubzi.com. Please describe your request and the email address or order involved. We may need to verify your identity before completing the request. An authorized agent may submit a request where applicable law permits it, but we may require proof of authority and identity verification.

We will not discriminate against you for exercising an applicable privacy right.

Some U.S. state privacy laws provide eligible residents with additional rights. Where such a law applies to Bzubzi Studio and your information, you may request access, correction, deletion, or portability and may opt out of targeted advertising or certain disclosures defined as a sale or sharing.

During the preceding 12 months, we may have collected the categories described in Section 3: identifiers and contact information; customer-record and transaction information; commercial information; internet or electronic-network activity; approximate location derived from an IP address; and inferences about interests based on Website or advertisement interactions. We collect and disclose these categories for the purposes described in Sections 4 and 8.

We do not sell personal information for money. If advertising technologies are enabled, disclosures of identifiers and online activity to advertising partners may be considered a sale, sharing, or targeted advertising under certain state laws. You may opt out through the cookie settings or by contacting hello@bzubzi.com.

We do not knowingly sell or share for targeted advertising the personal information of anyone under 16.

Bzubzi stories are created for children, but the Website, store, downloads, mailing list, and contact features are intended for parents, legal guardians, teachers, and other adults. We do not knowingly request or collect personal information directly from children under 13, or from a child below the minimum age established by applicable law.

Children should not place orders, join the mailing list, create accounts, or submit contact forms. If you believe that a child has provided personal information directly to us without appropriate authorization, contact hello@bzubzi.com. We will review the matter and delete the information where required.

We do not use personal information to make decisions based solely on automated processing that produce legal effects or similarly significant effects on you.

Security or payment providers may use automated systems to detect suspected fraud. Their privacy notices provide further information about their processing.

The Website may link to social-media platforms or other third-party websites. Clicking a link or interacting with an embedded third-party feature may allow that third party to collect information. Their processing is governed by their own privacy policies, not this Policy.

We may update this Policy when our Website, products, service providers, data practices, or legal obligations change. The revised Policy will be posted on the Website with a new “Last updated” date.

If a change materially affects how we use information already collected, we will provide additional notice or request consent when required by law.

Questions, privacy requests, and complaints may be sent to:

Bzubzi Studio
Email: hello@bzubzi.com
Address: ul. Serwituty 25, 02-233 Warsaw, Poland, European Union

We encourage you to contact us first so that we can try to resolve your concern.

If you are in the EEA, you also have the right to lodge a complaint with the supervisory authority in the country where you live or work, or where you believe an infringement occurred. The Polish supervisory authority is:

President of the Personal Data Protection Office
Urząd Ochrony Danych Osobowych (UODO)
ul. Stanisława Moniuszki 1A
00-014 Warsaw, Poland
Website: https://uodo.gov.pl/