Privacy policy

Effective from 12 October 2026

Seller details

Company name: THREADZY OÜ
Reg. code: 16322941
Address: Kitse 26, 80031 Pärnu
Email: kontakt@threadzy.eu
Phone: +372 56506211

1. Who we are

The controller of personal data is THREADZY OÜ (details at the top of this page). Questions and requests: kontakt@threadzy.eu.

2. What data we collect

Contact details: name, email, phone, company name and, if needed, billing and delivery details.
Order data: chosen products, quantities, prices, designs and notes.
Files you upload: logos, pictures, photos (e.g. of a pet or a car) and gift text. Please do not upload pictures showing other people's faces without their knowledge.
Technical data: IP address and security logs; session cookies for the cart and language choice.
Payment data: payment is by bank transfer; we see the payer's name and the amount on our bank account. We do not ask for or store card details.

3. Why and on what basis

To answer your request, prepare the mockup, invoice and order, deliver the goods and handle claims: contract or steps before a contract (GDPR art. 6(1)(b)).
To meet accounting obligations (invoices and payments): legal obligation (art. 6(1)(c)).
For website security, preventing fraud and misuse, and defending legal claims: legitimate interest (art. 6(1)(f)).

We do not use your data for automated decisions or profiling. We send marketing messages (newsletters) only with your prior consent, which you can withdraw at any time.

4. Who we share data with

Only those needed to fulfil the order receive data:

web hosting and email provider (Zone Media OÜ, Estonia);
the parcel machine or courier provider, who receive your name, phone/email and delivery address;
our accountant and public authorities where the law requires.

We do not sell data or pass it on for marketing. We do not transfer data outside the European Economic Area.

5. How long we keep it

Accounting documents (invoices): 7 years.
Order and design files: up to 2 years after delivery (the claim period), then deleted.
Unfinished designs and uploads that were not ordered: deleted automatically after 30 days.
Enquiries that did not become an order: up to 12 months.

Ask for earlier deletion at kontakt@threadzy.eu; we delete the data unless the law requires us to keep it.

6. Your rights

You have the right to access your data, have it corrected or erased, restrict or object to processing, and receive your data in a portable format. Write to kontakt@threadzy.eu; we reply within one month.

If you think we process data incorrectly you can contact the Estonian Data Protection Inspectorate (aki.ee, info@aki.ee) or go to court.

7. Cookies

Necessary cookies (language choice, cart and security/form protection) are always used and do not need consent.

With your consent (the cookie banner) we also use the Meta Pixel (Meta Platforms Ireland Ltd): cookies and a script that tell Meta which pages you view and which actions you take (e.g. product view, checkout, order and its value). We use this to measure and target our advertising. The data is also processed by Meta, possibly outside the EEA, under Meta's own terms. You can decline or withdraw consent at any time with the "Cookie settings" link in the footer; without consent the pixel is not loaded.