Privacy Policy

    Draft — needs legal review

    This Privacy Policy explains how Heatedbowls OÜ ('we', 'us') collects, uses and protects your personal data when you visit heatedpetbowls.com or place an order with us, in accordance with the EU General Data Protection Regulation (GDPR).

    Who we are (data controller)

    The data controller is Heatedbowls OÜ, registered in Tallinn, Estonia, registry code 17438002.

    [Address — to be added]

    Email: heatedpetbowls@gmail.com

    What data we collect

    Order and contact data: when you place an order, our checkout (powered by Shopify) collects your name, email, postal address, phone number and payment details necessary to process and deliver your order.

    Contact form messages: if you message us directly, we collect your name, email and the content of your message.

    Analytics data: we use Google Analytics to understand how visitors use our site (pages viewed, approximate location, device type).

    Local storage: our site stores your shopping cart contents and language preference in your browser's local storage so the site works correctly between visits.

    Why we use your data and our legal basis

    To process and fulfil your order and provide customer service — necessary for the performance of a contract with you.

    To comply with accounting and tax obligations — necessary to comply with a legal obligation.

    To keep our website secure and improve our products and service — based on our legitimate interest.

    To run analytics (Google Analytics) — based on your consent, which you can withdraw at any time via our cookie/consent settings.

    Who we share your data with (processors)

    Shopify, our e-commerce and checkout platform, which processes order, payment and shipping data on our behalf.

    Google Analytics, used to analyse website traffic.

    Our hosting provider, which stores and serves our website.

    We do not sell your personal data to third parties.

    International data transfers

    Some of our processors (such as Shopify and Google) may process data outside the European Economic Area. Where this happens, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (SCCs).

    How long we keep your data

    Accounting records related to your order are kept for 7 years, as required by Estonian law.

    Other personal data is kept only for as long as necessary for the purposes described above, after which it is deleted or anonymised.

    Your rights

    Under the GDPR, you have the right to access, rectify, erase or restrict the processing of your personal data, the right to data portability, the right to object to processing, and the right to withdraw consent at any time (for example, for analytics).

    To exercise any of these rights, contact us at heatedpetbowls@gmail.com.

    Complaints

    If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), www.aki.ee, or with the supervisory authority in your own country.

    Contact us

    Heatedbowls OÜ, Tallinn, Estonia (registry code 17438002).

    [Address — to be added]

    [Phone — to be added]

    Email: heatedpetbowls@gmail.com