Privacy policy

Privacy Policy – Little Story

1. Data Controller and Definitions

The data controller for the personal data of Customers/Users of the Little Story online store (hereafter referred to as the "Store"), a brand owned by NICE IDEA Spółka z ograniczoną odpowiedzialnością, is:
NICE IDEA Sp. z o.o., phone: +48 794 088 288, NIP: 7851810748, REGON: 387988158.
Contact details:

User – a natural person who visits the Store’s website or uses the services and features described in this Privacy and Cookie Policy.
Customer – a natural person with full legal capacity, a consumer, a legal person, or an organizational unit with legal capacity who enters into a distance sales agreement with the Store.
Online Store – the website operated under the brand Little Story, available at: https://littlestory.pl.
Newsletter – marketing information and updates sent via email, subject to the User’s prior consent.
Account – the Customer’s personal profile within the Store’s system, containing order history and personal data.
GDPR – Regulation (EU) 2016/679 of the European Parliament and Council on the protection of natural persons with regard to the processing of personal data.

2. Purpose, Legal Basis, and Duration of Data Processing

Personal data is processed for:

  • concluding and performing distance sales agreements;

  • ensuring proper website functionality (device data, cookies, geolocation, session data);

  • newsletter distribution (with consent).

Legal bases include:

  • performance of a contract (Art. 6(1)(b) GDPR);

  • consent (Art. 6(1)(a) GDPR);

  • legitimate interest of the data controller (Art. 6(1)(f) GDPR).

Data is stored for the duration of service provision and as long as required by law or until consent is withdrawn.

3. Marketing Activities

The Store may display promotional content related to Little Story products and services. This is based on the legitimate interest of the controller (Art. 6(1)(f) GDPR).

4. Data Recipients

Data may be disclosed to service providers such as hosting, IT, payment gateways, logistics, and marketing service providers under data processing agreements.

5. Transfer of Data Outside the EU

Personal data is not transferred outside the European Economic Area.

6. Rights of Data Subjects

You have the right to:

  • access your data (Art. 15 GDPR),

  • receive a copy (Art. 15(3) GDPR),

  • rectify data (Art. 16 GDPR),

  • delete data (Art. 17 GDPR),

  • restrict processing (Art. 18 GDPR),

  • data portability (Art. 20 GDPR),

  • object to processing (Art. 21 GDPR),

  • withdraw consent at any time.

To exercise your rights, contact the Data Controller via the contact details provided in section 1.

7. Supervisory Authority

You may lodge a complaint with the President of the Personal Data Protection Office (UODO) in Poland:
Address: ul. Stawki 2, 00-193 Warsaw
Website: https://www.uodo.gov.pl/en
Phone: +48 606 950 000

8. Data Protection Officer

You can contact the Data Protection Officer via the Administrator’s address or email listed in section 1.

9. Changes to the Privacy Policy

This Privacy Policy may be updated to reflect changes in legal regulations or operational needs. The current version will always be available on the Store’s website.

10. Cookies

The Store uses cookies to:

  • ensure proper website functionality;

  • analyze website usage;

  • personalize content and ads;

  • maintain user sessions.

Cookies are used only upon obtaining the User’s prior consent. Detailed information about the types of cookies and third-party tools (e.g., Google, Meta, PayPal) is available on the Cookie Policy page of the Store.

Users can manage cookie preferences through browser settings. Restricting cookies may impact some website functionalities.

11. Newsletter

Users can subscribe to the Store’s newsletter by providing consent during registration or at a later time. Consent can be withdrawn at any time via:

12. Account

Users must register to create an account, providing true personal data and accepting the Store’s Terms & Conditions.
The contract for account services is concluded for an indefinite period and may be terminated at any time by the Customer or the Store with immediate effect.
Inactivity or violations may lead to account deactivation, with a 7-day notice period.