The website www.glairybrand.com is an e-commerce platform – a website operated by Glairy Brand OÜ, registration code 16562846.
This Privacy Policy applies when the Client uses Glairy Brand OÜ’s website and/or submits their personal data via the website or through other channels.
The data controller responsible for the processing of personal data is Glairy Brand OÜ, registration code 16562846.
Glairy Brand OÜ may authorize other legal entities (authorized processors) to process personal data, provided that a contract has been concluded with such processors, requiring them to keep the processed personal data confidential and to ensure data protection in accordance with legal requirements.
Types of Personal Data Processed
- Name, phone number, and email address;
- Delivery address;
- Bank account number;
- Information on purchased goods and services and payment data (purchase history);
- Customer support information.
Purpose of Personal Data Processing
Personal data is processed for the purpose of fulfilling the purchase and sale agreement concluded with the Client.
Processing is also carried out to comply with legal obligations (e.g., accounting and consumer dispute resolution).
Personal data is used for managing Client orders and delivering goods.
Purchase history data (purchase date, product, quantity, Client information) is used to compile an overview of purchased goods and services and to analyze customer preferences.
The bank account number is used for refunding payments to the Client.
Personal data such as email address, phone number, and Client name are processed to resolve issues related to the provision of goods and services.
Legal Basis
- Processing of personal data takes place for the performance of a contract concluded with the Client.
- Processing is carried out to fulfill legal obligations (e.g., accounting and consumer dispute resolution).
- Data processing is carried out with the Client’s consent for the following activities: marketing, informing about new products, and campaigns of interest to the Client.
Transfer of Personal Data to Authorized Processors
Glairy Brand OÜ keeps Client data obtained during website usage confidential and discloses it to third parties only with the Client’s consent, except where disclosure is required or permitted by law.
The online store user agrees that Glairy Brand OÜ may process their data to provide suitable services, including transferring Client data to persons involved in service provision by Glairy Brand OÜ (e.g., accounting, transportation, payment gateway).
Glairy Brand OÜ transmits the personal data necessary for payment processing to the authorized processor Maksekeskus AS.
Security and Access to Data
The online store implements appropriate physical, organizational, and IT security measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized access, or disclosure.
Transfer of personal data to the online store’s authorized processors takes place based on agreements between the online store and the processors. Authorized processors are required to ensure adequate protection measures during data processing.
Access to and Correction of Personal Data
Clients can access and modify their stored personal data via their online store user account.
If the purchase was made as a guest (without a user account), the Client may submit a request to access or modify their personal data by contacting an authorized representative (employee) of Glairy Brand OÜ.
Withdrawal of Consent
If personal data is processed based on the Client’s consent, the Client has the right to withdraw their consent by notifying customer support via email at glairy@glairybrand.com.
Data Retention
Upon closure of the Client’s online store account, personal data will be deleted unless such data must be retained for accounting purposes or for resolving consumer disputes.
In case of payment or consumer disputes, personal data will be retained until the claim has been satisfied or the limitation period (three years) has expired.
Personal data required for accounting purposes will be retained for seven years.
Deletion
To delete personal data and/or the user account stored in the online store, the Client must send a written request to info@glairybrand.com.
The data will be deleted unless its retention is necessary for accounting or consumer dispute resolution purposes.
Direct Marketing Messages
The Client’s email address is used to send direct marketing messages if the Client has given consent.
If the Client no longer wishes to receive such messages, they can unsubscribe via the link provided in the email header or by contacting customer support at glairy@glairybrand.com.
Dispute Resolution
Disputes related to personal data processing will be resolved through customer support at glairy@glairybrand.com.
The supervisory authority is the Estonian Data Protection Inspectorate, contact: info@aki.ee.