Last updated: October 22, 2026

This policy explains what personal data OTUNNELS collects when you visit otunnels.com or buy from us, why, and what rights you have. We sell to customers in the European Union and ship through our logistics center in Poland, so we handle personal data in line with the General Data Protection Regulation (GDPR).

Who we are

The data controller is the seller operating the OTUNNELS shop at otunnels.com. You can reach us about anything in this policy at o.tunnels.one@gmail.com.

What we collect and why

• Orders — name, email, phone, billing and shipping address, the items you bought and your order history. We need these to make and deliver your order, send order and shipping emails, and handle any problem with it (performance of a contract), and to keep accounting records (legal obligation).
• Account — if you create an account: your email, password (stored encrypted) and saved addresses, so you can see your orders and check out faster.
• Payments — card payments and Klarna are handled by Stripe. Card details go directly to Stripe; we only receive the payment status and the last digits of the card.
• Newsletter — if you subscribe, your name and email, to send you articles, new products and offers (consent). Every email has an unsubscribe link.
• Messages — what you send us by email, through a form or as a comment, so we can reply. Comments are checked for spam by Akismet.
• Usage and security — IP address, browser and device type, pages visited and how you arrived at the site. We use this to keep the site secure (for example, blocking repeated failed logins) and to understand which pages work.

Analytics and advertising

We use Yandex Metrica to measure site traffic, and the Meta (Facebook and Instagram) pixel and Conversions API to measure our ads and show them to people likely to be interested. These services use cookies and similar technologies and may receive your IP address, device data and, for purchases, an order event.

WooCommerce also records how a visitor arrived (for example, from Instagram or a search engine) and attaches it to the order.

Who we share data with

We do not sell your personal data. We share it only with the services needed to run the shop:

• Stripe and Klarna — payment processing;
• postal and courier services (Poczta Polska, DHL, USPS) — delivering your order;
• our warehouse and logistics partners in the US and Poland, our hosting provider and email delivery service — running the site and sending emails;
• Meta and Yandex — analytics and advertising, as described above;
• Automattic (Akismet) — spam filtering for comments.

Some of these providers are located outside the EU, including in the United States. Where data leaves the EU, it is protected by the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses.

How long we keep it

Order and invoice data is kept for as long as tax and accounting law requires. Account data is kept until you delete your account. Newsletter data is kept until you unsubscribe. Security logs are kept for a short period only.

Your rights

You can ask us to access, correct or delete your personal data, to restrict or object to how we use it, or to receive a copy in a portable format. Where we rely on your consent, you can withdraw it at any time. Email o.tunnels.one@gmail.com and we will reply within one month.

You also have the right to complain to the data protection authority in your country.

Changes

We may update this policy when our services change. The date at the top shows the latest version.