Privacy policy

Last updated: April 13, 2026

This website and store are operated by Purforta OÜ. This Privacy Policy explains how we collect, use, share, and protect personal information when you visit our website, place an order, contact us, or otherwise use our services.

Our store is hosted by Shopify, which provides the ecommerce platform we use to operate the website, support checkout, process orders, and maintain the performance and security of the store.

Please read this Privacy Policy carefully. It explains how we collect, use, share, and protect personal information, and what choices and rights may be available to you under applicable law.

Who We Are

Purforta OÜ is the controller of your personal information for the purposes described in this Privacy Policy.

Business details:

Purforta OÜ
Juhkentali 8, 10132 Tallinn, Estonia
Registry code: 17341679
VAT ID: EE102908961

If you have privacy questions or would like to exercise your rights, please use our contact form.

Personal Information We Collect

When we refer to "personal information," we mean information that identifies you or can reasonably be linked to you. Depending on how you use our website and services, we may collect the following types of personal information:

  • Contact details such as your name, billing address, shipping address, phone number, and email address.
  • Order and transaction information such as the products you view, add to cart, purchase, return, exchange, or cancel, and your order history.
  • Payment information such as payment method details, payment confirmation, and transaction-related information. Payment information is processed by payment providers and we do not intentionally store full payment card details unless this is clearly stated during checkout or required for a specific payment method.
  • Account information such as login details, saved preferences, and account settings, if you create an account.
  • Communications such as the information you send when you contact us through our contact form or other support channels.
  • Device and technical information such as IP address, browser type, device type, operating system, and network information.
  • Usage information such as how you browse and interact with our website, including pages visited, products viewed, and actions taken on the site.

How We Collect Personal Information

We may collect personal information in the following ways:

  • Directly from you when you place an order, create an account, fill in forms, contact us, or otherwise provide information to us.
  • Automatically through cookies and similar technologies when you browse or interact with our website.
  • From service providers that help us operate the website and provide services such as payments, shipping, analytics, fraud prevention, and customer support.
  • From third parties where necessary, such as payment providers, delivery partners, Shopify, or other service providers connected to our store.

How We Use Personal Information

We use personal information only where needed for our business and to provide our services. Depending on the situation, we may use it to:

  • Process and fulfill orders including payments, shipping, returns, exchanges, and order updates.
  • Provide customer support and respond to messages sent through our contact form or other support channels.
  • Operate and improve the website including website performance, usability, troubleshooting, analytics, and product presentation.
  • Prevent fraud and keep the website secure including verifying transactions and monitoring for abuse or suspicious activity.
  • Send service-related messages such as order confirmations, shipping updates, account notices, or important policy changes.
  • Send marketing communications where you have chosen to receive them, where consent is required, or otherwise where permitted by applicable law. You can unsubscribe at any time.
  • Comply with legal obligations including tax, accounting, consumer protection, and other applicable legal requirements.

Legal Bases for Processing

Where required by applicable law, we process personal information on one or more of the following legal bases:

  • Performance of a contract when we need your information to process orders, take payment, deliver products, manage returns, or provide related customer support.
  • Legal obligation when we need to keep records, comply with tax, accounting, consumer protection, or other legal requirements.
  • Legitimate interests when we use information to operate, secure, and improve our website and services, prevent fraud, respond to customer inquiries, and understand how our store is used, provided that these interests are not overridden by your rights and freedoms.
  • Consent where required, such as for certain marketing communications or certain non-essential cookies and similar technologies. Where we rely on consent, you can withdraw it at any time.

When Personal Information Is Required

Some personal information is required for us to provide services to you. For example, if you place an order, we need certain information such as your name, delivery address, payment-related information, and order details to process and fulfill the order. If you choose not to provide required information, we may not be able to complete your purchase or respond fully to your request.

How We Share Personal Information

We may share personal information only where reasonably necessary to operate the website, fulfill orders, provide services, or comply with legal obligations. Depending on the situation, this may include:

  • Shopify as our ecommerce platform provider.
  • Payment providers that process payments and related transaction checks.
  • Shipping, delivery, and logistics partners that help us deliver orders and manage returns.
  • Technology and support providers that support hosting, analytics, fraud prevention, customer support, communications, or website functionality.
  • Marketing, advertising, or social media partners where applicable and subject to your privacy choices and applicable law.
  • Professional advisers, authorities, or law enforcement where required by law or reasonably necessary to protect our rights, customers, or business.
  • Buyers, investors, or successor entities in connection with a merger, acquisition, reorganization, or sale of all or part of our business.

Cookies and Similar Technologies

We and our service providers use cookies and similar technologies to operate the website, remember preferences, keep the store secure, understand how visitors use the site, and improve performance. Depending on your location, some cookies or similar technologies may be used only after you have given consent.

Where required by law, we use a cookie banner or similar consent tool to let you manage your preferences for non-essential cookies and similar technologies. You can also manage cookies through your browser settings, although doing so may affect how the website functions.

Relationship with Shopify

Our store is hosted by Shopify, which provides the ecommerce platform we use to operate the website, process orders, support checkout, and maintain the performance and security of the store.

Shopify may process personal information as part of providing its platform and related services to us, including hosting, checkout functionality, fraud prevention, analytics, and platform security. Depending on how our store is configured, Shopify may also process certain data for additional services described in Shopify’s own documentation and privacy materials.

To learn more about how Shopify handles personal information, please review the Shopify Consumer Privacy Policy and the Shopify Privacy Portal.

Third-Party Links

Our website may contain links to third-party websites or services. We are not responsible for the privacy, security, or content of those third-party websites. If you visit them, you should review their own privacy policies and terms.

Children's Privacy

Our website and services are not directed to children. We do not knowingly collect personal information from children where prohibited by law. If you believe a child has provided personal information to us, please contact us through our contact form so we can review and, where appropriate, delete the information.

Data Retention

We keep personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy. Retention periods may depend on the type of information and the reason we hold it, including whether we need it to fulfill orders, provide support, maintain business and tax records, resolve disputes, enforce agreements, prevent fraud, or comply with legal obligations.

For example, order and transaction records may be kept for longer periods where required for accounting, tax, or legal compliance, while marketing-related data may be kept until you unsubscribe or object, subject to applicable law.

International Transfers

Your personal information may be processed in countries outside your own country. Where required by law, we rely on appropriate safeguards for international transfers, such as Standard Contractual Clauses or another lawful transfer mechanism.

Data Security

We use reasonable technical and organizational measures to protect personal information. However, no method of transmission over the internet or method of storage is completely secure, and we cannot guarantee absolute security.

Automated Decision-Making

We do not make decisions producing legal or similarly significant effects based solely on automated processing of your personal information. If this changes, we will update this Privacy Policy accordingly.

Your Rights

Depending on where you live, you may have rights regarding your personal information. These may include the right to:

  • access the personal information we hold about you
  • request correction of inaccurate personal information
  • request deletion of your personal information
  • request restriction of processing in certain cases
  • object to certain processing in certain cases
  • request a copy of your personal information in a portable format where applicable
  • withdraw consent where processing is based on consent
  • unsubscribe from marketing communications at any time

These rights are not absolute and may depend on applicable law. We may need to verify your identity before responding to a privacy request. In some cases, applicable law may allow or require us to refuse or limit a request.

To make a privacy request, please use our contact form.

Complaints

If you have concerns about how we handle your personal information, please contact us through our contact form first so we can try to resolve the issue.

If you are located in the European Economic Area, you also have the right to lodge a complaint with your local supervisory authority. In Estonia, the supervisory authority is the Estonian Data Protection Inspectorate.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect operational, legal, or regulatory changes. Any updates will be posted on this page and the "Last updated" date will be changed accordingly.

Contact

If you have questions about this Privacy Policy or would like to exercise your privacy rights, please use our contact form.