At Fluffy Friends Lab S.A., we are committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or contact us regarding our B2B manufacturing services.

This Policy adheres to the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation - "GDPR").

1. Data Controller

The Controller of your personal data is:

Fluffy Friends Lab S.A. based in Gdańsk, Poland Address: Jaśkowa Dolina 132/20, Gdańsk, Poland

(hereinafter referred to as the "Controller", "we", "us", or "our").

If you have any questions regarding this Privacy Policy or the processing of your personal data, you can contact us via email at: contact@fluffyfriendslab.com.

2. Personal Data We Collect

We collect personal data that you voluntarily provide to us, primarily through contact forms, emails, or phone calls when inquiring about our services.

The types of personal data we may process include:

• First name and surname

• Company name

• Job title

• Email address

• Phone number

• Any other information you choose to provide in the content of your message to us.

Additionally, when you visit our website, we automatically collect certain technical data via cookies and similar technologies, such as your IP address, browser type, device information, and operating system.

3. Purposes and Legal Basis for Processing

We process your personal data for specific purposes based on valid legal grounds defined in the GDPR:

A. To respond to inquiries and handle contact requests: If you contact us via our website form or email to ask about our private label services, we process your data to answer your questions and provide the requested information.

• Legal basis: Your consent expressed by initiating contact (Article 6(1)(a) GDPR), or our legitimate interest in building business relationships (Article 6(1)(f) GDPR).

B. To take steps prior to entering into a contract and contract performance: If you are interested in our manufacturing services, we process data to prepare offers, negotiate terms, and fulfill concluded B2B agreements.

• Legal basis: Necessity for the performance of a contract or to take steps at your request prior to entering into a contract (Article 6(1)(b) GDPR).

C. For B2B marketing purposes: We may process your data to maintain business relations and inform you about our services relevant to your business.

• Legal basis: Our legitimate interest in direct marketing of our own services (Article 6(1)(f) GDPR). If we send electronic newsletters, we do so based on your separate, explicit consent.

D. To ensure website security and improve functionality: We use technical data to administer the website, troubleshoot issues, and ensure security.

• Legal basis: Our legitimate interest in ensuring network and information security (Article 6(1)(f) GDPR).

4. Data Recipients

To run our business effectively, we may share your data with trusted third-party service providers who act as data processors on our behalf. These include:

• Hosting and IT service providers: Specifically Wix.com Ltd., which hosts this website.

• Email service providers and communication tools.

• External accounting and legal firms (only if necessary for contract fulfillment or legal compliance).

All our partners are bound by data processing agreements and are obligated to protect your data in compliance with GDPR standards. Some data may be transferred outside the European Economic Area (EEA), in which case we ensure appropriate safeguards, such as Standard Contractual Clauses, are in place.

5. Data Retention Period

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

• Data related to general inquiries will be processed until your query is resolved or you withdraw your consent.

• Data related to contracts will be retained for the duration of the contract and thereafter for the period required by tax laws and statutes of limitations for claims (typically 5 to 6 years in Poland).

6. Your Rights Under GDPR

You have the following rights regarding your personal data:

• Right of access: To request a copy of the personal data we hold about you.

• Right to rectification: To ask us to correct inaccurate or incomplete data.

• Right to erasure ("Right to be forgotten"): To ask us to delete your personal data where there is no good reason for us to continue processing it.

• Right to restriction of processing: To ask us to suspend the processing of your data in certain scenarios.

• Right to data portability: To request the transfer of your data to you or a third party in a structured, commonly used format.

• Right to object: To object to our processing of your data where we are relying on a legitimate interest (or those of a third party), and you feel it impacts your fundamental rights. You also have the right to object at any time to processing for direct marketing purposes.

• Right to withdraw consent: Where we rely on consent to process your data, you have the right to withdraw it at any time. This will not affect the lawfulness of any processing carried out before you withdrew your consent.

To exercise any of these rights, please contact us at contact@fluffyfriendslab.com.

You also have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement. In Poland, the supervisory authority is the President of the Personal Data Protection Office (UODO).

7. Cookies Policy

Our website, built on the Wix platform, uses cookies and similar technologies. Cookies are small text files stored on your device when you visit a website.

We use the following types of cookies:

• Essential Cookies: Necessary for the website to function correctly and securely.

• Functional Cookies: Enable the website to remember your choices (e.g., language preference) to provide enhanced features.

• Analytical Cookies: Help us understand how visitors interact with our website by collecting and reporting information anonymously.

You can manage or disable cookies at any time through your browser settings. Please note that disabling essential cookies may affect the functionality of the website.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any changes will be posted on this page with an updated effective date. We encourage you to review this Policy periodically.