Privacy policy
1. General Provisions
1.1. This Privacy Policy governs the collection, processing, and storage of personal data. The data controller is ID Network OÜ (hereinafter referred to as the “Controller”).
1.2. A data subject is any natural person whose personal data is processed by the Controller.
1.3. A customer is any person who visits, uses, or makes purchases through the Controller’s online store.
1.4. The Controller processes personal data in accordance with applicable laws, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”), ensuring lawful, fair, and secure processing.
2. Collection and Processing of Personal Data
2.1. Personal data is collected primarily via the online store (Shopify platform), email communication, and other digital channels.
2.2. Personal data is processed only for the purposes described in this Privacy Policy and on valid legal grounds.
2.3. The data subject is responsible for providing accurate and up-to-date information.
2.4. The Controller is not liable for any damage caused by incorrect data provided by the data subject.
3. Categories of Personal Data
The Controller may process the following personal data:
First and last name
Phone number
Email address
Billing and shipping address
Order details
Payment-related data (processed via third-party payment service providers)
IP address and technical data (cookies, logs, device information)
4. Legal Basis for Processing
Personal data is processed under the following legal bases (GDPR Article 6(1)):
(a) Consent
(b) Performance of a contract
(c) Legal obligation
(d) Legitimate interest
5. Purposes of Processing and Retention Periods
5.1. Security and fraud prevention Retention: As required by applicable law
5.2. Order processing and fulfillment Retention: Up to 3 years after order completion
5.3. Operation of the online store (technical logs, system security) Retention: Up to 1 year
5.4. Customer management Retention: Up to 3 years after last activity
5.5. Accounting and financial obligations Retention: As required by law (typically 7 years)
5.6. Marketing (e.g., newsletters, offers) Retention: Until consent is withdrawn or up to 3 years after last interaction
6. Sharing of Personal Data
Personal data may be shared with trusted third parties, including:
Payment service providers
Shipping and logistics providers
IT and hosting service providers Accounting service providers
Payments are processed via Maksekeskus AS, which acts as a data processor.
The online store is hosted on Shopify, which provides the e-commerce infrastructure and may process personal data in accordance with its own privacy policies.
7. Data Security
The Controller implements appropriate technical and organizational measures to protect personal data against unauthorized access, disclosure, alteration, or destruction.
8. Data Retention Principles
Personal data is retained only as long as necessary to fulfill the purposes outlined in this Privacy Policy or to comply with legal obligations.
9. Data Subject Rights
The data subject has the right to:
Access their personal data
Request correction of inaccurate data
Request deletion of data
Restrict processing
Object to processing
Receive data in a portable format
Withdraw consent at any time
To exercise these rights, contact: info@idnetwork.eu
The data subject also has the right to lodge a complaint with the Estonian Data Protection Inspectorate.
10. Cookies
10.1. The online store uses cookies to ensure proper functionality and improve user experience.
10.2. Types of cookies used: Essential cookies (required for store operation) Analytics cookies Marketing cookies
10.3. Users can manage or disable cookies via browser settings.
11. Changes to the Privacy Policy
11.1. The Controller reserves the right to update this Privacy Policy at any time.
11.2. Changes will be published on the website.
12. Contact Information
For any questions regarding personal data processing, please contact: ID Network OÜ
Email: info@idnetwork.eu