Privacy policy

Last updated: 20 September 2026.

1. Data controller

Pyrenaik OÜ
EU VAT number: EE103016797
Lõõtsa tn 5, Kesklinna linnaosa
11415 Tallinn, Estonia
Email: info@pyrenaik.com

This policy explains how we process your data when you visit the store, make a purchase, pre-order a product or contact us.

2. Data, purposes and legal bases

• Purchases and pre-orders: name, email, address, phone number where necessary, products, payments and order status. We use these to fulfil the purchase, deliver the order and handle returns and warranties (performance of the contract).
• Enquiries: contact details and the content of your messages. We respond to pre-purchase requests or other enquiries on the basis of our legitimate interest in providing customer service.
• Invoicing: we retain the data required by tax and accounting obligations.
• Security: technical data, IP addresses and transactions to protect the store and prevent fraud, on the basis of our legitimate interest and applicable obligations.
• Marketing: we use your contact details for commercial communications where we have your consent or another applicable legal basis. You can unsubscribe in each communication.
• Non-essential cookies: preferences, measurement and advertising in accordance with the relevant consent. See our cookie policy.

The data necessary to make a purchase must be provided to process the order. Marketing preferences are optional. Do not send passwords or full card numbers by email; payments are processed through the providers enabled at checkout.

3. Sources and recipients

We receive data directly from you, from your browsing activity and from providers involved in payment, hosting and delivery. We share what is necessary with Shopify, payment providers, carriers, technical support and tax or accounting advisers, and with authorities where legally required. Each provider processes data according to its role and the applicable contractual safeguards.

4. Shopify and personalisation

The store is hosted on Shopify. Shopify Network Intelligence is enabled: certain features use information about your interactions with our store, other merchants and Shopify to improve services, personalisation and advertising, respecting applicable consent and opt-out choices. For some of these uses, Shopify acts as an independent controller.

See Shopify’s consumer privacy policy and its privacy rights portal.

5. International transfers

Our store’s hosting configuration indicates storage in the United States. Shopify and its providers may also process data in other countries. Transfers outside the European Economic Area are subject to the relevant safeguards, such as adequacy decisions or standard contractual clauses. You can request information about the safeguards for a specific transfer at info@pyrenaik.com.

6. Retention

We keep data needed to manage the relationship, resolve issues and meet legal responsibilities. Accounting records are retained for seven years from the end of the relevant financial year under Estonian law; some obligations may require different periods. Marketing communications continue until you unsubscribe or withdraw consent, without prejudice to retaining evidence of your choice. Cookie lifetimes depend on each function and are explained in the cookie policy.

7. Your rights

You may request access, rectification, erasure, restriction and portability, and object to processing where applicable. You may withdraw consent at any time without affecting earlier processing. Write to info@pyrenaik.com. We will only ask for additional identification if necessary. We will respond within the legal time limit, normally one month, and inform you of any permitted extension.

You can complain to the Estonian authority Andmekaitse Inspektsioon or to the data protection authority in your habitual residence, place of work or the place of the alleged infringement.

8. Security, minors and changes

We apply technical and organisational measures to protect data. If you believe a minor’s data has been provided without authorisation or you notice an incident, contact us. We will update this policy when processing changes and notify you of material changes when necessary.