Data Deletion Policy

Latest update: 20/08/2026

This page explains how to ask us to delete your personal data, what happens when you do, and the cases where the law does not let us delete everything. It sits alongside our Privacy Policy, which describes everything else we do with your data.

1. Who to ask

• Retrobroker SP. Z O.O.
• Address: Sielska 45A, 10-801 Olsztyn, warmińsko-mazurskie, Poland
• Email: [email protected]

One email is enough. You do not need a form, a template or a reason.

2. Your right to erasure

Under Article 17 of the GDPR you can ask us to erase your personal data, and we must do it where one of these applies:

• We no longer need the data for the purpose we collected it for.
• You withdraw the consent the processing was based on, and there is no other basis for it.
• You object to processing based on our legitimate interests, and there is no overriding legitimate ground for us to continue.
• You object to processing for direct marketing. Here your right is absolute — we stop, always.
• The data has been processed unlawfully.
• Erasure is required to comply with a legal obligation.
• The data was collected from a child in connection with online services.

3. How to make a request

Email [email protected] and tell us what you want erased. It helps if you say:

• the email address or account the data belongs to;
• whether you want everything erased or only something specific — for example an old delivery address, or your marketing consent;
• the order number, if your request concerns a particular order.

Identity check. If we have reasonable doubt that the request comes from you, we will ask for enough information to be sure — usually confirmation from the email address on the account. We ask for as little as possible, and we do not require identity documents for a routine request. This protects you: it stops somebody else deleting your data or extracting it.

You can also ask us in any other way — including by post, or in the middle of an ordinary support conversation — and it counts. Email is simply the fastest.

4. How long it takes

We act without undue delay and within one month of receiving your request.

For genuinely complex or numerous requests we may extend by up to two further months. If we do, we will tell you inside the first month and explain why.

When we are finished we confirm in writing what we erased and what we had to keep, and why.

5. What we cannot delete, and why

Erasure is a strong right, but it is not absolute. The GDPR itself allows us to keep data where we still need it for specific reasons. In practice, these are the ones that come up:

• Invoices and accounting records. Polish tax and accounting law requires us to keep records of completed sales — including your name, address and what you bought — for 5 years from the end of the calendar year in which the tax became due. We cannot delete these on request, and neither can anyone else. This is a legal obligation under GDPR Article 17(3)(b).
• Open orders. While an order is in progress we need your data to deliver it. Ask again once it has arrived.
• Live guarantees and memberships. If you hold a guarantee certificate or an active 1-UP Club membership, we keep the records that make it work for as long as it runs. Deleting them would destroy the right they represent.
• Claims and disputes. Where data is needed to establish, exercise or defend a legal claim — an unresolved complaint, a chargeback, a warranty dispute — we keep it until the matter and the limitation period end. This is GDPR Article 17(3)(e).
• Suppression records. If you unsubscribe or object to marketing, we must keep a minimal record of your email address on a suppression list. Deleting that record entirely would mean we could not reliably keep you off the list. It is used for nothing else.

Where we have to keep something, we restrict it: it is locked to the legal purpose that justifies it, taken out of everyday use, and deleted as soon as that purpose ends.

6. What actually happens to the rest

Data we can erase is erased from our live systems. Specifically:

• Your account, profile and saved addresses are deleted.
• Your marketing consents are withdrawn and your address goes on the suppression list described above.
• Analytics and error-monitoring records tied to you are deleted or anonymised.
• Order records we must retain are anonymised where possible — reduced to the accounting minimum, with everything else stripped out.
• Backups are not rewritten immediately. Data may survive in encrypted backups until they age out on their normal rotation, after which it is gone. During that window it is not used for anything.

Erasure is permanent. We cannot restore a deleted account, its order history, or the savings and guarantee records attached to it. Please download anything you want to keep first.

7. Closing your account

If you simply want to stop using the shop, you can ask us to close your account without erasing everything — your invoices stay where the law requires and nothing else stays live. Say which you want; if you do not say, we will ask before doing anything irreversible.

Closing an account ends any 1-UP Club membership attached to it, on the terms set out in the membership terms. Store credit has no cash value and lapses when the account closes.

8. Related rights

Erasure is one of several rights you have. You can also ask us to correct data, get a copy of it, ask us to stop a particular use, or receive it in a portable format. Our Privacy Policy sets all of them out, and the same email address handles all of them.

If you think we have handled a deletion request badly, please tell us first — we would rather fix it. You can also complain to the Polish supervisory authority:

Prezes Urzędu Ochrony Danych Osobowych (UODO)
ul. Stawki 2
00-193 Warszawa, Poland

If you live in another EU country, you may complain to your own national authority instead.

9. Changes to this policy

We may update this page; the date of the latest revision is at the top. Your rights under the GDPR do not depend on what this page says — they come from the law, and this page only explains how we honour them.