1. WHO WE ARE

This Privacy Policy explains how Glamlac OÜ collects, uses and protects your personal data when you visit or make a purchase from glamlac.com, contact us or otherwise interact with our online store.

Glamlac OÜ
Kassi 10, 12618 Tallinn, Estonia
Registration no. 12149262
VAT no. EE101476834
Email: info@glamlac.com
Phone: +372 6 229 257

Glamlac OÜ is the controller of your personal data for the purposes described in this Privacy Policy.

2. WHAT PERSONAL DATA WE COLLECT

Depending on how you use our website and services, we may collect the following personal data:

  • Contact information, such as your name, email address, phone number and delivery address.
  • Order and purchase information, including the products you order, order history, delivery details and payment status.
  • Account information, if you use a customer account or our online return and cancellation service.
  • Customer service information, including messages, requests, complaints or other communication with us.
  • Marketing preferences, such as whether you have subscribed to our newsletter or other marketing communications.
  • Website and device information, such as your IP address, browser, device type and information about how you use our website, where permitted through cookies and similar technologies.
  • Payment-related information necessary to process your payment. Payments are processed by Maksekeskus AS. For the purpose of executing payments, Glamlac OÜ transfers the personal data necessary for payment processing to its authorised processor, Maksekeskus AS.

3. HOW WE USE YOUR PERSONAL DATA

We use your personal data to:

  • Process and fulfil your orders.
  • Arrange delivery and provide order updates.
  • Process payments and refunds.
  • Manage returns, cancellations and customer accounts.
  • Respond to questions, requests and complaints.
  • Meet our legal, accounting and tax obligations.

We may also use your personal data to:

  • Send marketing communications where you have agreed to receive them.
  • Improve our website, products and customer experience.
  • Prevent fraud, misuse and security issues.

4. LEGAL BASIS FOR PROCESSING

We process your personal data only where we have a valid legal basis to do so.

Depending on the situation, this may include:

  • Performance of a contract – for example, to process your order, arrange delivery, handle returns and refunds, and provide customer service related to your purchase.
  • Legal obligations – for example, to meet accounting, tax and other legal requirements.
  • Legitimate interests – for example, to protect our website and business, prevent fraud, improve our services and handle certain customer service matters.
  • Consent – where required, for example for email marketing or certain cookies and tracking technologies.

Where we rely on your consent, you can withdraw it at any time.

5. WHO WE SHARE YOUR DATA WITH

We share personal data only where necessary to operate our online store, provide our services or meet our legal obligations.

This may include:

  • E-commerce platform and technology providers – our online store is powered by Shopify. Shopify processes personal data relating to the use of our online store and orders to the extent necessary to provide and improve the e-commerce platform and related services.
  • Payment service providers – we use the services of Maksekeskus AS to facilitate payments. We provide Maksekeskus AS with the personal data necessary to process payments.
  • Delivery and logistics providers - including carriers used through Maksekeskus Tarne+ and DHL, which deliver your orders.
  • Marketing and communication providers that help us send newsletters and other communications where permitted.
  • Analytics and advertising providers, where permitted, to help us understand website use and measure our marketing.
  • Professional service providers, such as accounting, legal or IT service providers.
  • Public authorities, where we are legally required to provide information.

We only share the personal data that is necessary for the relevant purpose.

6. INTERNATIONAL DATA TRANSFERS

Some of our service providers may process personal data outside the European Economic Area (EEA).

Where personal data is transferred outside the EEA, we use appropriate safeguards as required by applicable data protection laws. These may include transfers to countries recognised as providing an adequate level of data protection or the use of approved contractual safeguards.

We take reasonable steps to ensure that your personal data remains protected when it is transferred internationally.

7. HOW LONG WE KEEP YOUR DATA

We keep your personal data only for as long as necessary for the purposes described in this Privacy Policy and to meet our legal obligations.

Accounting documents and information required for accounting and tax purposes are retained for seven years as required by applicable law.

Customer service correspondence may be kept for as long as necessary to resolve requests, complaints or disputes.

Marketing information is kept until you unsubscribe, withdraw your consent or we no longer need it for the relevant purpose.

Where data is no longer needed, we delete or anonymise it in accordance with our legal obligations and internal retention practices.

8. YOUR RIGHTS

Under applicable data protection laws, you have the right to:

  • Access the personal data we hold about you.
  • Correct personal data that is inaccurate or incomplete.
  • Request deletion of your personal data where applicable.
  • Restrict how your personal data is processed in certain circumstances.
  • Object to certain types of processing, including direct marketing.
  • Receive or transfer your data where the right to data portability applies.
  • Withdraw your consent at any time where processing is based on your consent.

To exercise any of these rights, please contact us at info@glamlac.com.

We may ask you to provide information needed to confirm your identity before completing your request.

If you believe that your personal data has been handled incorrectly, you have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) or another competent data protection authority.

9. MARKETING COMMUNICATIONS

If you subscribe to our newsletter or other marketing communications, we use your contact details to send you information about products, new launches, offers and other updates.

You can unsubscribe at any time by using the unsubscribe link in our emails or by contacting us at info@glamlac.com.

Unsubscribing from marketing communications does not affect service messages related to your orders, account, returns or other transactions.

10. COOKIES & SIMILAR TECHNOLOGIES

We use cookies and similar technologies to operate our website, remember your preferences, understand how our website is used and, where permitted, support analytics and marketing activities.

Necessary cookies are required for core website functions and do not require your consent. Analytics and marketing cookies are used only with your consent where required.

You can manage your cookie preferences through the cookie settings available on our website.

For more information about the cookies and similar technologies we use, please see our Cookie Policy.

11. DATA SECURITY

We use appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, alteration or disclosure.

Access to personal data is limited to people and service providers who need it for legitimate business purposes.

While we take reasonable steps to protect your personal data, no method of transmission or storage is completely secure.

12. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes to our services, legal requirements or how we process personal data.

The latest version will always be available on this page.

Where appropriate, we will provide additional notice of significant changes.

13. CONTACT US

If you have any questions about this Privacy Policy or how we process your personal data, please contact us:

Glamlac OÜ
Kassi 10, 12618 Tallinn, Estonia
Email: info@glamlac.com
Phone: +372 6 229 257