Privacy Policy
This Privacy Policy explains how Formalith Architectural Materials Sp. z o.o. ("Formalith", "we", "us", or "our") handles personal information when you use our website, create an account, request quotes, contact us, or place orders for architectural materials. We process personal data in line with applicable data protection laws, including the General Data Protection Regulation (GDPR) where it applies.
Who we are and how to contact us
Formalith Architectural Materials Sp. z o.o. is the data controller for personal information processed through our website and related services, unless we tell you otherwise for a specific service.
If you have questions about this Privacy Policy or how we handle your personal information, you can contact us at contact@formalith.com or write to us at Formalith Architectural Materials Sp. z o.o., ul. Marszałkowska 142, 00-061 Warsaw, Poland.
What personal information we collect
The information we collect depends on how you use Formalith. We collect only what we need to operate our B2B and B2C e-commerce services, respond to enquiries, and fulfil orders.
Account and identity information: when you register, we collect details such as your name, email address, password (stored in hashed form), account type (individual or company), and, for business accounts, company name and VAT number. When you sign in, we create and maintain session identifiers using secure cookies.
Profile and company information: signed-in users may add profile details, delivery and billing addresses, and an optional profile avatar. Business customers may maintain a company profile used for B2B purchasing and account management.
Quote and contact information: when you request a custom trim quote or submit a contact case, we collect the details you enter in the form, including project information, measurements, preferences, and any files you upload. You may submit quotes and contact requests as a guest or while signed in.
Commerce information: we process cart contents, wishlist items, order history, product selections, and related transaction details. Guest carts and wishlists may be stored locally in your browser; signed-in customers may also have cart and wishlist data stored on our systems.
Preferences and usage information: we store your selected language (English, Polish, or Arabic) and display currency (EUR, USD, or PLN). With your consent, we may store recent product search history, temporary form-field drafts, and cached product preview data to improve your experience.
Technical information: our systems and hosting partners may automatically collect information such as IP address, browser type, device information, pages viewed, and approximate location derived from IP address for security, performance, and service delivery.
- Registration and login: name, email, password, account type, company name, VAT number
- Profile and addresses: contact details, shipping and billing addresses, avatar image
- Quotes and contact cases: form fields, message content, uploaded attachments
- Shopping activity: cart items, wishlist items, orders, and related product data
- Optional features (consent-based): search history, form drafts, product preview cache
- Technical data: IP address, browser and device data, cookies, and similar identifiers
Why we use your information and our legal bases
We use personal information only for defined purposes and rely on the legal bases set out below.
Providing our services: we process account, profile, cart, wishlist, order, quote, and contact information to create and manage accounts, authenticate users, reset passwords, process enquiries, prepare quotes, and fulfil purchases. Legal basis: performance of a contract or steps taken at your request before entering into a contract; legitimate interests in operating our e-commerce platform.
Customer support and communication: we use your contact details and case history to respond to messages, follow up on quotes, and provide account-related assistance. Legal basis: performance of a contract; legitimate interests in customer service.
Security and fraud prevention: we process login sessions, technical logs, and related data to protect accounts, detect abuse, and maintain the integrity of our systems. Legal basis: legitimate interests; legal obligation where applicable.
Preferences and site functionality: we store language and currency choices so the site works as you expect. Legal basis: legitimate interests; consent where required for optional features.
Optional enhancements: search history, form drafts, and product preview caching are enabled only if you consent through our cookie and privacy settings. Legal basis: consent. You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
Legal and compliance: we may process information to comply with law, respond to lawful requests, enforce our terms, and protect our rights. Legal basis: legal obligation; legitimate interests.
International transfers
Formalith Architectural Materials Sp. z o.o. is established in Poland and primarily serves customers in the European Union. We generally process personal information within the European Economic Area.
Where we use service providers that process data outside the EEA (for example Cloudflare for hosting and content delivery), we rely on appropriate safeguards such as Standard Contractual Clauses approved by the European Commission, the UK International Data Transfer Addendum, or other lawful mechanisms. You may contact us at contact@formalith.com for more information.
How long we keep information
We retain personal information only for as long as necessary for the purposes described in this policy, unless a longer period is required or permitted by law.
Account and profile data is kept while your account is active. If you delete your account, we delete or anonymise associated personal information within a reasonable period, except where we must retain certain records for legal, tax, accounting, or dispute-resolution purposes.
Quote requests, contact cases, and uploaded attachments are retained for as long as needed to handle your enquiry, maintain business records, and resolve disputes.
Order and transaction records are retained for the period required by applicable commercial, tax, and accounting laws.
Session cookies and authentication tokens expire according to our security settings. Guest cart and wishlist data stored in your browser remains until you clear it or it is overwritten. Optional local data such as search history and form drafts is removed when you withdraw consent, clear your browser storage, or when the data reaches its expiry period.
Server logs and security records are kept for a limited period appropriate to security monitoring and troubleshooting.
Your privacy rights
Depending on where you live, you may have rights regarding your personal information. These may include the right to access, rectify, erase, restrict, or object to certain processing, and the right to data portability.
If processing is based on consent, you have the right to withdraw consent at any time through your account settings, cookie preferences, or by contacting us.
You may request a copy of the personal information we hold about you, ask us to correct inaccurate data, or request deletion where applicable. You may also object to processing based on legitimate interests or request restriction in certain circumstances.
To exercise your rights, contact us at contact@formalith.com. We may need to verify your identity before responding. We aim to respond within one month, or inform you if we need additional time as permitted by law.
You also have the right to lodge a complaint with a supervisory authority. If you are in the United Kingdom, you may contact the Information Commissioner's Office (ICO). If you are in the European Economic Area, you may contact your local data protection authority (DPA). We encourage you to contact us first so we can try to resolve your concern.
Automated decision-making and profiling
Formalith does not use automated decision-making that produces legal or similarly significant effects on you without human involvement.
We do not use your personal information for advertising profiling. Optional features such as search history and product preview caching are used only to improve your browsing experience within our site and are not used to build advertising profiles.
Children's privacy
Our services are intended for adults and business customers. We do not knowingly collect personal information from children under 16 (or the applicable age of digital consent in your country).
If you believe a child has provided personal information to us, please contact us at contact@formalith.com and we will take appropriate steps to delete the information.
Security
We implement appropriate technical and organisational measures to protect personal information against unauthorised access, alteration, disclosure, or destruction.
These measures include secure authentication cookies, encrypted connections (HTTPS), access controls, and security monitoring through our hosting infrastructure. Passwords are stored using industry-standard hashing and are never displayed in plain text.
No method of transmission or storage is completely secure. While we work to protect your information, we cannot guarantee absolute security. Please use a strong, unique password and keep your login credentials confidential.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or business practices. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, provide additional notice on our website or by email.
We encourage you to review this page periodically. Continued use of Formalith after an update means you acknowledge the revised policy, subject to your rights under applicable law.