Privacy Policy & GDPR

This Privacy Policy defines the rules for storing and accessing data on User Devices to provide electronic services by USLures, as well as the principles for collecting and processing Users' personal data provided voluntarily through the Service tools.

This Privacy Policy is an integral part of the Terms and Conditions, which defines the general rights and obligations of Users.

SECTION 1. DEFINITIONS

Service – the "USLures" online store operating at https://uslures.com.

External Service – websites of partners, service providers, or contractors cooperating with USLures.

Administrator (USLures) – the company "Andrii Zaiats" (office: 14-100 Ostroda, ul. Wl. Jagiełły 5A/25, Poland, Tax ID: PL7412168095, REGON: 527655954).

User – any individual for whom USLures provides electronic services through the Service.

Device – an electronic device with software through which the User gains access to the Service.

Cookies – text data collected in the form of files placed on the User's Device.

GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data.

Personal Data – information about an identified or identifiable natural person.

Processing – any operation or set of operations performed on personal data, such as collection, recording, storage, adaptation, or modification.

SECTION 2. DATA PROTECTION OFFICER

Based on Article 37 of the GDPR, the Administrator has not appointed a Data Protection Officer. For all matters regarding the processing of data, including personal data, please contact the Administrator directly at [email protected].

SECTION 3. TYPES OF COOKIES

Internal Cookies – files placed and read from the User's Device by the Service's IT system.

External Cookies – files placed and read from the User's Device by IT systems of External Services. These scripts are consciously placed in the Service through services installed by the Administrator.

Session Cookies – files placed and read from the User's Device during a single session of the Device. They are deleted after the session ends.

Persistent Cookies – files placed and read from the User's Device until they are manually deleted. They are not automatically removed after the session unless the User's device configuration is set to delete cookies upon session termination.

SECTION 4. DATA STORAGE SECURITY

Cookie mechanisms – The mechanisms for storing, reading, and exchanging data between Cookies and the Service are built into web browsers and do not allow the retrieval of other data from the User's Device or data from other websites visited by the User. The transmission of viruses or malicious software via this mechanism is practically impossible.

Internal Cookies – Cookies used by the Administrator are safe for Users' Devices and do not contain scripts or information that could threaten the security of personal data or the Device itself.

External Cookies – The Administrator makes every effort to verify and select reputable partners (such as Google or Meta) to ensure User safety. However, the Administrator does not have full control over the content of cookies from external partners and is not responsible for their security beyond the scope permitted by law.

SECTION 5. PURPOSES OF COOKIE USAGE

Improving and facilitating access to the Service.

Personalization of the Service for Users.

Enabling login functionality.

Marketing and Remarketing on external platforms.

Ad serving services.

Maintaining statistics regarding visits, device types, and user behavior.

Providing multimedia and social media features.

SECTION 6. PURPOSES OF PERSONAL DATA PROCESSING

Personal data voluntarily provided by Users are processed for one of the following purposes:

Execution of electronic services: account registration and maintenance, order processing, and providing features related to the Customer's activity in the Service.

Communication between USLures and the User regarding the Service, order status, and data protection matters.

Ensuring the legally justified interest of USLures, such as handling inquiries or defending against potential claims.

Data about Users collected anonymously and automatically are processed for the following purposes:

Maintaining traffic and usage statistics.

Remarketing and serving advertisements tailored to User preferences.

Ensuring the proper technical operation and security of the Service.

SECTION 7. EXTERNAL SERVICE COOKIES

USLures uses JavaScript and web components from partners who may place their own cookies on the User's Device. You can manage cookie permissions in your browser settings. Below is a list of partners or services implemented in the Service that may use cookies:

Multimedia Services: YouTube (by Google).

Social and Integration Services: Facebook (by Meta), X (formerly Twitter), and Instagram.

Advertising and Affiliate Networks: Google Adsense.

Statistics and Analytics: Google Analytics.

Services provided by third parties are beyond the direct control of USLures. These entities may change their terms of service, privacy policies, or the purpose of cookie usage at any time. We recommend reviewing the individual policies of these providers.

SECTION 8. TYPES OF COLLECTED DATA

The Service collects both anonymous data automatically and personal data provided voluntarily by Users during registration or order placement.

Anonymous data collected automatically: IP address, browser type, screen resolution, approximate location, pages visited within the service, time spent on specific pages, type of operating system, referring URL, browser language, and internet connection speed.

Data collected during registration and orders: Full name, login/username, e-mail address, shipping and billing address, phone number, and IP address (recorded automatically for security).

Some non-identifying data may be stored in cookies or transferred to statistical service providers to improve the browsing experience.

SECTION 9. DATA ACCESS BY THIRD PARTIES

As a rule, USLures is the sole recipient of personal data provided by Users. Data is not transferred or resold to third parties for marketing purposes.

Access to data (usually based on a Data Processing Agreement) may be granted to entities responsible for maintaining the infrastructure and services necessary to operate the store, such as:

Hosting companies providing server infrastructure to USLures.

Payment processing companies (e.g., PayPal, Stripe, PayU) that handle online transactions for goods purchased in the Service.

Shipping and courier companies (e.g., Poczta Polska, UPS, DHL) for the purpose of delivering ordered goods to the Customer.

SECTION 10. DATA PROCESSING METHODS

Personal data provided voluntarily by Users: These data will not be transferred outside the European Union unless specifically required for order fulfillment (e.g., international shipping) or if the User chooses to publish data publicly via comments or posts. Personal data are not used for automated decision-making or profiling that produces legal effects.

Anonymous data: These data may be transferred outside the European Union as part of our use of global analytical and advertising tools (e.g., Google Analytics). These transfers are protected by the standard contractual clauses and privacy frameworks of the respective providers.

SECTION 11. LEGAL BASIS FOR PROCESSING PERSONAL DATA

USLures collects and processes User data based on the following regulations:

Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR): Article 6(1)(a) – the individual has given consent to the processing of their data; Article 6(1)(b) – processing is necessary for the performance of a contract or to take steps at the request of the individual prior to entering into a contract; Article 6(1)(f) – processing is necessary for the purposes of the legitimate interests pursued by the Administrator or a third party.

National laws of the Republic of Poland, including the Act of 10 May 2018 on the Protection of Personal Data and the Telecommunications Law of 16 July 2004.

SECTION 12. DATA RETENTION PERIOD

Personal data provided voluntarily by Users: These data are generally stored only for the duration of the service provided by USLures. Data is typically deleted or anonymized within 30 days after the termination of services (e.g., account deletion or unsubscribing from a newsletter).

Exceptions for legal interests: Data may be retained for a longer period if necessary to secure the legitimate interests of USLures, such as defending against legal claims. In such cases, data will be stored for no longer than 3 years from the date the User requested deletion, particularly in cases of suspected Terms and Conditions violations.

Anonymous automatic data: Statistical data that does not constitute personal data is stored indefinitely for the purpose of maintaining service history and analytics.

SECTION 13. USER RIGHTS REGARDING PERSONAL DATA

Right of access: Users have the right to access their personal data via the user panel after logging in or by contacting USLures.

Right to rectification: Users have the right to request the immediate correction of incorrect data or completion of incomplete data via the user panel or by contacting USLures.

Right to erasure (Right to be forgotten): Users may request the deletion of their data. For user accounts, this involves anonymizing identifying information. USLures reserves the right to delay deletion if it is necessary to protect legitimate interests (e.g., existing disputes or correspondence history).

Right to restriction of processing: Users may request the restriction of processing in cases specified in Article 18 of the GDPR, such as when the accuracy of data is contested.

Right to data portability: Users may request their data in a structured, commonly used, machine-readable format.

Right to object: Users have the right to object to the processing of their data based on Article 21 of the GDPR.

Right to lodge a complaint: Users have the right to lodge a complaint with the relevant supervisory authority responsible for personal data protection in their country of residence or in Poland (UODO).

SECTION 14. CONTACT DETAILS

You may contact USLures regarding data protection via: Postal address – Andrii Zaiats, ul. Wł. Jagiełły 5A/25, 14-100 Ostróda, Poland; E-mail address – [email protected]; or through the contact form available at https://uslures.com/contact-us/.

SECTION 15. SERVICE REQUIREMENTS

Restricting or disabling cookies on your Device may lead to the malfunction of certain features within the Service. USLures bears no responsibility for improperly functioning features if the User has limited the ability to save and read cookie files.

SECTION 16. EXTERNAL LINKS

The Service may contain links to external websites not affiliated with USLures. These links, and the content or files they lead to, may pose a security risk to your Device or data. USLures is not responsible for the content or safety of third-party websites.

SECTION 17. CHANGES TO THE PRIVACY POLICY

USLures reserves the right to modify this Privacy Policy regarding anonymous data or cookie usage at any time without prior notice. For changes regarding personal data processing, registered Customers will be notified via e-mail at least 7 days before the changes take effect. Continued use of the Service constitutes acceptance of the updated Policy.

GDPR INFORMATION CLAUSE SUMMARY

The data controller is Andrii Zaiats, 14-100 Ostróda, Poland. We process your data primarily to fulfill orders and maintain your account. Your rights include access, correction, and deletion of your data. For full details on how we handle your information and protect your privacy, please refer to the sections of the Privacy Policy above.