legal

privacy policy

last updated: april 2026

1. data controller

the data controller for your personal data is knoby guys sp. z o.o., a company registered in warsaw, poland. you can contact us at hello@knoby.xyz.

2. what data we collect

we collect the following personal data:

email address — when you subscribe to our newsletter or create an account
name, email, message content — when you use our contact form
usage data — pages visited, device type, browser, approximate location (country level) — via analytics
order data — name, shipping address, payment details — when you make a purchase (processed by third-party payment provider)

3. legal basis for processing

we process your data based on the following legal grounds under the GDPR:

consent (art. 6(1)(a)) — newsletter subscription, optional cookies
contract performance (art. 6(1)(b)) — processing orders and pre-orders
legitimate interest (art. 6(1)(f)) — analytics to improve our website, fraud prevention

4. how we use your data

to send you product updates and newsletters (with your consent)
to respond to your contact form inquiries
to process and fulfill orders
to improve our website and understand how it is used
to comply with legal obligations

5. data sharing

we do not sell your personal data. we may share data with:

hosting provider (vercel inc., USA) — website hosting and analytics. data transfers to the US are covered by standard contractual clauses (SCCs)
payment processor — for order transactions
shipping partners — name and address for order delivery

6. data retention

newsletter data — retained until you unsubscribe
contact form data — retained for 12 months after last communication
order data — retained for 5 years (Polish tax law requirement)
analytics data — aggregated data retained indefinitely; individual session data for 26 months

7. your rights

under the GDPR, you have the following rights regarding your personal data:

right of access — obtain a copy of your data
right to rectification — correct inaccurate data
right to erasure — request deletion of your data
right to data portability — receive your data in a machine-readable format
right to object — object to processing based on legitimate interest
right to restrict processing — request limitation of processing
right to withdraw consent — at any time, without affecting lawfulness of prior processing

to exercise any of these rights, email us at hello@knoby.xyz. we will respond within 30 days.

you also have the right to lodge a complaint with the Polish supervisory authority: Prezes Urzedu Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warszawa.

8. cookies

our website uses cookies and similar technologies. for detailed information about what cookies we use and how to manage them, please see our cookie policy.

9. international data transfers

our website is hosted on vercel (USA). this means your data may be transferred to the united states. these transfers are protected by standard contractual clauses (SCCs) approved by the european commission, ensuring an adequate level of data protection.

10. changes to this policy

we may update this policy from time to time. changes will be posted on this page with an updated revision date. we encourage you to review this policy periodically.

11. contact

if you have any questions about this privacy policy or our data practices, contact us at:

knoby guys sp. z o.o.

warsaw, poland

hello@knoby.xyz