Privacy policy
Last updated: 31 October 2026
Controller
The controller of your personal data is Michał Głuszak, trading as Well Done Marketing, Os. Zielone 20, 33-100 Tarnów, Poland. VAT ID: PL9930312282. Email: [email protected].
What data we use and why
- Orders: name, email, phone number, shipping and billing address, items bought, the NFC music link you give us. We need them to sell and ship your order and to answer your questions (Art. 6(1)(b) GDPR).
- Accounting and tax: order and payment records, kept as required by Polish tax law (Art. 6(1)(c) GDPR).
- Payments: handled by Stripe. We receive the payment status and the last digits of your card, never the full card number.
- Order source: when you pay, the shop sends with the order where your first and latest visit came from (for example a Pinterest link or a search engine) and which page you landed on. We use it to understand which channels work (Art. 6(1)(f) GDPR, our legitimate interest in running the shop).
- Visit statistics: we count page views with Cloudflare Web Analytics, which does not use cookies, does not store your IP address and does not track you across sites (Art. 6(1)(f) GDPR).
- Back-in-stock alerts and bulk requests: your email, used only to answer that request and deleted afterwards (Art. 6(1)(b) or (a) GDPR).
Who receives your data
Only service providers that help us run the shop, under contracts that protect your data: Stripe (payments), Cloudflare (website hosting and email forwarding), Google (email), our email sending provider, Polish Post and, for orders outside Poland, the postal operator of your country (delivery), and our accountant. Some of these providers are based outside the European Economic Area (for example in the USA); transfers are protected by the European Commission's standard contractual clauses or the EU-US Data Privacy Framework.
How long we keep it
Order data: for 5 years from the end of the year in which the order was made (tax rules), and as long as needed to handle any claims. Alert and request emails: until the alert is sent or the request is answered.
Your rights
You can ask us for access to your data, correction, deletion, restriction of processing, data portability, and you can object to processing based on our legitimate interest. Write to [email protected]. You can also complain to the supervisory authority: in Poland the President of the Personal Data Protection Office (UODO, uodo.gov.pl), or the authority in your country.
Cookies and local storage
The shop does not use advertising or analytics cookies. It stores a few things in your browser's local storage: your cart, your choice of currency and units, and the source of your first and latest visit (see "Order source" above). You can delete them at any time by clearing your browser data for posterstage.com. Payment pages are run by Stripe, which uses its own cookies to process payments securely and prevent fraud. If we add analytics or advertising tools in the future, we will ask for your consent first and update this policy.