Privacy policy

Last updated: 3 November 2026.

Your privacy matters to us. This policy explains what information we collect when you visit or buy from rollintohome.com, why we collect it, who we share it with, and the rights you have over your data. It applies to all visitors and customers, including those in the European Union under the General Data Protection Regulation (GDPR).

1. Who we are

RollinToHome is a trading name of Spectro Web Solutions sp. z o.o., a company registered in Poland at ul. Władysława Pytlasińskiego 16 lok. 13, 00-777 Warszawa, Poland. Company registration number (KRS): 0001052134. Tax ID (NIP): 9512575211. EU VAT: PL9512575211. REGON: 526092064.

For any privacy-related question, you can reach us through our contact page or by email at support@rollintohome.com.

2. What information we collect

You give us directly

• Account & order information: name, shipping address, billing address, email, phone (optional)
• Order details: what you bought, custom-order photos and instructions you share with us
• Communication: messages you send via our contact form, email, or WhatsApp
• Newsletter: your email address if you subscribe

We collect automatically

• Browser & device: IP address, browser type, device, operating system, language
• Usage: pages you visit, time on site, how you got to our site (referrer)
• Cookies: see section 5 below

We never collect

Your card or payment details. These go directly from your browser to Stripe, our payment processor. We only receive a token confirming the payment succeeded.

3. Why we collect it (and our legal basis under GDPR)

• To process your orders. Legal basis: performance of a contract.
• To deliver your purchases. Legal basis: performance of a contract.
• To respond to your messages. Legal basis: legitimate interest.
• To send newsletter and marketing emails. Legal basis: your consent (you can unsubscribe at any time).
• To improve our site and products. Legal basis: legitimate interest.
• To comply with tax and accounting law. Legal basis: legal obligation.
• To prevent fraud and protect our site. Legal basis: legitimate interest.

4. Who we share your data with

We share only what is strictly necessary, only with trusted processors. We never sell your data.

• Stripe and PayPal: payment processing (cards, Apple Pay, Google Pay, PayPal). Stripe’s privacy policy.
• Shipping carriers (for example DHL, FedEx, or your local post): your name and address, used to deliver your order.
• Brevo (EU-based email platform, France): sends our order-related and newsletter emails. Your data stays within the EU. Brevo’s privacy policy.
• SiteGround: our website hosting provider, which keeps the site online and stores your data on secure servers. SiteGround’s privacy policy.
• Google Analytics: measures site traffic so we can understand which pages are useful. Data is processed by Google in the United States. Google’s privacy policy.
• Meta (Facebook & Instagram): the Meta Pixel helps us measure ad performance and show relevant ads to people who have visited our site. Data is processed by Meta in the United States. Meta’s privacy policy.
• Pinterest: the Pinterest Tag helps us measure ad performance and reach people who may be interested in our products. Data is processed by Pinterest in the United States. Pinterest’s privacy policy.
• Tax authorities: when legally required for accounting and tax obligations.

Google, Meta, and Pinterest are based in the United States. These tools only run after you give consent through our cookie banner. If you decline, they are not loaded.

5. Cookies & tracking

We use cookies for three purposes:

• Essential cookies: keep your shopping cart working, log you in, and remember preferences. These cannot be disabled.
• Analytics cookies: let us see, in aggregate, which pages are popular. Optional, you choose.
• Marketing cookies: if you opt in, we may show you relevant ads on other sites. Optional.

On your first visit, our cookie banner asks for your consent for analytics and marketing cookies. You can change your choice anytime via the Cookie Settings link in our footer.

6. Your rights

Under GDPR (and similar laws in the UK, California, and elsewhere), you have the right to:

• Access: request a copy of the personal data we hold about you.
• Rectification: correct anything that is wrong.
• Erasure (“right to be forgotten”): ask us to delete your data, subject to legal obligations.
• Restriction: ask us to pause processing while we investigate a concern.
• Portability: get your data in a machine-readable format.
• Objection: object to processing based on legitimate interest.
• Withdraw consent: for anything we process with your consent (newsletter, marketing cookies).

To exercise any of these rights, send us a message through our contact page. We will respond within 30 days.

If you are unhappy with how we have handled your data, you have the right to lodge a complaint with your local data protection authority. EU residents can find theirs at edpb.europa.eu.

7. How long we keep your data

• Order and accounting records: 5 years (required by Polish tax and accounting law).
• Account information: until you ask us to delete it, then 30 days for backup retention.
• Newsletter subscribers: until you unsubscribe, then 30 days.
• Support messages: 2 years after the last interaction.
• Analytics data: 14 months (Google Analytics default).

8. Security

We protect your information using:

• SSL/TLS encryption across the entire site
• Encrypted database storage
• Access limited to people who need it
• Regular security updates and backups
• Payment processing by Stripe (PCI-DSS Level 1)

No system is 100% secure, but we take this seriously and would notify affected users promptly in the unlikely event of a data breach.

9. Changes to this policy

We may update this policy occasionally, for example when we add new tools or when laws change. We will always update the “Last updated” date at the top, and for significant changes we will email you (if we have your address) or post a notice on the site.

Privacy question?

Send us a message through our contact page and we will get back to you within 24 hours.