Minimal Brands

Legal

Privacy policy

How Minimal Brands collects, uses and stores personal data of trade buyers, brand owners and website visitors under the GDPR (Regulation (EU) 2016/679).

Last updated: 11 August 2026

1. Who controls your data

The controller of your personal data is Minimal Brands sp. z o.o. [do potwierdzenia / to confirm], [ulica i numer, kod pocztowy, miasto — do potwierdzenia / to confirm], Poland, tax ID [NIP — do potwierdzenia / to confirm], e-mail b2b@minimalbrands.co, phone +48 516 733 551.

We have not appointed a Data Protection Officer. Send every data-related request to the address above and mark it “GDPR”.

2. What we collect

  • Trade account applications: registered company name, trading name, address, delivery address, tax numbers (NIP, VAT, EORI, company number), contact person, role, work e-mail, phone, website, business type, number of outlets, sales channels, product categories, expected order value, free-text notes.
  • Contact form: name, company, e-mail, message and the page you sent it from.
  • Meeting bookings: the data you enter in the Google Calendar booking form.
  • E-mail and phone correspondence: everything you choose to send us.
  • Technical data: IP address, browser and device type, pages viewed, referring source, and an approximate country used to suggest your market.

3. Why we process it, and on what legal basis

  • To verify a company and open a trade account — Art. 6(1)(b) GDPR (steps prior to a contract) and Art. 6(1)(c) (tax and accounting duties).
  • To answer enquiries and run trade correspondence — Art. 6(1)(f), our legitimate interest in responding to business contacts.
  • To send price lists, new listings and trade show invitations — Art. 6(1)(a), your consent, plus Art. 10 of the Polish Act on the Provision of Electronic Services and Art. 172 of the Polish Telecommunications Law where applicable. You can withdraw consent at any time.
  • To keep the site secure, prevent abuse and measure traffic — Art. 6(1)(f), our legitimate interest.
  • To defend or pursue claims and meet statutory retention duties — Art. 6(1)(f) and Art. 6(1)(c).

4. Is providing data mandatory

Providing company and contact data in the trade account form is voluntary but necessary to open the account — without it we cannot verify the business or set trade prices. Marketing consent is entirely optional and does not affect account approval.

5. Who we share data with

  • Hosting, database and e-mail infrastructure providers that run this website and our notification e-mails.
  • Google Ireland Limited, for meeting bookings made through our calendar link.
  • Accounting, legal and debt-collection advisers, and transport partners where an order requires it.
  • Public authorities where the law requires it.

Every processor acts on a written data processing agreement and only on our instructions. We do not sell personal data.

6. Transfers outside the EEA

Some providers may process data outside the European Economic Area. Where that happens, the transfer is covered by the European Commission's Standard Contractual Clauses or an adequacy decision. Ask us for a copy of the safeguards at any time.

7. How long we keep it

  • Trade account applications that do not become accounts: 12 months from the last contact.
  • Active trade accounts: for the duration of cooperation and 6 years afterwards, in line with tax and limitation periods.
  • Contact form messages: 24 months from the last message.
  • Marketing consent records: until you withdraw consent, plus 3 years for evidentiary purposes.
  • Server and security logs: up to 12 months.

8. Your rights

  • Access to your data and a copy of it.
  • Rectification of inaccurate or incomplete data.
  • Erasure, where we no longer have a basis to keep it.
  • Restriction of processing.
  • Data portability, for data processed on consent or a contract.
  • Objection to processing based on our legitimate interest, including profiling.
  • Withdrawal of consent at any time, without affecting processing done before the withdrawal.

Send any request to b2b@minimalbrands.co. We reply within 30 days. You can also lodge a complaint with the President of the Personal Data Protection Office (Prezes UODO, ul. Stawki 2, 00-193 Warszawa) or the supervisory authority in your country — in the UK, the Information Commissioner's Office.

9. Automated decisions and profiling

We do not make decisions about you by automated means alone and we do not profile you for advertising purposes. Trade accounts are reviewed by a person.

10. Cookies

This site uses cookies and local storage. Non-essential categories load only after you accept them in the cookie banner. See our cookie policy for the full list and how to change your choice.

11. Changes to this policy

We update this policy when our processing changes. The current version and its date are always published on this page.

Other documents

Questions about your data?

Write to b2b@minimalbrands.co. We answer data requests within 30 days.

Open a trade account