Privacy policy
Last updated: 21.05.2026
This Privacy Policy describes how Webgie sp. z o.o., operating under the Lash Crash brand (“Website” and any grammatical form of the personal pronoun “we”), collects, uses and discloses the personal information of a User who visits the Website, uses our services through the Website, makes a purchase on the Website at lashcrash.com (“Website”), or otherwise communicates with us in connection with the Website (collectively, the “Services”). For the purposes of this Privacy Policy, the term “User” means a user of the Services, regardless of whether they are a customer, a website visitor or another natural person whose information we collect in accordance with this Privacy Policy.
The controller of your personal data is Webgie sp. z o.o., entered in the Register of Entrepreneurs of the National Court Register, maintained by the District Court for Kraków-Śródmieście in Kraków, 11th Commercial Division of the National Court Register, NIP 6793366778, REGON 544819753, KRS 0001241904.
Please read this Privacy Policy carefully.
Changes to this Privacy Policy
We may update this Privacy Policy, for example, to reflect changes in our practices or for other operational, legal, or regulatory reasons. Any updated Privacy Policy will be posted on the Website, and the “Last Updated” date of the Policy will be revised accordingly. We will also take any other steps required under applicable law.
Collection and Use of Personal Information
To provide our Services, we collect personal information about Users from various sources as described below. The information we collect and use depends on how a User interacts with us.
In addition to the specific uses described below, we may use personal information to communicate with the User, provide or improve our Services, comply with applicable legal obligations, enforce our Terms of Service, and protect or defend our Services, our rights, or the rights of our Users or others.
Personal Information We Collect
The types of personal information we obtain about a User depend on how the User interacts with the Website and uses our Services. “Personal information” refers to information that identifies, relates to, or describes a User, or that could be linked to them. The sections below describe the categories and specific types of personal information we collect.
Information Collected Directly from Users
Information provided directly to us by Users through our Services may include:
- Contact information: including name, address, phone number, and email address.
- Order information: including name, billing address, shipping address, payment confirmation, email, and phone number.
- Account information: including username, password, security questions, and other information used for account security purposes.
- Customer service information: including any information Users provide in communications with us, such as messages sent through the Services.
Certain features of the Services may require Users to provide specific information directly. Users are not required to provide such information but may be unable to use or access these features without it.
User Data Collection
We may also automatically collect certain information about a User’s interactions with the Services (“User Data”) using cookies, pixels, and similar technologies (“Cookies”). User Data may include information about the use of and access to the Website and User accounts, including device information, browser information, network connection information, IP address, and other information about the User’s interactions with the Services.
Information Obtained from Third Parties
We may also obtain information about Users from third parties, including providers and service partners who may collect information on our behalf, such as:
- Companies operating the Website and Services, e.g., Shopify.
- Payment processors who collect payment information (e.g., bank account, credit/debit card, billing address) to process User payments for orders and provide products or services requested by the User to fulfill our contractual obligations.
- When Users visit the Website, open or click our emails, or interact with the Services or our advertisements, certain information may be automatically collected by us or third parties using online tracking technologies, such as pixels, web beacons, SDKs, third-party libraries, and cookies.
Any information obtained from third parties will be processed in accordance with this Privacy Policy. See also the section below titled Third-Party Websites and Links.
Use of Personal Information
- Providing products and Services: We use Users’ personal information to provide Services, fulfill our contract with the User, process payments, fulfill orders, send notifications regarding account activity, purchases, returns, exchanges, or other transactions, create and maintain User accounts, manage accounts, facilitate shipping, returns, and exchanges, and provide other account-related features.
- Marketing and advertising: We may use personal information for marketing and promotional purposes, including sending marketing messages, advertisements, and promotions via email, SMS, or postal mail, and displaying advertisements for products or services. This may include using personal information to better tailor Services and advertisements on the Website and other websites. For Users in the European Economic Area (EEA), the legal basis for these activities is our legitimate interest in selling our products under Article 6(1)(f) GDPR.
- Security and fraud prevention: We use personal information to detect, investigate, or take action regarding potentially fraudulent, unlawful, or malicious activity. Users are responsible for safeguarding their account credentials if they register for an account. We strongly recommend not sharing login credentials with anyone. If a User suspects their account has been compromised, they should contact us immediately. For Users in the EEA, the legal basis is our legitimate interest in securing the Website and protecting Users and other customers under Article 6(1)(f) GDPR.
- Communication and Service Improvement: We use personal information to provide appropriate support and improve our Services. Our legitimate interest lies in responding to User needs, providing efficient services, and maintaining business relationships under Article 6(1)(f) GDPR.
Cookies
Our Website, like many others, uses cookies. For more information about cookies used in connection with Shopify, see https://www.shopify.com/legal/cookies. Cookies help us provide and improve the Website and Services (including remembering User actions and preferences), conduct analytics, and better understand User interactions with the Services (our legitimate interest in managing and optimizing Services). Third parties may also use cookies on the Website to better tailor services, products, and advertising on the Website and other websites.
Most browsers automatically accept cookies by default, but Users can configure their browsers to delete or reject cookies. Disabling or removing cookies may negatively impact the User experience and cause certain Services, including specific features and general functionality, to operate improperly or become unavailable. Blocking cookies may also not fully prevent information sharing with third parties, such as advertising partners.
Disclosure of Personal Information
In certain circumstances, we may disclose Users’ personal information to third parties to fulfill contractual obligations, comply with the law, or for other reasons as permitted by this Privacy Policy. These circumstances may include sharing personal information with:
- Vendors or other third parties providing services on our behalf (e.g., IT management, payment processing, data analytics, customer service, cloud storage, fulfillment, and shipping).
- Business and marketing partners to deliver services and display advertisements. These partners will use User information according to their own privacy policies.
- When the User directs or consents to the disclosure of certain personal information, e.g., for shipping products or using social media widgets or login integrations with consent.
- Our affiliates or within our corporate group in our legitimate business interest.
- In connection with business events, such as mergers or insolvency, to comply with legal obligations (e.g., court orders, search warrants), enforce Terms of Service, and protect or defend our Services, rights, or the rights of Users or others.
The categories of personal and sensitive personal information disclosed for the purposes above are outlined in the sections How We Collect and Use Personal Information and How We Disclose Personal Information.
| Category | Recipients |
|---|---|
|
|
We do not use or disclose sensitive personal information without User consent or to infer characteristics about Users.
Third-Party Websites and Links
The Website may contain links to websites or platforms operated by third parties. If Users access non-affiliate/associated websites via these links, they should review the respective privacy, security, and other policies. We do not guarantee or assume responsibility for privacy or security of such websites, including accuracy, completeness, or reliability of information. Information posted by Users in public or semi-public areas, including on third-party social media platforms, may also be visible to others without restrictions. The inclusion of such links does not imply endorsement of content or operators unless explicitly stated.
Children’s Data
The Services are not intended for children, and we do not knowingly collect personal information from children. If a parent or guardian provides a child’s personal information, they may contact us to request deletion.
As of the effective date of this Privacy Policy, we have no actual knowledge that we “share” or “sell” (as defined under applicable law) personal information of persons under 16.
Security and Retention of User Information
No security measures are perfect or impenetrable, and we cannot guarantee “perfect security.” Information transmitted to us may not be secure. We recommend avoiding submission of confidential or sensitive information via unsecured channels.
The retention period for personal information depends on various factors, such as whether the information is needed to maintain User accounts, provide Services, meet legal obligations, resolve disputes, or fulfill contractual or policy requirements.
User Rights
Depending on the User’s location, they may have some or all of the rights listed below. These rights are not absolute and may apply only in certain circumstances, and we may deny requests where permitted by law:
- Right to know / access personal information: Request access to personal information we hold, including how it is used and shared.
- Right to delete personal information: Request deletion of personal information we store.
- Right to correct personal information: Request correction of inaccurate personal information.
- Right to data portability: Receive a copy of personal information and request transfer to a third party, subject to conditions.
- Right to restrict processing: Request cessation or limitation of personal data processing.
- Right to withdraw consent: Withdraw consent to personal data processing where applicable.
- Right to appeal: If a request is denied, Users may appeal by responding to our denial.
- Managing communication preferences: Users may unsubscribe from promotional emails at any time using the opt-out option; non-promotional emails (account/order notifications) may still be sent.
Users can exercise these rights via the Website or by contacting us using the information below. We will not discriminate against Users for exercising their rights. Verification of identity may be required. Users may appoint an authorized representative to submit requests on their behalf, with proof of authority and identity verification required. Requests will be responded to timely in accordance with applicable law.
Complaints
For complaints regarding our processing of personal information, please contact us using the information below. If unsatisfied with our response, Users may have the right to appeal or submit a complaint to the relevant supervisory authority. A list of EEA supervisory authorities can be found here.
International Users
We may transfer, store, and process Users’ personal information outside their country of residence. Personal information may also be processed by employees, external service providers, and partners in these countries.
If transferring personal information outside Europe, we rely on recognized data transfer mechanisms, such as Standard Contractual Clauses approved by the European Commission or equivalent documents accepted by the relevant authority in the United Kingdom, unless the country provides an adequate level of protection.
Contact
If you have questions about our privacy practices or this Privacy Policy, or would like to exercise your rights, please email info@lashcrash.com.
Webgie sp. z o.o.
- Registered address: ul. Kordiana 17/6, 30-653 Kraków
- Phone: +48 732 220 444
- Email: info@lashcrash.com
- NIP: PL6793366778
- REGON: 544819753
- KRS: 0001241904