Privacy Policy
1. Introduction
This Privacy Policy explains how Earthwise LTD OÜ (“we,” “our,” “us”) collects, uses, and
protects your personal data when you use our webshop. We are committed to safeguarding your
privacy and complying with the General Data Protection Regulation (GDPR – EU 2016/679).
2. Data Controller The data controller is: Full Spectrum OU Noole 6-11, Tallinn, 10415 [email protected]
3. Personal Data We Collect – Identification data (name, address, phone number, email) – Payment details (processed securely via third-party providers such as Stripe or PayPal; we do not store card details) – Order details (products purchased, order history, shipping address) – Technical data (IP address, browser type, device information, cookies)
4. Purpose of Processing We process your personal data to: – Fulfil and deliver your orders – Process payments securely – Provide customer support and respond to inquiries – Maintain legal and accounting records – Improve our services and website functionality
5. Legal Basis for Processing We rely on the following legal grounds under GDPR: – Contract performance (to process and deliver your orders) – Legal obligation (to comply with tax and accounting laws) – Legitimate interests (to improve services and prevent fraud) – Consent (for marketing emails, if you subscribe)
6. Data Sharing We may share your data with: – Payment processors (e.g., Stripe, PayPal) – Shipping and logistics providers (e.g., DPD, Omniva, DHL) – IT service providers (hosting, email services) We do not sell or rent your personal data to third parties.
7. Data Retention – Order and transaction records: kept for 7 years – Customer support communications: up to 2 years – Marketing email data: until you unsubscribe
8. Your Rights under GDPR You have the right to: – Access your personal data – Correct inaccuracies in your data – Request erasure (“right to be forgotten”) – Restrict or object to processing – Data portability (receive your data in machine-readable format) – Withdraw consent (for marketing) at any time To exercise these rights, contact us at: [email protected].
9. Cookies Our website uses cookies to improve user experience, analyze traffic, and enable certain features. You can manage or disable cookies in your browser settings.
10. Security We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, or disclosure.
11. International Transfers If data is transferred outside the EU (e.g., by third-party processors such as Stripe or PayPal), appropriate safeguards such as Standard Contractual Clauses are applied.
12. Changes to this Privacy Policy We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised “last updated” date.
13. Contact For any questions about this Privacy Policy or how we process your data, contact us at: [email protected]
2. Data Controller The data controller is: Full Spectrum OU Noole 6-11, Tallinn, 10415 [email protected]
3. Personal Data We Collect – Identification data (name, address, phone number, email) – Payment details (processed securely via third-party providers such as Stripe or PayPal; we do not store card details) – Order details (products purchased, order history, shipping address) – Technical data (IP address, browser type, device information, cookies)
4. Purpose of Processing We process your personal data to: – Fulfil and deliver your orders – Process payments securely – Provide customer support and respond to inquiries – Maintain legal and accounting records – Improve our services and website functionality
5. Legal Basis for Processing We rely on the following legal grounds under GDPR: – Contract performance (to process and deliver your orders) – Legal obligation (to comply with tax and accounting laws) – Legitimate interests (to improve services and prevent fraud) – Consent (for marketing emails, if you subscribe)
6. Data Sharing We may share your data with: – Payment processors (e.g., Stripe, PayPal) – Shipping and logistics providers (e.g., DPD, Omniva, DHL) – IT service providers (hosting, email services) We do not sell or rent your personal data to third parties.
7. Data Retention – Order and transaction records: kept for 7 years – Customer support communications: up to 2 years – Marketing email data: until you unsubscribe
8. Your Rights under GDPR You have the right to: – Access your personal data – Correct inaccuracies in your data – Request erasure (“right to be forgotten”) – Restrict or object to processing – Data portability (receive your data in machine-readable format) – Withdraw consent (for marketing) at any time To exercise these rights, contact us at: [email protected].
9. Cookies Our website uses cookies to improve user experience, analyze traffic, and enable certain features. You can manage or disable cookies in your browser settings.
10. Security We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, or disclosure.
11. International Transfers If data is transferred outside the EU (e.g., by third-party processors such as Stripe or PayPal), appropriate safeguards such as Standard Contractual Clauses are applied.
12. Changes to this Privacy Policy We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised “last updated” date.
13. Contact For any questions about this Privacy Policy or how we process your data, contact us at: [email protected]