Privacy Policy

Last updated: 01/08/2026

This Privacy Policy explains how Nereïde collects, uses, stores, and protects your personal data when you visit www.nereidebeachwear.com, place an order, submit a color profile, contact us, or subscribe to our newsletter.

1. Who We Are

The controller responsible for your personal data is:

Bibianna Szczepanczyk, trading as Nereïde
Polish sole proprietorship — jednoosobowa działalność gospodarcza
Registered in the Central Register and Information on Economic Activity of the Republic of Poland — CEIDG

Registered business address: ul. Kaziemierza Odnowiciela 7/1, 43-200 Pszczyna, PL
NIP: 6381518457
REGON: 544767625
Email: contact@nereidebeachwear.com

In this Privacy Policy, “Nereïde,” “we,” “us,” and “our” refer to the business identified above.

2. Personal Data We Collect

Depending on how you interact with us, we may collect the following categories of personal data:

Information you provide directly

This may include:

  • your name;

  • email address and telephone number;

  • billing and shipping addresses;

  • order number and purchase information;

  • size, color preferences, product selections, and personalization requests;

  • messages, questions, feedback, or customer service correspondence;

  • photographs submitted for personalized color analysis;

  • notes you voluntarily provide about your natural coloring, appearance, or preferences;

  • newsletter subscription information;

  • any other information you choose to provide to us.

Please do not include medical information or other sensitive information in the notes accompanying your color profile unless it is strictly necessary.

Order and payment information

When you make a purchase, we collect the information necessary to process and manage your order. Payments are handled by third-party payment providers made available through our ecommerce platform.

We do not normally receive or store your complete payment card number. Payment information is processed directly by the relevant payment provider in accordance with its own privacy policy.

Information collected automatically

When you visit our website, certain information may be collected automatically, including:

  • IP address;

  • browser and device type;

  • operating system;

  • pages viewed and actions taken;

  • referring website;

  • approximate location based on IP address;

  • date and time of visits;

  • cookie identifiers and similar technical information.

Some of this information is required for the website to function securely. Analytics or marketing technologies are used only where permitted by applicable law and, where required, after you have provided consent.

3. How We Use Your Personal Data

We may process your personal data for the following purposes:

To process and fulfil your order

We use your contact, order, shipping, and personalization information to:

  • confirm and manage your purchase;

  • create or personalize your products;

  • arrange production, fulfilment, and delivery;

  • provide order and shipping updates;

  • process returns, complaints, refunds, or replacements;

  • communicate with you about your order.

The legal basis for this processing is the performance of our contract with you or taking steps at your request before entering into a contract.

To provide personalized color analysis

For personalized products, we use the photographs, color preferences, order details, and notes you submit to:

  • evaluate your visible natural coloring;

  • identify shades intended to complement your features;

  • select the color used for the personalized products in your order;

  • communicate with you if additional information or photographs are required;

  • maintain a limited record of the recommendation connected to your order.

Providing the required photographs may be necessary for us to deliver a personalized color service. If you do not provide sufficiently clear photographs, we may be unable to complete the analysis or produce the personalized item.

To provide customer service

We use your contact details and correspondence to answer questions, resolve problems, and provide support before and after a purchase.

This processing is based on performing our contract with you and our legitimate interest in operating the business and providing effective customer service.

To comply with legal obligations

We process and retain certain information when required for purposes such as:

  • accounting and taxation;

  • invoicing;

  • consumer protection;

  • fraud prevention;

  • responding to lawful requests from public authorities;

  • maintaining records required by law.

The legal basis is compliance with legal obligations applicable to us.

To protect our business and legal rights

We may process personal data where necessary to:

  • prevent fraud, misuse, or security incidents;

  • establish, exercise, or defend legal claims;

  • enforce our terms and policies;

  • protect our website, customers, and business operations.

This processing is based on our legitimate interests, provided that those interests are not overridden by your rights and freedoms.

To send marketing communications

We may send newsletters, new collection announcements, offers, or other promotional communications when you have subscribed or otherwise provided valid permission.

You may unsubscribe at any time by selecting the unsubscribe link in an email or contacting us at contact@nereidebeachwear.com.

Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

4. Photographs and Color-Profile Information

Photographs submitted through the color-profile form are used specifically to provide the personalized color analysis connected to your order.

We may review visible characteristics such as skin tone, eye color, hair color, natural contrast, and overall coloring. This evaluation is intended only to recommend suitable product colors.

Your photographs will not be used for:

  • facial recognition;

  • identity verification;

  • creating biometric identification templates;

  • public advertising or social media;

  • portfolio or promotional materials;

  • selling or licensing to third parties.

We will use your photographs for advertising, social media, testimonials, portfolio materials, or other promotional purposes only where you have given separate, specific permission.

Please upload photographs only of yourself. If you submit photographs of another person, you confirm that you are authorized to do so and that the person has been appropriately informed about the processing described in this Privacy Policy.

AI-assisted tools

We may use AI-assisted tools as an assistance tool when evaluating color characteristics. Where such a tool is used:

  • your photos are shared only to the extent necessary for the analysis;

  • no personal data is shared with the AI assisted tool;

  • the final analysis and recommendation is performed by a person;

  • the tool does not make decisions producing legal or similarly significant effects;

  • appropriate contractual and data-transfer safeguards are applied.

5. Cookies and Similar Technologies

Our website uses cookies and similar technologies.

Some cookies are strictly necessary for website security, shopping-cart functions, checkout, language preferences, and other essential features. These technologies may be used without consent where permitted by law.

Optional cookies, including analytics, personalization, and advertising cookies, are used only after you make the relevant selection through our cookie banner, where consent is required.

You can accept, reject, or manage optional cookies by selecting “Cookie preferences” on our website. You may change your selection at any time.

For more detailed information, please see our Cookie Policy.

6. How We Share Personal Data

We do not sell your personal data.

We may share personal data with trusted service providers where necessary to operate our website, process orders, provide personalized services, and meet our legal obligations.

These recipients may include:

  • Squarespace, which hosts and operates our website and ecommerce platform;

  • our fulfilment partners, which manufacture, package, and ship products;

  • payment-processing providers;

  • shipping companies and couriers;

  • email and newsletter providers;

  • form, file-upload, and cloud-storage providers;

  • IT, website-security, and technical-support providers;

  • analytics or advertising providers, where you have provided the required consent;

  • AI-assisted tools for color analysis;

  • accountants, tax advisers, legal advisers, insurers, and other professional consultants;

  • public authorities or courts where disclosure is required by law.

Service providers receive only the information reasonably necessary to perform their services. For example, a production or delivery partner may receive your name, delivery address, product details, and contact information needed to fulfil the order.

7. International Data Transfers

Some of our service providers may process personal data outside Poland or outside the European Economic Area, including in the United States or other countries where their teams, servers, or subcontractors operate.

When personal data is transferred outside the EEA, we use or rely on an appropriate legal transfer mechanism where required, such as:

  • an adequacy decision;

  • the EU–US Data Privacy Framework, where applicable;

  • European Commission Standard Contractual Clauses;

  • another safeguard permitted under applicable data-protection law.

Squarespace’s current data-processing terms provide for international processing and refer to the EU–US Data Privacy Framework and Standard Contractual Clauses as transfer mechanisms.

You may contact us at contact@nereidebeachwear.comfor more information about safeguards relating to a particular transfer.

8. How Long We Keep Personal Data

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including compliance with legal, accounting, tax, consumer-protection, and dispute-resolution requirements.

Our usual retention periods are:

  • Order and invoice records: for the period required under applicable tax and accounting laws;

  • Customer correspondence: for as long as necessary to resolve the matter and, where relevant, until related claims become time-barred;

  • Color recommendations: for 2 years after the order is completed, so we can provide order support or maintain consistency for a related request;

  • Uploaded photographs: deleted within 90 days after the personalized order is shipped or the analysis is completed, unless a longer period is reasonably necessary to resolve an active complaint or you request earlier deletion where legally possible;

  • Newsletter information: until you unsubscribe or withdraw your consent;

  • Cookie consent records: for the period necessary to document your preferences and compliance with applicable law;

  • Legal claims: until the relevant limitation period has expired or the claim has been finally resolved.

We may keep limited information for longer where required by law or where necessary to establish, exercise, or defend legal claims.

9. Your Data-Protection Rights

Subject to the conditions and limitations set out in applicable law, you may have the right to:

  • request access to your personal data;

  • receive a copy of your personal data;

  • request correction of inaccurate or incomplete information;

  • request deletion of your personal data;

  • request restriction of processing;

  • object to processing based on legitimate interests;

  • object at any time to direct marketing;

  • receive certain data in a structured, commonly used, machine-readable format;

  • request that certain data be transferred to another controller;

  • withdraw consent at any time where processing is based on consent;

  • lodge a complaint with a competent supervisory authority.

These rights arise under the GDPR and are subject to legal exceptions—for example, we may need to retain certain order or invoice records to comply with legal obligations.

To exercise your rights, email contact@nereidebeachwear.com. Please describe your request clearly. We may ask for information needed to verify your identity before completing the request.

10. Security

We use appropriate technical and organizational measures intended to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.

These measures may include controlled access, secure accounts, password protection, encryption provided by our service platforms, access limitations, and the use of reputable ecommerce and fulfilment providers.

However, no website, email transmission, or online storage system can be guaranteed to be completely secure. Please use secure methods when submitting photographs and do not send color-profile photographs through public social-media comments or other unsecured channels.

11. Automated Decision-Making

We do not use your personal data to make decisions based solely on automated processing that produce legal effects or similarly significant effects concerning you.

Any software or AI-assisted tool used in connection with color analysis serves only as support. The color selection for a personalized product is subject to human assessment or review.

12. Children’s Privacy

Our website and personalized color-analysis services are not directed to children under the age of 18.

We do not knowingly request color-profile photographs directly from children. A parent or legal guardian must contact us before submitting personal data or photographs relating to a minor.

If we learn that personal data relating to a child has been submitted without appropriate authorization, we will take reasonable steps to delete it.

13. Third-Party Websites

Our website may contain links to websites or services operated by third parties. We are not responsible for the privacy practices of those third parties.

We recommend reviewing the privacy policy of each external website or service before providing personal information.

14. Changes to This Privacy Policy

We may update this Privacy Policy when our services, technology, service providers, or legal obligations change.

The current version will always be published on this page, together with the date of the latest update. Where a change materially affects how we process your personal data, we will provide additional notice where required.

15. Contact Us

For questions about this Privacy Policy, the use of your photographs, or your personal-data rights, contact:

Nereïde — Bibianna Szczepanczyk
Email: contact@nereidebeachwear.com
Postal address: ul. Kaziemierza Odnowiciela 7/1, 43-200 Pszczyna, PL