Privacy Policy

Who is responsible for your data

The data controller is Sacred Forest Sewer Niedźwiecki, Tadeusza Kościuszki 16/2, 81-704 Sopot, Poland, NIP 5851500774. Contact: hello@sacredforest.store, phone +48 572 664 265.

What we collect

• Account data: your email address and an encrypted (hashed) password.
• Purchase data: which recordings you bought, amounts, and order references.
• Payment data: handled directly by Stripe; we receive confirmation and limited details (never your full card number).
• Newsletter and waiting-list data: your email address, when you choose to leave it in one of our forms.
• Usage data (only with your consent): pages visited, plays, and similar analytics events.
• Technical data: basic logs needed to run the site securely.

Why we use it and the legal basis

• To provide your account and deliver your purchases — performance of our contract with you (GDPR art. 6(1)(b)).
• To keep tax and accounting records — legal obligation (art. 6(1)(c)).
• To keep the service secure and working — our legitimate interests (art. 6(1)(f)).
• To send you the newsletter or waiting-list updates you asked for — your consent (art. 6(1)(a)), withdrawable at any time via the unsubscribe link.
• For analytics and marketing measurement — only with your consent given in the cookie banner (art. 6(1)(a)).

Who processes data for us

We use trusted providers acting as our processors or, for some tools, joint/independent controllers:

• Stripe — payment processing.
• Supabase — accounts database and authentication.
• Vercel — hosting and content delivery.
• Klaviyo — newsletter and waiting-list emails.
• Google (Google Analytics 4, Google Ads) — analytics and ad measurement, only after your consent.
• Meta (Meta Pixel) — ad measurement, only after your consent.

Some providers process data outside the EEA (mainly in the United States) under the EU-US Data Privacy Framework or EU Standard Contractual Clauses.

Cookies and similar technologies

We group cookies into three categories:

• Necessary — sign-in session, security, remembering your cookie choice. Always on; the site cannot work without them.
• Analytics (Google Analytics 4) — help us understand which pages and sounds help people. Loaded only after you choose so in the cookie banner.
• Marketing (Meta Pixel, Google Ads) — measure whether our ads reached you. Loaded only after you choose so in the cookie banner.

Until you make a choice, no analytics or marketing tools load at all. You can change your decision at any time via "Cookie settings" in the footer.

How long we keep it

Account data: while your account exists. Purchase and invoice records: for the period required by tax law (generally 5 years). Newsletter data: until you unsubscribe. Analytics data: per Google Analytics retention settings (14 months). You can ask us to delete your account at any time.

Your rights

Under the GDPR you can request access, correction, erasure, restriction, portability, and object to certain processing, and withdraw consent at any time. Email hello@sacredforest.store. You also have the right to lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw.

Contact

hello@sacredforest.store · +48 572 664 265