Last updated: September 2026
This Privacy Policy explains how trevershop.com collects, uses, stores, shares, and protects personal data of users and customers.
The website trevershop.com is operated by:
Distributed Growth Sp. z o.o.
ul. Poligonowa 15F
20-817 Lublin
Poland
Email: info@trevershop.com
For the purposes of applicable data protection laws, including Regulation (EU) 2016/679, known as the General Data Protection Regulation, Distributed Growth Sp. z o.o. is the Data Controller of the personal data processed through the Website.
By using the Website, placing an order, contacting us, or interacting with our services, users acknowledge that their personal data may be processed as described in this Privacy Policy.
We may collect and process the following categories of personal data:
When a user places an order, contacts us, submits a form, or communicates with us, we may collect:
When a customer places an order on trevershop.com, we may process:
When a user visits the Website, we may collect certain technical information, including:
Some of this information may be collected through cookies or similar technologies. More information is available in our Cookie Policy.
Where the user has given consent, we may process data for analytics, advertising, remarketing, and campaign optimisation purposes.
This may include:
We process personal data for the following purposes:
We process personal data to:
We process personal data to:
We process personal data to comply with legal obligations, including:
We process technical data to:
Where required consent has been given, we may process data to:
Where the user has given consent, we may process data to:
Marketing and remarketing may involve tools such as Google Ads, Google Analytics, Google Tag Manager, Meta Pixel, Facebook Ads, Instagram Ads, TikTok Pixel, or other advertising platforms, depending on the Website configuration.
We process personal data only where we have a valid legal basis.
Depending on the situation, the legal basis may be:
We process personal data when necessary to process, confirm, deliver, manage, or fulfil an order placed by the customer.
We process personal data when necessary to comply with legal, accounting, tax, consumer protection, or regulatory obligations.
We may process personal data where necessary for our legitimate interests, provided that such interests are not overridden by the rights and freedoms of the user.
Legitimate interests may include:
We process personal data based on consent for purposes such as:
The user may withdraw consent at any time.
Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
Where Cash on Delivery is selected or available, the customer’s personal data may be shared with courier and logistics providers for the purpose of delivering the order and collecting payment upon delivery.
The data shared with courier partners may include:
This processing is necessary to fulfil the order and deliver the product to the customer.
We may share personal data only where necessary and in accordance with applicable law.
Recipients may include:
We do not sell personal data.
Third-party service providers process personal data only for the purposes described in this Privacy Policy and according to applicable data protection requirements.
The Website uses cookies and similar technologies.
Cookies may be used for:
Strictly necessary cookies are used to operate the Website and do not require prior consent.
Analytics, marketing, profiling, and remarketing cookies are used only where the user has given consent, where required by law.
More detailed information is available in our Cookie Policy.
We may send marketing communications only where we have a valid legal basis, such as the user’s consent or another basis permitted by applicable law.
Users may unsubscribe from marketing communications at any time by using the unsubscribe link, where available, or by contacting:
Some service providers used by the Website may process personal data outside the European Economic Area.
Where personal data is transferred outside the EEA, we apply appropriate safeguards required by the GDPR, such as:
We retain personal data only for as long as necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by law.
Retention periods may vary depending on the type of data and the purpose of processing.
In general:
When personal data is no longer needed, it will be deleted, anonymised, or securely archived according to applicable law.
We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, disclosure, or destruction.
These measures may include:
However, no online system can be guaranteed to be completely secure.
Under the GDPR, users may have the following rights:
To exercise these rights, users may contact us at:
We may need to verify the identity of the person making the request before responding.
We will respond to valid requests within the timeframe required by applicable law.
Users have the right to object at any time to the processing of their personal data for direct marketing purposes.
If a user objects to direct marketing, we will stop processing their personal data for that purpose.
The Website may use limited profiling for advertising, analytics, remarketing, and campaign optimisation purposes, where consent is required and has been provided.
We do not use solely automated decision-making that produces legal effects or similarly significant effects on users.
The Website is not intended for children.
We do not knowingly collect personal data from children. If we become aware that personal data of a child has been collected without appropriate legal basis, we will take reasonable steps to delete such data.
The Website may contain links to third-party websites or services.
We are not responsible for the privacy practices, content, or security of third-party websites.
Users should read the privacy policies of third-party websites before providing any personal data.
Users have the right to lodge a complaint with a competent data protection authority.
For Poland, the competent supervisory authority is:
President of the Personal Data Protection Office
Urząd Ochrony Danych Osobowych — UODO
Warsaw, Poland
Users may also contact the supervisory authority in their country of residence, where applicable.
We may update this Privacy Policy from time to time to reflect changes in legal requirements, business operations, Website functionality, or third-party tools.
The latest version will always be available on trevershop.com.
For questions about this Privacy Policy, personal data processing, or to exercise privacy rights, contact:
Distributed Growth Sp. z o.o.
ul. Poligonowa 15F
20-817 Lublin
Poland
Email: info@trevershop.com