PRIVACY POLICY
Last updated: 22 October 2026
- INTRODUCTION
This Privacy Policy explains how Fashype collects, uses, stores, discloses and protects personal data when you visit our website, create an account, purchase digital products, access online courses or contact us.
We are committed to protecting your privacy and processing personal data in accordance with applicable data protection legislation, including Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), and applicable Polish data protection laws.
This Privacy Policy applies to visitors, registered users, customers and other individuals who interact with Fashype.
Please read this document carefully to understand how your personal data is processed and what rights you have.
- DATA CONTROLLER
The controller responsible for determining the purposes and means of processing personal data is:
Tone Creation Studio
Operating under the brand name Fashype
Registered business address: Powstania Warszawskiego 15, 31-539 Kraków, Poland
Business registration: Central Registration and Information on Business (CEIDG), Poland
Tax Identification Number (NIP/VAT ID): PL9970136331
Email: [email protected]
Website: https://fashype.com
In this Privacy Policy, “Fashype”, “we”, “us” and “our” refer to Tone Creation Studio operating under the Fashype brand.
For privacy-related questions, requests concerning personal data or the exercise of your rights under the GDPR, please contact us at [email protected].
- PERSONAL DATA WE COLLECT
The categories of personal data we process depend on how you interact with our website and services.
3.1. Account and registration data
When you create an account or register to access our courses, we may collect:
- First and last name, where provided.
- Username and account identifier.
- Email address.
- Password credentials in the form managed by the website’s authentication system, including securely stored password hashes where applicable.
- Account registration date and account status.
- Information about account access and course enrolment.
We use this information to create and administer your account, authenticate users and provide access to purchased educational content.
3.2. Order, invoicing and transaction data
When you purchase a product through Fashype, we may process:
- Your name and email address.
- Your order number and transaction reference.
- Information about the purchased course or digital product.
- The purchase date, price, currency and applicable tax information.
- Payment status and refund status.
- Billing details required to issue invoices or other sales documents, including your billing address and business details where applicable.
- Tax identification information, such as a VAT identification number, where required for invoicing or tax compliance.
- Information necessary to investigate payment errors, duplicate charges, refunds or complaints.
We use this information to fulfil orders, provide access to purchased products, issue and maintain sales documentation, process refunds and comply with applicable accounting and tax obligations.
Where necessary, relevant order and billing information may be transferred to our invoicing and accounting software provider, Fakturownia, as described in Section 6 of this Privacy Policy.
We do not require complete payment card details or card security codes for issuing invoices or maintaining our own order records.
3.3. Payment information processed by Stripe
Payments on Fashype are processed through Stripe.
Depending on the payment method and transaction, Stripe may process information such as payment card details, payment account identifiers, billing details, transaction information, device information and data required for authentication or fraud prevention.
Fashype may receive limited payment-related information, such as transaction references, payment status, card brand, the last four digits of a payment card where made available, and information required to administer orders, refunds and customer support.
We do not intentionally collect or store complete payment card details or card security codes on our own systems.
For further information about Stripe’s processing of personal data, please consult its Privacy Policy:
3.4. Course and learning activity data
When you access educational products, we may process information such as:
- Courses purchased or enrolled in.
- Course progress and completion status, where supported by the platform.
- Lessons accessed and learning activity recorded by the learning-management system.
- Download or access records where available.
- Information required to troubleshoot access problems.
We use this information to provide the services purchased, maintain your account, support your learning experience and resolve technical issues.
3.5. Communications and customer support
If you contact us by email or through a website form, we may collect your name, email address, message content, order details and any other information you choose to provide.
We process this information to respond to enquiries, investigate complaints, handle refund requests and maintain records of customer service interactions.
Please do not send passwords, complete payment card numbers or other unnecessary sensitive information through ordinary email.
3.6. Technical information and website usage
When you visit our website, certain technical information may be collected automatically by the website, hosting provider, security tools or other services in use.
Depending on the configuration of these services, this information may include:
- IP address.
- Browser type and version.
- Operating system and device information.
- Date and time of requests.
- Pages requested and referring URLs.
- Technical logs, error reports and security events.
- Cookie identifiers and similar online identifiers.
This information may be used to maintain website functionality, protect against malicious activity, diagnose technical problems and improve the reliability of our services.
3.7. Marketing preferences
If we offer newsletters or other marketing communications, we may process your email address, communication preferences and information about whether you have given or withdrawn marketing consent.
We will send marketing communications where permitted by applicable law and, where required, on the basis of your prior consent.
You may withdraw your marketing consent at any time without affecting the lawfulness of processing carried out before withdrawal.
- PURPOSES AND LEGAL BASES FOR PROCESSING
We process personal data only where an applicable legal basis under the GDPR exists.
Depending on the circumstances, the legal bases include the following.
4.1. Providing accounts, courses and purchased products
Purpose: creating and administering accounts, processing orders, granting access to courses and delivering purchased digital products.
Legal basis: Article 6(1)(b) GDPR, processing necessary for the performance of a contract or to take steps at your request before entering into a contract.
4.2. Processing payments, refunds and order administration
Purpose: confirming payments, reconciling transactions, administering refunds, managing order records and addressing payment-related enquiries.
Legal basis: Article 6(1)(b) GDPR where processing is necessary to perform the sales contract, and Article 6(1)(c) GDPR where processing is necessary to comply with legal obligations.
4.3. Invoicing, accounting and tax compliance
Purpose: issuing invoices and other applicable sales documents, maintaining transaction records, documenting refunds and corrections, and fulfilling accounting and tax obligations arising from sales made through Fashype.
Legal basis: Article 6(1)(c) GDPR, where processing is necessary to comply with legal obligations applicable to Tone Creation Studio, including tax and accounting requirements. Article 6(1)(b) GDPR may also apply where processing is necessary to perform the sales contract.
4.4. Accounting, taxation and legal compliance
Purpose: maintaining accounting records, issuing required sales documentation, meeting tax obligations and complying with other applicable legal requirements.
Legal basis: Article 6(1)(c) GDPR.
4.5. Customer support and complaints
Purpose: responding to enquiries, resolving technical problems, investigating complaints and handling refund requests.
Legal basis: Article 6(1)(b) GDPR where the request relates to a contract, Article 6(1)(c) GDPR where a legal obligation applies, or Article 6(1)(f) GDPR where processing is necessary for our legitimate interests in providing customer support and protecting our legal rights.
4.6. Website security and technical maintenance
Purpose: detecting suspicious activity, preventing fraud, protecting user accounts, maintaining system integrity and troubleshooting errors.
Legal basis: Article 6(1)(f) GDPR, based on our legitimate interests in maintaining a secure and reliable website, provided those interests are not overridden by your rights and freedoms.
4.7. Marketing communications
Purpose: sending newsletters, product announcements and promotional communications.
Legal basis: Article 6(1)(a) GDPR where consent is required and has been obtained, together with any applicable requirements governing electronic marketing communications.
You may withdraw consent or unsubscribe at any time.
4.8. Cookies and analytics
Purpose: operating essential website functions, remembering preferences, measuring website performance and conducting analytics or advertising where such tools are implemented.
The legal basis depends on the type of technology and the purpose of processing. Where consent is legally required, non-essential cookies and similar technologies will be used only after valid consent has been obtained.
Further information is provided in our Cookie Policy.
- PAYMENT PROCESSING THROUGH STRIPE
Payments for products sold through Fashype are processed using Stripe.
Stripe processes payment-related personal data in order to provide its payment services, subject to the relevant contractual arrangements, its privacy documentation and applicable law.
Depending on the processing activity, Stripe may act as a processor on behalf of Fashype or as an independent controller for processing activities for which it determines its own purposes and means. The applicable roles depend on the particular Stripe service and processing activity.
We may exchange information with Stripe to:
- Initiate and confirm payment transactions.
- Authenticate payments and process payment methods.
- Confirm successful, failed or disputed transactions.
- Identify and investigate duplicate or incorrect charges.
- Process approved refunds.
- Help prevent fraud and unauthorised transactions.
- Meet applicable legal, accounting and compliance obligations.
Fashype is responsible for handling customer enquiries and contractual claims concerning purchases, including refund requests and complaints relating to our products.
Where a refund is approved or legally required, we may initiate it through Stripe’s payment-processing system.
Stripe’s Privacy Policy is available at:
Stripe’s Data Processing Agreement is available at:
- SERVICE PROVIDERS AND RECIPIENTS OF PERSONAL DATA
We may share personal data with third parties where necessary for the purposes described in this Privacy Policy and where a lawful basis exists.
Depending on the services actually used on our website, recipients may include the following categories.
6.1. Website hosting and technical infrastructure
Our hosting provider and infrastructure suppliers may process technical logs, IP addresses, account information and other data necessary to operate, secure and maintain the website.
6.2. Website and learning-management software
Our website operates on WordPress and uses the Masteriyo learning-management system for relevant educational functions.
These systems may process account details, course enrolments, learning activity, order-related information and technical data as necessary to provide their functionality.
The extent of processing depends on the configuration of our website, the installed plugins and the relevant service arrangements.
6.3. Payment service provider
Stripe processes payment-related information as described in Section 5.
6.4. Invoicing and accounting software
Fashype uses Fakturownia, an invoicing and billing software provider, to support the preparation, issuance and management of sales documents relating to purchases made through our website.
Depending on the transaction and the information required for the relevant document, we may transfer the following personal data to Fakturownia:
- Customer’s name and email address.
- Billing address.
- Business name and business address, where applicable.
- Tax identification number or VAT identification number, where required.
- Order number and purchase date.
- Description of the purchased course or digital product.
- Price, currency and applicable VAT or other tax information.
- Information required to issue corrective invoices, document refunds or maintain accounting records.
We use Fakturownia to prepare and manage invoices and other applicable sales documents, support accounting processes and fulfil our legal obligations concerning tax and financial documentation.
The legal basis for processing this information is Article 6(1)(b) GDPR where processing is necessary to fulfil the sales contract, and Article 6(1)(c) GDPR where processing is necessary to comply with applicable legal obligations, including accounting and tax requirements.
Fakturownia processes personal data in accordance with the applicable service arrangements and data protection documentation. Depending on the particular processing activity, its role and responsibilities must be assessed under the applicable data protection rules.
Personal data may be retained within the invoicing system for as long as necessary to provide the service and for the periods required by applicable accounting, tax and other legal obligations.
For further information about Fakturownia and its data protection practices, please visit its official website:
6.5. Email and customer support services
Email providers and communication tools may process contact details and message content to deliver communications, confirm purchases and respond to customer requests.
6.6. Accounting, tax and professional advisers
Where necessary, we may disclose relevant information to accountants, tax advisers, legal advisers or other professional service providers for accounting, tax compliance, legal advice or the establishment, exercise or defence of legal claims.
6.7. Public authorities and legal recipients
We may disclose personal data to competent authorities, courts, law enforcement agencies or other recipients where required by law or necessary to establish, exercise or defend legal claims.
We do not sell personal data to third parties.
We do not disclose personal data to third parties for their independent marketing purposes without an appropriate legal basis.
- INTERNATIONAL DATA TRANSFERS
Some of our service providers, including payment and technology providers, may process personal data outside the European Economic Area (EEA).
Where personal data is transferred to a country outside the EEA, we will ensure that the transfer complies with applicable data protection law.
Depending on the circumstances, an international transfer may rely on:
- An adequacy decision adopted by the European Commission.
- Appropriate safeguards, such as Standard Contractual Clauses approved by the European Commission.
- Another lawful transfer mechanism permitted under the GDPR.
Where required, we will assess the relevant transfer arrangements and implement additional safeguards.
Information about international transfers carried out by individual service providers may also be available in their privacy documentation.
Where personal data is processed through Fakturownia or its technical service providers, any transfer of personal data outside the European Economic Area will be carried out in accordance with applicable data protection law. Where required, appropriate safeguards will be implemented.
- DATA RETENTION
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, meet legal obligations, resolve disputes and protect our legitimate interests.
The retention period depends on the type of information and the applicable legal requirements.
8.1. Account and course information
Account information and course access records are generally retained while your account remains active and for as long as necessary to administer purchased products, provide support or meet applicable legal obligations.
If an account is closed, we may retain limited information where necessary for legal compliance, accounting, security or the establishment, exercise or defence of legal claims.
8.2. Order and accounting records
Order, payment and accounting records are retained for the periods required by applicable tax and accounting laws.
Certain accounting and tax records in Poland may need to be retained for five years, calculated in accordance with the applicable statutory rules. The precise retention period depends on the record and the legal obligation concerned.
8.3. Customer support and complaints
Correspondence and complaint records are retained for as long as reasonably necessary to resolve the matter and, where appropriate, for the limitation period applicable to potential claims.
8.4. Technical and security logs
Technical and security logs are retained for the period necessary to maintain website security, investigate incidents and troubleshoot technical problems, subject to the applicable retention settings and legal requirements.
8.5. Marketing data
Marketing information is retained until you withdraw consent, object to processing where applicable, or the relevant purpose no longer exists, subject to any limited records we must retain to demonstrate consent or respect an unsubscribe request.
8.6. Cookies
Cookie retention periods depend on the specific cookie or similar technology. Further information should be provided in our Cookie Policy and, where applicable, through the website’s cookie consent interface.
When personal data is no longer necessary and no legal basis for further retention exists, we will delete it or anonymise it, as appropriate.
8.7. Invoicing and accounting records
Invoices, corrective invoices and related transaction records may be stored in Fakturownia for the period necessary to manage sales documentation and comply with applicable accounting and tax obligations.
The retention period depends on the type of document and the legal requirements applicable to the transaction. Where a statutory retention obligation applies, we will retain the relevant records for the required period, even if a customer requests the deletion of their account.
- YOUR RIGHTS UNDER THE GDPR
Subject to the conditions and exceptions set out in applicable law, you may have the following rights in relation to your personal data:
9.1. Right of access
You may request confirmation as to whether we process your personal data and obtain a copy of that data.
9.2. Right to rectification
You may request the correction of inaccurate personal data or the completion of incomplete information.
9.3. Right to erasure
You may request the deletion of your personal data where the legal requirements for erasure are met.
This right is not absolute. We may need to retain certain information to comply with legal obligations or establish, exercise or defend legal claims.
9.4. Right to restriction of processing
You may request restriction of processing in circumstances provided for by the GDPR.
9.5. Right to data portability
Where the legal requirements are met, you may request the personal data you have provided to us in a structured, commonly used and machine-readable format, or request that it be transmitted to another controller where technically feasible.
9.6. Right to object
Where we process your personal data on the basis of legitimate interests, you may object on grounds relating to your particular situation.
You have the right to object at any time to processing of your personal data for direct marketing purposes.
9.7. Right to withdraw consent
Where processing is based on consent, you may withdraw your consent at any time.
Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
9.8. Right to lodge a complaint
You have the right to lodge a complaint with a competent supervisory authority if you believe that our processing of your personal data infringes applicable data protection law.
In Poland, the competent supervisory authority is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO).
Website: https://uodo.gov.pl/
9.9. How to exercise your rights
To exercise your rights, contact:
Email: [email protected]
Please describe your request clearly so that we can identify the relevant data and respond appropriately.
We may request additional information where reasonably necessary to verify your identity and protect your personal data against unauthorised disclosure.
We will respond within the time limits required by the GDPR. In general, requests must be addressed without undue delay and within one month, subject to the applicable rules allowing an extension in certain circumstances.
- COOKIES AND SIMILAR TECHNOLOGIES
Fashype may use cookies and similar technologies to support the website’s functionality and, where applicable, analyse website usage or deliver marketing services.
Cookies are small files stored on your device that may help a website remember preferences, maintain sessions or perform other functions.
Depending on the configuration of the website, cookies and similar technologies may fall into the following categories:
- Strictly necessary cookies: required for essential website functions, security, account authentication or checkout.
- Functional cookies: used to remember preferences or improve functionality.
- Analytics cookies: used to understand how visitors interact with the website.
- Marketing cookies: used for advertising, campaign measurement or related marketing purposes.
Strictly necessary technologies may be used where legally permitted without consent.
Non-essential cookies and similar technologies will be activated only after valid consent has been obtained where required by applicable law.
You can manage your preferences through the website’s cookie consent interface, where available. You can also adjust cookie settings in your browser, although disabling certain cookies may affect website functionality.
For further information, please consult our Cookie Policy:
https://fashype.com/cookie-policy/
The actual cookies used on Fashype depend on the services and plugins currently installed and enabled. The website’s cookie documentation and consent settings should reflect the actual implementation.
- DATA SECURITY
We take reasonable technical and organisational measures to protect personal data against accidental loss, destruction, alteration, unauthorised disclosure or access.
Depending on the relevant systems and processing activities, these measures may include access controls, authentication, software updates, security monitoring, secure transmission and appropriate data access restrictions.
Payment information processed directly by Stripe is subject to the applicable security measures and arrangements of the payment provider.
However, no method of transmission or electronic storage can be guaranteed to be completely secure.
If we become aware of a personal data breach, we will assess the incident and fulfil any notification obligations required by applicable law.
- CHILDREN’S PRIVACY
Fashype’s services are intended for users who are legally capable of entering into the relevant contracts under applicable law.
We do not knowingly collect personal data from children in circumstances where doing so would be unlawful.
Where parental or guardian authorisation is required by applicable law for a particular processing activity, we will comply with the relevant requirements.
If you believe that a child has provided personal data to us unlawfully, please contact [email protected] so that we can assess the situation and take appropriate action.
- THIRD-PARTY WEBSITES AND SERVICES
Our website may contain links to third-party websites or use third-party services.
When you follow an external link, the privacy practices of the third-party website or service will apply to the relevant interaction.
We do not control the privacy policies of independent third parties. We encourage you to review their privacy documentation before providing personal data directly to them.
This does not affect our own responsibilities for personal data processed through Fashype.
- AUTOMATED DECISION-MAKING
We may use technical and security systems provided by our service providers to detect suspicious activity, prevent fraud or support payment authentication.
Where these systems involve automated processing of personal data, the relevant processing will be carried out in accordance with applicable law.
We do not intend to make decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you, unless an applicable legal basis and the required safeguards are in place.
Where applicable, you will be informed of the relevant processing and your rights under the GDPR.
- CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy to reflect changes in our services, website configuration, payment arrangements, data processing practices or applicable law.
The latest version will be published on:
https://fashype.com/privacy-policy-2/
The “Last updated” date at the beginning of the document indicates when the policy was most recently revised.
Where required by law, we will provide additional information or notice about material changes.
- CONTACT
If you have any questions about this Privacy Policy, our data processing practices or the exercise of your rights, please contact:
Tone Creation Studio — Fashype
Powstania Warszawskiego 15
31-539 Kraków
Poland
Email: [email protected]
Website: https://fashype.com