Privacy Policy

Who We Are

This Privacy Policy describes how girocroft (girocroft Osaühing) collects, uses, and protects your personal information when you visit our website and purchase our preserved rose glass dome gifts. We are committed to protecting your privacy and ensuring you have a positive experience on our site. We take our responsibility as a data controller seriously and follow applicable data protection regulations.

Information We Collect

We collect various types of information to provide and improve our services:

• Contact Information: When you contact us or make a purchase, we collect your name, email address, phone number, and shipping address.
• Payment Information: We collect billing information necessary to process your orders, though payment processing is handled by secure third-party providers.
• Usage Data: We automatically collect information about how you interact with our website, including pages visited, time spent, and browser type.
• Cookies and Tracking: We use cookies and similar technologies to enhance your browsing experience and understand user behavior.
• Communication Data: When you contact us via email or forms, we retain your messages and responses.

Legal Basis for Processing

We process your personal information based on several legal grounds. When you purchase our products or contact us, we process your data based on the performance of our contract with you. For marketing communications and website improvements, we rely on your consent and our legitimate interests in operating and improving our business. We also process data when required by law. In all cases, we ensure that your data is processed fairly and transparently, and only for purposes that you would reasonably expect.

How We Use Your Information

We use the information we collect for the following purposes:

• Processing and fulfilling your orders for preserved rose glass dome gifts
• Sending order confirmations, shipping updates, and customer service communications
• Responding to your inquiries and providing support
• Improving our website, products, and services based on user feedback and behavior
• Personalizing your experience and showing you relevant products
• Conducting analytics to understand website performance and user preferences
• Complying with legal obligations and protecting our rights
• Preventing fraud and enhancing security

Data Retention

We retain your personal information only as long as necessary for the purposes outlined in this policy:

• Order and Transaction Data: Retained for up to 7 years for accounting and legal compliance purposes.
• Contact Form Messages: Retained for up to 24 months after your last interaction with us, unless you request deletion.
• Analytics and Cookie Data: Retained for up to 14 months from the date of collection.
• Email Communications: Retained for up to 36 months unless you unsubscribe or request removal.
• Server Logs: Retained for up to 12 months for security and troubleshooting purposes.

After these periods, we securely delete or anonymize your data. If you request deletion of your data, we will comply within 30 days, except where we are legally required to retain information.

Your Rights

You have important rights regarding your personal information. You can request access to your data and receive a copy of what we hold about you. You have the right to correct any inaccurate information and request deletion of your data, subject to legal requirements. You can restrict how we process your information and object to processing for marketing purposes. You have the right to data portability, meaning you can request your information in a portable format. You can withdraw your consent at any time for activities based on consent. To exercise any of these rights, please contact us using the information provided below. We will respond to your request within 30 days.

Cookies and Tracking Technologies

We use cookies to enhance your browsing experience and understand how you use our website. Cookies are small files stored on your device that help us remember your preferences and recognize you when you return. We use essential cookies for website functionality, analytics cookies to measure performance, and marketing cookies to show you relevant content. You can control cookie settings through your browser, though disabling some cookies may affect website functionality. For detailed information about the cookies we use and how to manage them, please refer to our Cookie Policy.

Data Sharing and Third Parties

We do not sell or rent your personal information to third parties. We only share your data with trusted service providers who help us operate our website and fulfill orders, such as payment processors, shipping companies, and hosting providers. These partners are bound by confidentiality agreements and only use your data to provide the services we request. We may disclose information when required by law or to protect our rights and safety. We ensure all data transfers comply with applicable privacy regulations.

Security

We implement industry-standard security measures to protect your personal information from unauthorized access, alteration, and disclosure. Our website uses SSL encryption for secure data transmission. We maintain secure servers and restrict access to personal information to authorized personnel only. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security. We encourage you to use strong passwords and contact us immediately if you suspect any unauthorized access to your account.

International Transfers

Your personal information may be transferred to, stored in, and processed in countries other than your country of residence, including countries that may not have the same level of data protection. When we transfer data internationally, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by relevant authorities. By using our website and services, you consent to the transfer of your information as described in this policy.

Supervisory Authority

If you believe we have violated your privacy rights or data protection regulations, you have the right to lodge a complaint with the data protection authority in Estonia. You can contact the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) at their official office. Filing a complaint does not prevent you from seeking other legal remedies. We encourage you to contact us first to resolve any concerns, but you have the right to pursue complaints with the supervisory authority.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of significant changes by posting the updated policy on our website and updating the "Last updated" date. Your continued use of our website after changes constitutes your acceptance of the updated policy. We encourage you to review this policy regularly to stay informed about how we protect your information.