Privacy Policy
Shopify Platform
The online store flowerail.com uses the Shopify platform.
Shopify processes personal data necessary for the operation of the online store, including data related to orders, shopping carts, payments, shipping, and customer management.
Tasebo OÜ is generally the data controller for the online store's customer data, and Shopify processes this data as a data processor on behalf of Tasebo OÜ, to the extent necessary to provide the Shopify service.
For certain Shopify services, payment solutions, security, analytics, personalization, or cross-platform features, Shopify may also process personal data as an independent data controller in accordance with Shopify's own terms and privacy policy.
Shopify may process personal data outside the European Union or the European Economic Area. In such cases, appropriate data protection measures are used, including European Commission adequacy decisions or standard contractual clauses.
General Information
This privacy policy explains how Tasebo OÜ collects, uses, and protects personal data in the flowerail.com online store.
When using the online store, placing an order, or contacting us, the customer may provide us with personal data. We process personal data only to the extent necessary for the operation of the online store, fulfillment of orders, communication with the customer, and compliance with legal obligations.
Data Controller
The data controller for personal data is:
Tasebo OÜ
Email: info@flowerail.com
Address: Sikupill 16-9, Tallinn 11414
Registration code: 17042971
What Personal Data We Process
We may process the following personal data:
• customer's name;
• email address;
• phone number;
• delivery address;
• billing information;
• order details;
• selected product and model;
• customer-entered measurements B, C, and D;
• technical information related to payment;
• content of customer communication;
• technical data related to website usage, such as IP address, device and browser information, and cookie-related data.
Tasebo OÜ does not store full payment card details. Payments are processed by payment service providers displayed at checkout.
Purposes of Processing Personal Data
We process personal data for the following purposes:
• receiving and fulfilling orders;
• assembling Flowerail based on the customer's selected model and entered measurements;
• processing payments;
• arranging delivery of goods;
• communicating with the customer;
• resolving returns, complaints, and warranty-related inquiries;
• fulfilling accounting and legal obligations;
• improving the reliability, security, and user experience of the online store;
• preventing fraud and misuse;
• sending marketing communications only if the customer has given consent or if permitted by law.
Legal Basis
We process personal data on the following legal bases:
• performance of a contract or taking steps prior to entering into a contract, such as receiving an order, processing payment, and shipping goods;
• compliance with a legal obligation, such as accounting obligations;
• legitimate interest, such as responding to customer inquiries, ensuring the security of the online store, and resolving disputes;
• customer consent, such as for marketing communications or the use of certain cookies.
Disclosure of Data to Third Parties
We disclose personal data only to the extent necessary for the operation of the online store and the fulfillment of the order.
Personal data may be processed by the following service providers:
• Shopify as the online store platform service provider;
• payment service providers;
• transport and parcel machine service providers;
• email and customer communication service providers;
• accounting and legal advisory service providers;
• web analytics and marketing tool providers, if used in the online store.
Service providers process personal data only to provide the necessary service and in accordance with applicable data protection requirements.
Transfer of Data Outside the European Union
The online store uses the Shopify platform and may also use other service providers whose servers or subprocessors may be located outside the European Union or the European Economic Area.
If personal data is transferred outside the European Union or the European Economic Area, it is done in accordance with applicable data protection requirements and appropriate safeguards are used, such as European Commission adequacy decisions or standard contractual clauses.
Data Retention
We retain personal data for as long as necessary to fulfill the purposes for which the data was collected, or for as long as required by law.
Data related to orders and accounting is retained according to the deadlines stipulated by accounting and tax laws.
Data related to customer communication and complaints is retained for as long as necessary to resolve the customer inquiry or to defend against potential claims.
Data related to marketing consent is retained until consent is withdrawn or until data retention is no longer necessary.
Cookies and Similar Technologies
The online store may use cookies and similar technologies to ensure the functioning of the website, improve user experience, analyze website usage, and conduct marketing.
Necessary cookies help the online store function, for example, for shopping cart, checkout process, and security-related features.
Analytics and marketing cookies are used only if they are in use in the online store and if customer consent has been obtained where necessary for their use.
The customer can manage cookie usage through the cookie settings displayed on the website or in their browser settings.
Sending Marketing Communications
We send marketing communications to the customer only if the customer has given consent or if it is permitted by law.
The customer can unsubscribe from marketing communications at any time by using the unsubscribe link in the email or by contacting us at info@flowerail.com.
Data Security
We implement reasonable technical and organizational measures to protect personal data from unauthorized access, alteration, disclosure, or destruction.
Payments and order placement in the online store are carried out through secure service providers.
Customer Rights
The customer has the right to:
• receive information about the processing of their personal data;
• request access to their personal data;
• demand correction of inaccurate data;
• demand deletion of data if there is a legal basis for it;
• demand restriction of data processing;
• object to data processing;
• request data portability, where applicable;
• withdraw consent, if processing is based on consent.
To exercise your rights, please contact us at info@flowerail.com.
Filing a Complaint
If the customer believes that their personal data processing has violated applicable data protection requirements, they have the right to contact us at info@flowerail.com.
The customer also has the right to contact the data protection supervisory authority in their country of residence.
In Estonia, the supervisory authority is the Data Protection Inspectorate.
Changes to the Privacy Policy
Tasebo OÜ has the right to amend the privacy policy.
The latest version will be published on the website flowerail.com and will be effective from the date of publication.