Privacy policy

Last updated: October 6, 2026

Protecting the privacy of Moody store (hereinafter: "Store", "Moody") users is extremely important to us. Below we explain who processes personal data of Store users, for what purpose, on what legal basis, to whom it may be disclosed, and for how long.

Who is the data controller?

The data controller is Marharyta Prybylova, conducting a sole proprietorship business under the name Moody Marharyta Prybylova, registered with the Central Register and Information on Economic Activity (CEIDG), NIP (Tax ID): 6762714327, REGON (Statistical ID): 544185544, correspondence address: ul. Mogilska 40/35, 31-546 Kraków, Poland.

The controller has not appointed a Data Protection Officer (DPO).

How to contact us?

For details regarding the processing of personal data, please contact us by email at: enjoy@moodyeurope.com or in writing at: ul. Mogilska 40/35, 31-546 Kraków, Poland.

1. Cookies

1.1 What are "cookies"?

A cookie is a small file saved on your device while using the Store. It helps, among other things, remember your actions and preferences and analyze traffic on the site.

1.2 What cookies do we use and on what basis?

  • Necessary cookies — enable the basic operation of the Store, which runs on the Shopify platform: logging in, navigation, cart handling, and order completion. Without them, using the Store is not possible. In accordance with Article 399 of the Polish Electronic Communications Law, this type of cookie does not require your separate consent — it is necessary to provide the service you have requested.
  • Functional cookies — remember your preferences (e.g., selected language, currency, product display settings). Installed on the basis of your consent, unless they are strictly necessary for the function you have requested.
  • Statistical and analytical cookies — we use Google Analytics 4 to analyze website traffic and user behavior. These files are installed only after obtaining your prior consent expressed in the cookie banner.
  • Marketing cookies — we may use Google tags (via the Google & YouTube app) to measure the effectiveness of our product listings and ads on Google. These files are installed only after obtaining your prior consent expressed in the cookie banner. We do not currently use Meta Ads / Meta Pixel. If we launch advertising campaigns using such technologies in the future (which may involve sharing data with Meta for advertising and measurement purposes), we will do so only after obtaining your prior consent, and this policy will be updated.

1.3 Managing cookie consent

On your first visit to the Store, you will see a cookie banner where you can:

  • accept all cookies,
  • reject optional cookies (keeping only necessary ones),
  • manage your preferences by category.

Cookies other than necessary ones are not installed or read before you make a choice. You can change your decision at any time in the cookie settings in the Store or in your browser settings.

2. Personal data

2.1 What data do we collect?

For customers placing orders, we collect:

  • first and last name, email address, delivery address, billing address, phone number,
  • order-related data — purchased products, order value, purchase history.

Payment card / bank transfer data is handled directly by our payment operator and is not stored by Moody.

If you sign up for the newsletter we collect: email address, first name.
If you leave a product review, we collect: your first name and last name initial, email address, the purchased product, and the content and rating of your review.

We additionally process:

  • correspondence between you and Moody (email, contact form, social media) — stored for the period necessary to handle your inquiry, and subsequently until any claims related to this correspondence become time-barred,
  • data related to your activity on the website.

Providing data is voluntary, but failure to do so may prevent us from fulfilling your order or providing a service.
Note regarding the nature of our product range. Moody sells products related to intimate wellness and pleasure. Some order-related information may be of a particularly sensitive nature from a privacy standpoint. For this reason, we limit access to this information to those employees involved in fulfilling orders and customer service, use discreet packaging and a discreet transaction description on bank statements ("SP Moody"), and do not use information about purchased products for marketing purposes in any way that would require an additional legal basis or consent, without obtaining it.

2.2 For what purpose and on what legal basis do we process data?

  • Order fulfillment, payment and delivery processing, handling complaints and returns — necessary for the performance of the sales contract (Art. 6(1)(b) GDPR).
  • Fulfilling tax and accounting obligations — a legal obligation incumbent on the controller (Art. 6(1)(c) GDPR).
  • Ensuring the security of the Store's systems, preventing fraud, pursuing and defending against claims, internal analysis and improvement of the Store — the controller's legitimate interest (Art. 6(1)(f) GDPR).
  • Handling inquiries submitted via the contact form or email — necessary to take action at your request prior to concluding a contract or in the course of its performance (Art. 6(1)(b) GDPR), and otherwise, the controller's legitimate interest (Art. 6(1)(f) GDPR).
  • Sending review requests after a purchase, collecting and publishing product reviews — the controller's legitimate interest in obtaining feedback and improving the Store (Art. 6(1)(f) GDPR). Where a review request includes a discount offer, we send it only on the basis of your consent to receive marketing communication (Art. 6(1)(a) GDPR). You can opt out of review requests at any time using the link in the email. Your review is published only with your first name and the initial of your last name. Reviews submitted in exchange for a discount are marked accordingly.
  • Direct marketing (newsletter, marketing communication via email) — exclusively on the basis of your freely given consent (Art. 6(1)(a) GDPR), in accordance with the requirements of the Polish Electronic Communications Law regarding prior consent for such communication. You may withdraw your consent at any time — this does not affect the lawfulness of processing carried out before its withdrawal.
  • Statistical analysis and marketing using cookies (Google Analytics, Google tags, Meta Ads) — solely on the basis of your consent expressed in the cookie banner (Art. 6(1)(a) GDPR). Marketing using Meta Ads is not currently active (see section 1.2).

2.3 Who do we share personal data with?

Data may only be shared to the extent necessary to provide the service:

  • Shopify — the Store's hosting platform and the delivery of transactional messages (order confirmation, shipping notification, invoice/proof of purchase), including Shopify's own tools used in the Store (Shopify Flow, Shopify Messaging, Search & Discovery, Translate & Adapt, Bundles),
  • Shopify Payments — payment processing,
  • AMP – Back in Stock (Shopify app) — sends a notification when a selected product is back in stock,
  • Pointly – Pickup Points (Shopify app) — handles the selection of a parcel pickup point (e.g., InPost Paczkomat, Orlen Paczka, DPD Pickup points),
  • Yotpo (Yotpo Ltd., Shopify app) — sends review request emails after purchase, collects and stores product reviews (name, email address, purchased products, review content),
  • Google Ireland Limited (Google Analytics) — website traffic and analytics,
  • Google Ireland Limited (Google Merchant Center / Google & YouTube) — displaying our products in Google Search and Google Shopping and, subject to your consent, measuring the effectiveness of our listings and ads,
  • Google Ireland Limited (Google Workspace) — email hosting for correspondence with customers,
  • DPD — courier delivery,
  • InPost — courier delivery and Paczkomat (parcel locker) delivery,
    our accounting office — for the purpose of issuing sales documents,
    public authorities — only where required by law.

We do not sell personal data to third parties.

2.4 Transfers of data outside the European Economic Area (EEA)

Some of our service providers (e.g., Shopify and the IT service providers within its infrastructure, Google, and Yotpo) may process personal data outside the EEA. In such cases, we apply the mechanisms provided for under the GDPR to ensure an adequate level of data protection — in particular, European Commission adequacy decisions (e.g., for Israel, where Yotpo is based, or for providers certified under the EU-US Data Privacy Framework) or Standard Contractual Clauses (SCCs), depending on the mechanism used by the given provider. For detailed information on the safeguards applied by a specific provider, please contact us at the address given in the "How to contact us?" section.

2.5 Relationship with Shopify

The Store operates on the Shopify platform, which hosts the Store and processes personal data related to your use of it on our behalf. In addition, in order to protect and develop our business, we use Shopify's extended feature Shopify Network Intelligence, which uses data collected from your interactions with our Store in combination with data from other stores using Shopify, including for purposes related to payment security, market analysis, purchase personalization, and ad targeting for marketing purposes. In relation to these extended features, Shopify acts as an independent data controller and is solely responsible for fulfilling your rights in this respect.

Our products are also available in the Shop app operated by Shopify. If you purchase through the Shop app, Shopify processes your data as an independent controller in accordance with its own privacy policy.

More information can be found in Shopify's Consumer Privacy Policy, and you can use the Shopify Privacy Portal to exercise your rights regarding data processed directly by Shopify.

3. Data protection and your rights

We apply appropriate technical and organizational measures to protect your data, including encrypted connections (SSL/TLS) and the security measures provided by the Shopify platform. No security measures are perfect or impenetrable, however, and we cannot guarantee "perfect security" of data transmitted to us — we recommend that you do not use unsecure channels to send us confidential information.

We do not make decisions concerning users that produce legal effects or similarly significantly affect them based solely on automated processing, including profiling.

Under the GDPR, you have the following rights:

  • the right of access to your data,
  • the right to rectification of your data,
  • the right to erasure of your data,
  • the right to restriction of processing,
  • the right to data portability,
  • the right to object to processing based on the controller's legitimate interest,
  • the right to object at any time to the processing of your data for direct marketing purposes,
  • the right not to be subject to a decision based solely on automated processing, including profiling,
  • the right to withdraw your consent at any time where processing is based on consent — without affecting the lawfulness of processing carried out before its withdrawal.

You have the right to lodge a complaint with the supervisory authority — the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych) (ul. Stawki 2, 00-193 Warsaw, Poland). Before doing so, you may also appeal directly to us regarding our decision on your request, by writing to the address given in the "How to contact us?" section.

We may need to verify your identity before processing your request, to the extent permitted and required by applicable law.

4. How long do we keep your data?

  • Data related to order fulfillment is kept for the period required by tax and accounting regulations (as a general rule, 5 years, counted from the end of the calendar year in which the transaction took place), and thereafter for the period necessary to defend against any potential claims, in accordance with the limitation periods set out in the Polish Civil Code.
  • Data processed for marketing purposes (newsletter) is kept until consent is withdrawn or an objection is raised.
  • Product reviews are kept for as long as they are published in the Store, or until you request their removal.
  • Data processed on the basis of consent to analytical/marketing cookies is kept until consent is withdrawn.

The actual retention period may vary depending on the category of data and the purpose of its processing.

5. Children's data

The Store is intended exclusively for adults (18+). We do not knowingly collect personal data from persons under 18. If you are the parent or guardian of a child who has provided us with their personal data, please contact us at the address given in the "How to contact us?" section so that we can delete it.

6. Links to other websites

Our website may contain links to third-party websites (e.g., Instagram). We are not responsible for the privacy practices in effect on those websites.

7. Managing your data

  • You may withdraw your consent to the processing of your data for marketing purposes, or object to such processing, at any time by writing to: enjoy@moodyeurope.com. This does not affect the lawfulness of processing carried out before the withdrawal of consent.
  • You may unsubscribe from the newsletter or review requests at any time by clicking the "unsubscribe" link in any message. Unsubscribing does not affect transactional messages related to your order (e.g., order confirmation, shipping notification, invoice) — we will continue to send these, as they are necessary for the performance of our contract with you.
  • If you believe that the data we hold about you is incorrect or incomplete, please let us know — we will correct it promptly.
  • You may request the removal of your published review at any time by writing to: enjoy@moodyeurope.com.

8. Changes to this Privacy Policy

This Privacy Policy may be updated from time to time, in particular in connection with changes in the law or the introduction of new tools/features in the Store (e.g., the launch of new advertising tools such as Meta Ads — see section 1.2). The current version of the Policy is always available on the Store's website, and the date of the last update is provided above.