• Free US & Canada shipping on orders from US$469.99
  • Shipping within 24 h on business days
  • 30-day returns
  • 24-month warranty

Privacy and Cookie Policy

Last updated: 10 October 2026

Data Controller

The controller of your personal data is:

HELP BAG Sp. z o.o.

ul. Sadowa 12, 43-100 Tychy

Poland

NIP 6462998881 REGON 523157283 KRS 0000992798

hello@helpbag.eu

For all matters concerning personal data, write to the above email address.

Purposes and Legal Bases for Processing

Orders

First and last name, email address, phone number, delivery and billing addresses, invoice details, and order and payment information. If you purchase through a sales platform, we receive from it the data needed to fulfil the order.

Legal basis: performance of the contract and legal obligations, e.g. tax and accounting (Art. 6(1)(b) and (c) GDPR).

Saved Cart

Cart contents and data entered in the order form before the order is placed. We save them so that an unfinished order can be resumed without entering the data again.

Legal basis: legitimate interest in enabling the order to be completed (Art. 6(1)(f) GDPR).

Customer Account

Data provided upon registration and order history.

Legal basis: performance of the contract (Art. 6(1)(b) GDPR).

Contact and Customer Service

The content of messages and data you provide to us by email, phone or chat.

Legal basis: legitimate interest in responding to messages, and for order-related matters performance of the contract (Art. 6(1)(f) and (b) GDPR).

Complaints, Returns and Claims

Order and complaint data.

Legal basis: legal obligations and legitimate interest in establishing, pursuing and defending legal claims (Art. 6(1)(c) and (f) GDPR).

Product Reviews

Rating, review content, name, email address and IP address. Reviews can only be added by people who have purchased the product.

Legal basis: legitimate interest in collecting and publishing product reviews (Art. 6(1)(f) GDPR).

Marketing

The first name and email address provided when signing up for the newsletter or downloading a guide, as well as the email address from the order form. We send newsletters and offers to these addresses, and to the address from an order that was not placed, reminders about that order. To assess the effectiveness of these messages, we check which links in them were clicked and, where the law of your country permits this without consent, also whether the message was opened. You can unsubscribe from marketing messages at any time, e.g. via a link in the message.

Legal basis: your consent or, if the law of your country permits it, legitimate interest in reminding you of an order you have started, informing customers about similar products and assessing the effectiveness of messages (Art. 6(1)(a) or (f) GDPR).

Protection against abuse

IP address and device and browser data to protect the store and payments against misuse.

Legal basis: legitimate interest (Art. 6(1)(f) GDPR).

Statistics and Advertising

Identifiers of cookies and similar technologies, information about store usage and the source of the visit, IP address and browser data, as well as the email address and phone number in the form of a cryptographic hash, if you enter them in a form in the store or log in. When you place an order, advertising providers also receive your first name, last name and customer ID in the form of a hash, as well as your country, region, city and postal code. This data is used to measure campaign effectiveness.

Legal basis: consent or, where the law does not require prior consent, legitimate interest against which you may object (Art. 6(1)(a) or (f) GDPR). You will find details in the section Cookies and Similar Technologies.

Providing data is voluntary, but without the data required for the order we cannot process it, and invoice data are required by tax regulations.

References to the GDPR include corresponding provisions of other countries, in particular UK GDPR and the Swiss Federal Act on Data Protection.

Data Recipients

We share data only to the extent necessary for a given purpose:

  • payment operators, including providers of deferred and instalment payments
  • carriers and collection point operators
  • IT service providers: hosting, website protection, email, sales systems and chat
  • providers of statistical and advertising tools
  • sales platforms, if you purchase through them
  • public authorities, when required by law

Payment operators, carriers and sales platforms act as independent controllers under their own privacy policies. For deferred and instalment payments, the payment provider may independently assess your creditworthiness.

Data Transfers Outside the European Economic Area

Some providers process data outside the European Economic Area, in particular in the USA. This is done on the basis of adequacy decisions, including the EU-US Data Privacy Framework and its equivalents for the United Kingdom and Switzerland, or standard contractual clauses. You can obtain a copy of the safeguards applied upon request sent to the email address provided in the Data Controller section.

Data Retention Period

Orders and Accounting Documents

For the period required by tax and accounting regulations.

Legal Claims

Until the expiry of limitation periods.

Customer Account

Until account deletion.

Saved Cart

90 days from the last change to the cart.

Reviews

Until review deletion.

Marketing

Until withdrawal of consent or raising of an objection.

Statistics and Advertising

Until withdrawal of consent or raising of an objection.

We delete advertising identifiers saved with an order 90 days after the order is placed and keep information about the source of the visit together with the order.

Correspondence

For the duration of handling the matter and any possible legal claims.

Protection against abuse

For the time needed to detect and investigate abuse.

Cookies

From the end of the visit up to 25 months, depending on the cookie.

Data in Browser Storage

Until the tab is closed or they are deleted in the browser.

Your Rights

You have the right to:

  • access to data
  • rectification of data
  • erasure of data
  • restriction of processing
  • data portability
  • withdrawal of consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal

Right to Object

You can object at any time to processing based on our legitimate interest for reasons related to your particular situation, and to direct marketing including profiling for its purposes, without giving reasons.

You may lodge a complaint with the supervisory authority in the country of your habitual residence, place of work, or place of the alleged infringement; in Poland, this is the President of the Personal Data Protection Office.

We do not make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you.

Cookies and Similar Technologies

On the shop website we use cookies and similar technologies, e.g. browser storage and pixels, which store information on your device or read from it.

Functional

Store operation, cart, login, payments, security and remembering your country, currency and cookie settings. We always use them.

Statistical

Measuring traffic and visit sources to improve the store.

Marketing

Measuring advertising effectiveness and tailoring ads to your interests.

In the European Economic Area, we use statistical and marketing cookies only after you have given your consent; without it, Google Analytics only receives visit information sent without cookies. In other countries, we use them by default only when permitted by local law, and you may object at any time. A Global Privacy Control or Do Not Track signal sent by your browser is treated as an objection.

The statistical and advertising tools are Google Analytics and Google Ads (Google), Meta Pixel and Conversions API (Meta), OpenAI Pixel and Conversions API (OpenAI), and Microsoft Clarity (Microsoft), which creates click maps and session recordings.

When collecting data on our site and transferring it to Meta, we act as joint controllers with Meta: we are responsible for informing you of this and, where required by law, for obtaining your consent, while further processing is Meta's responsibility. You may exercise your rights against us or against Meta.

Chat and videos from external services, e.g. YouTube, load only after you click; from that moment, their providers may set their own cookies.

Cookie settings

You can change or withdraw your consent at any time.

You can also set the conditions for storing and accessing cookies in your browser settings.