Privacy

Last updated 11 August 2026

Who we are

Bobbincourt is a doll clothing studio based in Kraków, Poland. For the purposes of the General Data Protection Regulation (EU) 2016/679, Bobbincourt is the data controller for the personal data described below. Contact: [email protected].

What we collect

Only what you send us, and only when you send it:

• Your email address and the contents of your message, when you write in about an order, commission or fit question.
• Your name and delivery address, once an order is confirmed — we cannot post a parcel without them.
• Your doll's measurements, where you supply them, so that we can check fit and cut against them.

We do not take card details. Payment runs through bank transfer or PayPal; we never see or store a card number.

What we do not collect

• No analytics. No Google Analytics, no page-view tracker, no heatmap tool.
• No cookies set by us. There is nothing to consent to, so there is no consent banner.
• No accounts, no cart, no advertising network, no profiling.

Lawful basis

Correspondence and order handling are processed on the basis of performance of a contract (Art. 6(1)(b) GDPR), or steps taken at your request before entering one. Records kept for accounting are processed on the basis of a legal obligation (Art. 6(1)(c)).

Third parties involved in serving this site

Being straight about this matters more than claiming the site is self-contained, because it is not:

• Google Fonts — typefaces load from Google's servers, so your browser's request reaches them with your IP address and standard request headers.
• Pexels — photographs are served from the Pexels image CDN, which likewise sees your IP address.
• Our hosting provider — standard server logs may hold IP addresses and requested pages briefly, for operations and abuse prevention. We do not analyse them to profile visitors.
• Payment and postal providers — PayPal, our bank, and the carrier receive what they need to take payment and deliver a parcel.

Some of these providers operate outside the European Economic Area, which means the technical data above may be processed outside the EEA.

How long we keep things

Order records are kept for five years to meet Polish accounting requirements. General correspondence is kept for two years — long enough to pick up a thread if you order again for the same doll — and then deleted. Measurements are kept alongside the order they relate to.

Your rights

Under the GDPR you may request access to your personal data, rectification, erasure, restriction of processing, portability, or object to processing. Email [email protected] and we will respond within one month.

Changes

If this policy changes in a way that affects what we collect, the date at the top changes with it. We will not quietly rewrite it.