Privacy Policy
This Privacy Policy applies to the online store operated at picabec.com.
The controller of your personal data is Peyote Sp. z o.o. with its registered office in Janki, ul. Mszczonowska 48, 05-090 Raszyn, Poland, entered in the register of entrepreneurs of the National Court Register under number 0001010721, NIP 5342658923 — the owner of the Pic à Bec brand.
The Controller has not appointed a Data Protection Officer.
In matters relating to personal data, you may contact us:
- by email: customercare@picabec.com,
- by post: Peyote Sp. z o.o., ul. Mszczonowska 48, 05-090 Raszyn, Poland.
Purposes and legal basis for processing personal data
1. Purchases and online services
We process your data primarily in order to conclude and perform a sales agreement, including:
- handling orders,
- payments,
- deliveries,
- returns,
- complaints,
- contact regarding your order.
We may also process data to:
- ensure the security of the Service,
- handle enquiries,
- establish, pursue or defend claims,
- conduct analytics,
- send marketing communications relating to Pic à Bec products and events.
Providing the data necessary to place and fulfil an order is required to complete the sales agreement.
Providing data for marketing purposes, newsletters or product availability notifications is voluntary.
2. Advertising, analytics and development
We may analyse how you use the Service, your purchase history and responses to our content in order to:
- improve the Service,
- develop products and collections,
- measure communication effectiveness,
- present personalised content.
For this purpose we may use:
- statistical data,
- aggregated data,
- anonymised or pseudonymised data,
- cookies and similar technologies.
3. Service optimisation
We may process data to:
- ensure security,
- prevent abuse,
- handle enquiries,
- comply with legal obligations,
- establish, pursue or defend claims.
Legal bases for data processing
The legal basis for processing your data may include:
- performance of a contract — Article 6(1)(b) GDPR,
- compliance with legal obligations — Article 6(1)(c) GDPR,
- legitimate interest — Article 6(1)(f) GDPR,
- your consent — Article 6(1)(a) GDPR.
What data we process
Depending on how you use the Service, we may process:
- first and last name,
- email address,
- telephone number,
- delivery or billing address,
- tax identification number,
- payment and order data,
- bank account number for refunds,
- technical data such as IP address and cookies.
Your rights
You have the right to:
- access your data,
- obtain a copy of your data,
- correct your data,
- delete your data,
- restrict processing,
- transfer your data,
- object to processing,
- withdraw consent at any time.
You also have the right to lodge a complaint with the relevant data protection authority.
Contact regarding personal data
You may contact us regarding personal data:
- by email: customercare@picabec.com,
- by post: Peyote Sp. z o.o., ul. Mszczonowska 48, 05-090 Raszyn, Poland.
Personal data retention period
We retain personal data only for as long as necessary.
- account data — for the duration of the account,
- transaction data — as required by law,
- customer service data — generally for 2 years,
- marketing data — until consent is withdrawn,
- product availability notification data — up to 6 months.
Sharing data
We may share your data with companies supporting us in operating the Service, including:
- payment providers,
- courier companies,
- hosting providers,
- IT providers,
- analytics and marketing providers,
- legal and accounting service providers.
Transfers outside the EEA
Some providers may process data outside the European Economic Area, including in the United States.
In such cases we apply safeguards required under GDPR.
Newsletter and marketing communications
You may subscribe to newsletters and marketing communications by providing your email address or phone number and giving consent where required.
You may unsubscribe at any time.
Cookies and technical data
We may automatically process technical data such as:
- IP address,
- cookie identifiers,
- device information,
- browser information,
- activity within the Service.
Detailed information is available in our Cookie Policy.
Social media and external accounts
You may log in using selected external accounts such as Google or Apple.
We also maintain profiles on social media platforms including:
- Facebook,
- Instagram,
- YouTube,
- Pinterest,
- TikTok.
Google Analytics and marketing tools
The Service may use tools such as:
- Google Analytics 4,
- Google Tag Manager,
- Google Ads,
- Meta Pixel.
These tools help analyse website usage and improve marketing effectiveness.
Users from other countries
Users from countries outside the EU/EEA may have additional rights under local privacy laws.
Users from the United Kingdom may also be protected under UK GDPR and the Data Protection Act 2018.
Other information
The Service is not directed to children.
We do not knowingly collect personal data of children without the required consent.
Changes to the Privacy Policy
We may update this Privacy Policy from time to time.
New versions will be published within the Service.
This Privacy Policy was updated on 15th June 2026.