Privacy Policy
Draft — needs legal review
This Privacy Policy explains how Heatedbowls OÜ ('we', 'us') collects, uses and protects your personal data when you visit heatedpetbowls.com or place an order with us, in accordance with the EU General Data Protection Regulation (GDPR).
Who we are (data controller)
The data controller is Heatedbowls OÜ, registered in Tallinn, Estonia, registry code 17438002.
[Address — to be added]
Email: heatedpetbowls@gmail.com
What data we collect
Order and contact data: when you place an order, our checkout (powered by Shopify) collects your name, email, postal address, phone number and payment details necessary to process and deliver your order.
Contact form messages: if you message us directly, we collect your name, email and the content of your message.
Analytics data: we use Google Analytics to understand how visitors use our site (pages viewed, approximate location, device type).
Local storage: our site stores your shopping cart contents and language preference in your browser's local storage so the site works correctly between visits.
Why we use your data and our legal basis
To process and fulfil your order and provide customer service — necessary for the performance of a contract with you.
To comply with accounting and tax obligations — necessary to comply with a legal obligation.
To keep our website secure and improve our products and service — based on our legitimate interest.
To run analytics (Google Analytics) — based on your consent, which you can withdraw at any time via our cookie/consent settings.
Who we share your data with (processors)
Shopify, our e-commerce and checkout platform, which processes order, payment and shipping data on our behalf.
Google Analytics, used to analyse website traffic.
Our hosting provider, which stores and serves our website.
We do not sell your personal data to third parties.
International data transfers
Some of our processors (such as Shopify and Google) may process data outside the European Economic Area. Where this happens, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (SCCs).
How long we keep your data
Accounting records related to your order are kept for 7 years, as required by Estonian law.
Other personal data is kept only for as long as necessary for the purposes described above, after which it is deleted or anonymised.
Your rights
Under the GDPR, you have the right to access, rectify, erase or restrict the processing of your personal data, the right to data portability, the right to object to processing, and the right to withdraw consent at any time (for example, for analytics).
To exercise any of these rights, contact us at heatedpetbowls@gmail.com.
Complaints
If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), www.aki.ee, or with the supervisory authority in your own country.
Contact us
Heatedbowls OÜ, Tallinn, Estonia (registry code 17438002).
[Address — to be added]
[Phone — to be added]
Email: heatedpetbowls@gmail.com