Privacy policy

Data controller: Kratt Labs OÜ (registry code 17468948), Laulupeo pst 7-4, 51006 Tartu, Estonia. Email: info@kickinboots.eu. Phone: +372 5562 3707. Kratt Labs OÜ ("we", "us") operates the online store kickinboots.eu and determines the purposes and means of processing the personal data described in this policy.

What personal data we process

  • name, phone number and e-mail address;
  • delivery address or parcel-machine location;
  • cost of goods and services and data related to payments (purchase history);
  • customer support correspondence;
  • bank account number (for refunds);
  • IP address and other online identifiers.

Purposes of processing

  • to manage your orders and deliver goods;
  • to compile purchase history, analyse customer preferences and resolve consumer disputes;
  • to refund payments to your bank account;
  • to provide customer support;
  • for marketing — newsletters, profiling and digital advertising — where you have given consent;
  • to operate the online store and produce web-usage statistics.

Legal bases for processing (GDPR Article 6)

We process your personal data on the following legal bases:

  • Performance of a contract (Art. 6(1)(b)) — managing your orders, delivery, returns and refunds, and managing your customer account.
  • Compliance with a legal obligation (Art. 6(1)(c)) — accounting and tax obligations and responding to lawful requests from authorities.
  • Legitimate interests (Art. 6(1)(f)) — fraud prevention and security of the store, retaining purchase history to resolve potential consumer disputes, and analytics to improve our service.
  • Consent (Art. 6(1)(a)) — marketing communications, profiling for direct marketing, targeted advertising and non-essential cookies. You may withdraw consent at any time.

Recipients of personal data

  • our customer support, to manage purchase history and resolve customer issues;
  • our e-commerce platform provider (Shopify), which hosts the online store;
  • logistics and fulfilment partners and the transport/courier service for your delivery — they receive your name, phone number, delivery address and item details to fulfil and deliver your order;
  • payment service providers (Shopify Payments and PayPal), to process your payments;
  • our accounting service provider, to perform accounting operations.

Storage and security of data

  • Personal data are stored on the servers of zone.ee, located within the European Union / European Economic Area. Data may be transferred to countries with an adequate level of data protection as determined by the European Commission, or to a processor in a third country subject to the safeguards in Articles 46, 47 or 49(1) of the GDPR.
  • Access is limited to staff who need it to operate the store and provide customer support. We apply appropriate physical, organisational and IT security measures (encrypted connections, encrypted e-mail, firewall and virus protection, and regular backups kept separately).
  • Personal data are forwarded to processors on the basis of contracts requiring them to apply the safeguards of Article 28 of the GDPR.

International transfers

Where any recipient or processor is located outside the EEA, we ensure an adequate level of protection through an adequacy decision or appropriate safeguards (such as Standard Contractual Clauses) under Articles 46–49 of the GDPR.

Retention

  • Personal data in original accounting documents are retained for 7 years, as required by law.
  • In the event of payment or consumer disputes, personal data are retained until the claim is settled or the limitation period expires.
  • Marketing data processed on the basis of consent are retained until you withdraw consent or after a prolonged period of inactivity, after which they are deleted.

Your rights

  • access your personal data and request rectification of inaccurate or incomplete data;
  • request erasure of your personal data (except where we must retain it on a legal basis);
  • request restriction of processing, and object to processing based on legitimate interests or to direct marketing (including profiling) at any time;
  • data portability;
  • withdraw consent at any time, where processing is based on consent.

To exercise your rights, contact us at info@kickinboots.eu. We respond to requests within one month.

Direct marketing

We send direct marketing by e-mail or SMS only where you have consented. You can opt out at any time via the unsubscribe link in our messages or by contacting info@kickinboots.eu.

Cookies

The online store uses cookies and similar technologies to operate the site, remember your preferences and — with your consent — for analytics and advertising. You can manage non-essential cookies through your browser settings or our cookie controls.

Complaints

If you believe we have processed your personal data unlawfully, you have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) — info@aki.ee, www.aki.ee — or with the supervisory authority in your country of residence.

Contact

For any data-protection question or request, contact us at info@kickinboots.eu or Kratt Labs OÜ, Laulupeo pst 7-4, 51006 Tartu, Estonia.