Privacy Policy

Last updated: February 2026

At SoodneValik, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, share, and protect your data in compliance with GDPR and other applicable regulations.

1. Information We Collect

1.1 Information You Provide

Account Information: Name, email address, password, phone number
Order Information: Shipping and billing addresses, payment information (processed securely by our payment processor)
Communications: Messages you send us, customer support inquiries
Reviews & Feedback: Product reviews, ratings, and comments

1.2 Information Automatically Collected

Device Information: IP address, browser type, operating system
Usage Data: Pages visited, products viewed, time spent on site, referring pages
Cookies: See our Cookie Policy for details

2. How We Use Your Information

We use your information to:

Process and fulfill your orders
Communicate about your orders, delivery, and customer service issues
Improve our website, products, and services
Personalize your shopping experience
Send marketing communications (with your consent)
Prevent fraud and enhance security
Comply with legal obligations

3. Legal Basis for Processing (GDPR)

We process your personal data based on:

Contract Performance: To fulfill orders and provide services
Legitimate Interests: To improve our services and prevent fraud
Consent: For marketing communications and optional features
Legal Obligations: To comply with tax, accounting, and other legal requirements

4. Information Sharing

We may share your information with:

Service Providers: Shipping companies, payment processors, hosting providers, analytics services (under strict data protection agreements)
Legal Requirements: When required by law or to protect our rights
Business Transfers: In the event of a merger, acquisition, or sale of assets

We never sell your personal information to third parties.

5. International Data Transfers

Your data may be processed outside the EU by our service providers. We ensure adequate protection through Standard Contractual Clauses and other approved mechanisms.

6. Data Retention

We retain your personal data:

Account Data: Until you delete your account
Order Data: For 7 years (tax and accounting requirements)
Marketing Data: Until you unsubscribe or withdraw consent
Analytics Data: Typically 26 months (aggregated and anonymized)

7. Your Rights (GDPR)

You have the right to:

Access: Request a copy of your personal data
Rectification: Correct inaccurate or incomplete data
Erasure: Request deletion of your data ("right to be forgotten")
Restriction: Limit how we process your data
Portability: Receive your data in a structured, machine-readable format
Objection: Object to processing based on legitimate interests
Withdraw Consent: For processing based on consent

To exercise your rights, contact us at [email protected].

8. Security

We implement industry-standard security measures including encryption, secure servers, access controls, and regular security audits. However, no method of transmission over the internet is 100% secure.

9. Children's Privacy

Our services are not intended for children under 16. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via email or a prominent notice on our website. Continued use of our services after changes constitutes acceptance.

11. Contact Us

For privacy-related questions or concerns, contact us at:

Email: [email protected]
Phone: +372 123 4567
Data Protection Officer: Available upon request

12. Supervisory Authority

If you're not satisfied with our response to your privacy concerns, you have the right to lodge a complaint with your local data protection authority.