This Privacy Policy describes how your personal information is collected, used, and shared when you visit or make a purchase from

I. General provisions 
  1. The Privacy policy sets out the principles for the processing and protection of website users’ personal data, pursuant to the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as: the “GDPR”).
  2. Your personal data controller is She is Lucid Sp. Z o.o. with its registered office in Warszawa at ul. Łowicka 58/10 entered in the Register of Entrepreneurs kept by the District Court under KRS number 0000717684 Tax Identification Number (NIP) 5213812345 (hereinafter referred to as: the Controller). 
II. Objectives and grounds for processing personal data 
  1. Providing personal data is voluntary, however, it is necessary for the Controller to provide services properly. 
  2. Your personal data will be processed for the following purposes: 
a) providing services by electronic means in the form of: setting up and supporting an account on the website, concluding and performing contracts for the sale of products ordered by the user in the Controller's online shop, the return and exchange of products and the handling of possible complaints (Article 6(1)(b) of the GDPR);
b) the fulfilment of the Administrator's legitimate interest (Article 6(1)(f) of the GDPR), i.e.
  • carrying out direct marketing activities - if consent is required, direct marketing is based on Article 6(1)(a) of the GDPR, 
  • for archival purposes,
  • for the purposes of evidence in the investigation or defence of claims related to the functioning of the service.

III. Categories of personal data 

Due to the necessity of proper provision of services, the Controller may process the following customer data:

a) for the purposes of creating and operating an account on the Controller's website: name, surname, e-mail address
b) for the purpose of placing an order in the Controller's shop, returning and  exchanging products and handling possible complaints: name, surname, address, e-mail address
c) for the purposes of direct marketing: name, surname, e-mail address, e-mail address
d) information about your device, such as your browser type, IP address, and other similar information. 


IV. Cookies 
  1. The Controller on its website, like other entities, uses so-called cookies, i.e. short text information saved on a computer, phone, tablet or other user's device. 
  2. Cookies have many functions on the website: 
a) security - cookies are used to authenticate users and therefore serve to protect the user's personal data against unauthorized access;
b) impact on the processes and efficiency of website use - cookies are used to make the website work smoothly and to make use of the functions available on it, which is possible, among other things, by remembering settings between subsequent visits to the website. They therefore allow you to navigate the website and the individual subpages efficiently;
c) session status - cookies often store information about how visitors use the website, e.g. which subpages they view most often. They also allow you to identify errors displayed on some subpages. Cookie files used to save “session status” help to improve services and increase the comfort of browsing.
d) maintaining the session status - if the client logs in to his panel, the cookies allow the session to be maintained. This means that you don't have to re-enter your login and password every time you go to another subpage, which makes the website comfortable to use;
e) creating statistics - cookies are used to analyze how users use the website (how many open the website, how long they stay on it, which content arouses most interest, etc.). Thanks to this you can constantly improve the website and adjust its operation to the users' preferences;
  1. However, if you do not wish to use cookies when browsing the website, you can change your browser settings. The settings can be changed at any time.
  2. Disabling or limiting the use of cookies may cause difficulties in using the website, e.g. in the form of having to log on to each subpage, longer loading period of the page, limitations in using the functionality. 


V. Right to withdraw consent
  1. If the processing of personal data is based on consent, you may withdraw your consent at any time. 
  2. In order to withdraw your consent, please contact us at the e-mail address: 


VI. Personal data recipients 

The Controller may transfer your personal data to other recipients entrusted with the processing of personal data in the name and on behalf of the Controller. Moreover, the Controller will make your personal data available to other recipients, provided that such obligation arises from legal regulations.


VII. Transfer of personal data to third countries 

Your personal data may be transferred to a third country or international organisation provided the entities having registered offices in such countries protect the personal data adequately.


VIII. Period of processing of personal data
  1. Your personal data will be processed for a maximum period of 10 years in order to establish, assert or defend any claims. 
  2. Your personal data will not be processed to the extent and at the time you object. 
  3. If you have consented to the processing of your data for marketing purposes, your data will be processed until your consent is withdrawn. 


IX. Data subjects’ rights 
  1. You shall have the following rights:
  1. obtain access to your personal data and a copy of the personal data subject to processing;
  2. obtain rectification of your inaccurate personal data;
  3. obtain the erasure of your personal data where the grounds provided for in Article 17 of the GDPR apply;
  4. obtain restriction of processing of your personal data where the grounds provided for in Article 18 of the GDPR apply;
  5. object to data processing in cases indicated in Article 21 of the GDPR;
  6. data portability where the processing is carried out by automated means.
  1. If you believe that your personal data is being processed unlawfully, you have the right to lodge a complaint with the supervisory authority (Data Protection Office, ul. Stawki 2, 00-193 Warszawa).


X. Contact with the Controller 

You can contact the Controller at your e-mail address in all matters relating to data protection:


XI. Final provisions 
  1. To the extent not covered by this Privacy Policy, the provisions of generally applicable law, in particular the provisions on personal data protection, shall apply. 
  2. This Privacy Policy shall be effective from 01.09.2020