Privacy policy
Privacy Policy
This Privacy Policy explains how TelkyPet OÜ ("Telky Pet", "we", "us") collects, uses, and discloses your personal data when you visit our website, make a purchase, or otherwise interact with us (the "Services"). Our store is powered by Shopify.
For the purposes of the EU General Data Protection Regulation (GDPR), the data controller is:
TelkyPet OÜ Tornimäe tn 5, 10145 Tallinn, Estonia Email: info@telkypet.com
1. What Personal Data We Collect
Depending on how you interact with us, we may collect:
- Contact details: name, shipping and billing address, email address, phone number;
- Order and transaction data: products you view, add to cart, purchase, return, or cancel; order history; delivery details;
- Payment data: payment method and transaction confirmation. Full card numbers are processed directly by our payment providers and are never stored by us;
- Account data: username, password, preferences (if you create an account);
- Communications: the content of emails or messages you send us, including customer support inquiries;
- Device and usage data: IP address, browser and device type, and how you navigate and interact with our website, collected via cookies and similar technologies (see Section 6);
- Marketing data: your email marketing preferences, subscription status, and interactions with our emails (opens, clicks).
We collect this data directly from you, automatically through your use of the website, and from our service providers acting on our behalf.
2. Why We Process Your Data and On What Legal Basis
Under the GDPR, we must have a legal basis for each purpose for which we process your personal data:
| Purpose | Legal basis |
|---|---|
| Processing and delivering your orders, payments, returns, and refunds; managing your account; customer support | Performance of a contract (Art. 6(1)(b) GDPR) |
| Sending order confirmations, shipping updates, and other service messages | Performance of a contract (Art. 6(1)(b) GDPR) |
| Email marketing, newsletters, product recommendations, and abandoned-cart reminders | Consent (Art. 6(1)(a) GDPR) — you can withdraw it at any time |
| Non-essential cookies, analytics, and advertising pixels | Consent (Art. 6(1)(a) GDPR), via our cookie banner |
| Fraud prevention, website security, and protecting our Services | Legitimate interest (Art. 6(1)(f) GDPR) |
| Basic, aggregated statistics to improve our products and website | Legitimate interest (Art. 6(1)(f) GDPR) |
| Keeping accounting and tax records; responding to valid legal requests | Legal obligation (Art. 6(1)(c) GDPR) |
Where we rely on legitimate interest, we have assessed that our interest does not override your rights and freedoms. You may object to such processing at any time (see Section 8).
3. How Long We Keep Your Data
We keep personal data only as long as necessary for the purposes described above:
- Order, invoice, and transaction data: 7 years from the end of the relevant financial year, as required by Estonian accounting law;
- Account data: for as long as your account is active, and deleted upon your request;
- Marketing data: until you unsubscribe or withdraw consent, or after 3 years of inactivity;
- Customer support communications: up to 3 years after the matter is resolved;
- Cookie and analytics data: according to the lifespans stated in our cookie banner.
When data is no longer needed, it is deleted or anonymized.
4. Who We Share Your Data With
We share personal data only where necessary and with appropriate safeguards, with the following categories of recipients:
- Shopify (Shopify International Ltd.): our e-commerce platform, hosting, and checkout. For certain enhanced features, Shopify acts as an independent controller of your data; see the Shopify Consumer Privacy Policy for details and to exercise rights relating to Shopify's own processing;
- Klaviyo: our email marketing platform, which processes your email address, order history, and website activity to send and personalize our emails (only where you have consented to marketing and/or tracking);
- Payment providers: such as Shopify Payments, PayPal, [Mollie / other PSP], which process your payment independently as required by financial regulations;
- Fulfillment and shipping partners: including our logistics warehouse in Belgium and carriers, who receive your name, address, phone number, and order contents to deliver your order;
- Analytics and advertising partners: [e.g., Google Analytics, Meta],only with your consent via the cookie banner;
- Professional advisers and authorities: accountants, lawyers, or public authorities where legally required;
- A buyer or successor in the event of a merger, acquisition, or similar business transaction.
We do not sell your personal data.
5. International Transfers
Some of our service providers process data outside the European Economic Area (for example, in the United States). Where this happens, we rely on an adequacy decision of the European Commission (including the EU–US Data Privacy Framework where the recipient is certified) or on the European Commission's Standard Contractual Clauses, together with additional safeguards where needed.
6. Cookies and Similar Technologies
We use cookies and similar technologies to operate the website, remember your cart, analyze traffic, and (with your consent) personalize marketing.
- Strictly necessary cookies (checkout, cart, security) are always active;
- Analytics and marketing cookies are set only after you give consent through our cookie banner, and you can change or withdraw your choices at any time via the cookie settings link in the website footer.
Details of the individual cookies we use and their lifespans are available in the cookie banner settings.
7. Marketing Communications
We send marketing emails only if you have signed up or consented. Every marketing email contains an unsubscribe link, and you can opt out at any time, free of charge, with immediate effect. Opting out of marketing does not affect service emails about your orders or account.
Your right to object to direct marketing is absolute- if you object, we will stop immediately.
8. Your Rights
Under the GDPR, you have the following rights, free of charge:
- Access: obtain a copy of the personal data we hold about you;
- Rectification: have inaccurate data corrected;
- Erasure: have your data deleted ("right to be forgotten"), subject to legal retention obligations;
- Restriction: restrict processing in certain circumstances;
- Portability: receive your data in a structured, machine-readable format and have it transmitted to another controller;
- Objection: object to processing based on legitimate interest, and object to direct marketing at any time;
- Withdraw consent: where processing is based on consent, withdraw it at any time, without affecting the lawfulness of processing before withdrawal.
To exercise any of these rights, email us at info@telkypet.com. We will respond within one month, as required by the GDPR. We may need to verify your identity before acting on your request. You may also authorize someone to act on your behalf, subject to proof of authorization.
We will never discriminate against you for exercising your rights.
9. Complaints
If you believe we have processed your personal data unlawfully, please contact us first at info@telkypet.com, we take every concern seriously.
You also have the right to lodge a complaint with a supervisory authority. Our lead supervisory authority is:
Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) Tatari 39, 10134 Tallinn, Estonia www.aki.ee
You may also complain to the data protection authority in your own EU country of residence. A list of EEA authorities is available here.
10. Children
Our Services are not directed at children, and we do not knowingly collect personal data from anyone under 16. If you are a parent or guardian and believe a child has provided us with personal data, contact us at info@telkypet.com and we will delete it.
11. Security
We use appropriate technical and organizational measures to protect your personal data, including encrypted connections (TLS) and access controls through our platform providers. No system is completely secure, so please avoid sending sensitive information through unsecured channels.
12. Third-Party Links
Our website may link to third-party websites or social media platforms. Their privacy practices are governed by their own policies, which we encourage you to review. We are not responsible for the content or privacy practices of third-party sites.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post the updated version on this page with a revised "Last updated" date and, where the changes are significant, notify you as required by law.
14. Contact
For any questions about this Privacy Policy or your personal data:
TelkyPet OÜ Tornimäe tn 5, 10145 Tallinn, Estonia
Email: info@telkypet.com