Privacy Policy

1. Data Controller

The data controller responsible for your personal data is:

Trader

Arabia Essence OÜ

Address

A. Laikmaa 11 Tallinn, Estonia

Registry code

17400695

Email

info@arabiaessence.eu

Phone

+37253779939

2. Personal Data We Collect

Depending on how you use our website and services, we may process:

• Identity and contact data (name, email, phone number, delivery and billing address)
• Order and transaction data (products purchased, payment status, invoices)
• Account data if you create a customer account
• Communication data (messages sent via contact forms, email, or customer support)
• Technical data (IP address, browser type, device information, cookies — see Section 8)
• Marketing preferences where you have opted in to newsletters or promotions

We do not store full payment card details. Card payments are processed by certified payment service providers.

3. Purposes and Legal Bases

We process personal data only where a legal basis applies under Article 6 GDPR:

• Contract performance — to process orders, deliver products, handle returns, and provide customer support.
• Legal obligation — to comply with accounting, tax, and consumer protection requirements under Estonian and EU law.
• Legitimate interests — to secure our website, prevent fraud, and improve our services, where these interests are not overridden by your rights.
• Consent — for non-essential cookies and direct marketing where required. You may withdraw consent at any time.

4. Recipients of Your Data

We share personal data only with processors and partners necessary to operate our business, including:

• Payment service providers
• Shipping and logistics carriers
• Email and newsletter platforms
• Website hosting and IT service providers
• Accounting and legal advisers where required

All processors are bound by data processing agreements where required. We do not sell your personal data.

5. International Transfers

Your data is primarily processed within the European Economic Area (EEA). If a service provider transfers data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

6. Retention Periods

We retain personal data only as long as necessary for the purposes described above:

• Order and accounting records: up to 7 years, as required by Estonian accounting and tax law
• Customer support correspondence: typically up to 3 years
• Marketing data: until you unsubscribe or withdraw consent
• Technical logs: for a limited period necessary for security and troubleshooting

7. Your Rights Under GDPR

You have the following rights regarding your personal data:

• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten") in certain circumstances
• Right to restrict processing
• Right to data portability
• Right to object to processing based on legitimate interests or for direct marketing
• Right to withdraw consent at any time, without affecting the lawfulness of processing before withdrawal

To exercise your rights, contact us at info@arabiaessence.eu. We will respond within one month, as required by GDPR.

8. Cookies and Similar Technologies

We use cookies and similar technologies in accordance with the EU ePrivacy rules and Estonian law:

• Strictly necessary cookies — required for shopping cart, checkout, and security. These do not require consent.
• Analytics and marketing cookies — used only with your consent where required. You can manage preferences through our cookie banner or your browser settings.

Blocking cookies may affect website functionality, particularly checkout features.

9. Automated Decision-Making

We do not use automated decision-making or profiling that produces legal or similarly significant effects on you.

10. Right to Lodge a Complaint

If you believe your data protection rights have been violated, you may lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon): www.aki.ee. You also have the right to contact your local supervisory authority in another EU member state where you live or work.

11. Changes to This Policy

We may update this Privacy Policy to reflect legal or operational changes. The latest version will always be published on this page with the date of update.

12. Contact

For privacy enquiries, contact info@arabiaessence.eu or visit our Contact page.