Privacy Policy

Last updated: July 6, 2026

This Privacy Policy explains how Fookuses Fitness OÜ collects, uses, stores and protects personal data, as well as your rights regarding the processing of your personal data when using our online store.

We process personal data in accordance with the European Union General Data Protection Regulation (GDPR), applicable Estonian legislation, and the principles of data minimisation, security and transparency.

The controller responsible for processing personal data is Fookuses Fitness OÜ (registry code 17382773, hereinafter referred to as the Online Store).

Table of Contents

  1. What Personal Data We Collect
  2. How We Use Personal Data
  3. Legal Basis for Processing Personal Data
  4. Sharing Personal Data and Data Processors
  5. Data Retention
  6. Cookies
  7. Your Rights
  8. Data Security
  9. Changes to This Privacy Policy
  10. Contact

What Personal Data We Collect

We only collect personal data that is necessary for processing orders, operating the online store, providing customer support and fulfilling our legal obligations.

Depending on how you use our online store, we may process the following personal data:

  • first and last name;
  • email address;
  • phone number;
  • billing and shipping address;
  • order and payment information;
  • customer support communications;
  • technical information related to your use of our website (such as your IP address, device type, browser information and data collected through cookies).

How We Use Personal Data

We process personal data only to the extent necessary for the following purposes:

  • processing and delivering orders;
  • processing payments and fulfilling the sales contract;
  • providing customer support and responding to enquiries;
  • handling returns, complaints and warranty claims;
  • complying with accounting and other legal obligations;
  • improving the functionality, security and user experience of our online store;
  • sending newsletters and marketing communications where you have given your consent.

Important. We only send marketing emails if you have given your consent. You may withdraw your consent at any time by using the unsubscribe link included in our emails or by contacting us directly.

We only process personal data where there is a lawful basis for doing so under the European Union General Data Protection Regulation (GDPR).

The legal basis for processing personal data may include:

  • the conclusion and performance of a sales contract;
  • compliance with legal obligations applicable to the Online Store (such as accounting requirements);
  • your consent, for example for receiving newsletters;
  • the legitimate interests of the Online Store, such as preventing fraud, ensuring website security and improving our services, provided these interests do not override your rights and freedoms.

Sharing Personal Data and Data Processors

The Online Store does not sell, rent or disclose your personal data to third parties for marketing purposes.

Personal data may only be shared where necessary for processing your order, handling payments, delivering products, operating the online store or complying with legal obligations.

The Online Store uses Shopify Inc. as its e-commerce platform. Shopify processes personal data to operate the online store, manage orders, maintain security and provide other services required for the operation of the website in accordance with its own privacy practices.

Depending on the services provided, we may share personal data with:

  • Shopify Inc. – to operate the online store;
  • Maksekeskus AS – for payment processing;
  • DPD, Omniva, Smartpost and Unisend – for order delivery;
  • email and marketing service providers, where you have consented to receive newsletters;
  • accounting and legal service providers where required to comply with legal obligations.

All of our service providers process personal data only in accordance with our instructions and are required to ensure the security and confidentiality of personal data in compliance with applicable laws.

Where a service provider processes personal data outside the European Economic Area (EEA), such transfers will only take place where appropriate safeguards required by applicable data protection laws are in place.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected or as required by applicable law.

In general, we retain personal data as follows:

  • order and purchase information for the period required under applicable accounting legislation;
  • customer support communications for as long as necessary to resolve potential claims or disputes;
  • marketing consent records until consent is withdrawn.

Once personal data is no longer required or its retention is no longer required by law, it will be securely deleted or anonymised.

Cookies

The Online Store uses cookies to ensure the proper functioning of the website, improve your browsing experience and analyse website usage.

The cookies we use may include:

  • strictly necessary cookies required for the basic functionality of the online store;
  • analytics cookies that help us understand how visitors use our website and improve its performance;
  • marketing cookies used to provide more relevant advertising where you have given your consent.

You can manage your cookie preferences through the cookie consent banner displayed on our website or by adjusting your browser settings. Please note that disabling strictly necessary cookies may affect the functionality of certain features of the online store.

Your Rights

Under the General Data Protection Regulation (GDPR), you have the right to:

  • receive information about how your personal data is processed;
  • request access to your personal data;
  • request the correction of inaccurate or incomplete personal data;
  • request the deletion of your personal data where there is a legal basis to do so;
  • request the restriction of processing in situations provided for by law;
  • object to processing based on our legitimate interests;
  • withdraw your consent at any time where processing is based on consent;
  • lodge a complaint with the relevant data protection authority if you believe your personal data has been processed unlawfully.

If you wish to exercise any of your rights or have any questions regarding the processing of your personal data, please contact us using the details provided below.

Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration or destruction.

Access to personal data is restricted to individuals and service providers who require such access in order to perform their duties or provide services on our behalf.

Changes to This Privacy Policy

The Online Store reserves the right to update this Privacy Policy whenever necessary to reflect changes in applicable legislation or the operation of the online store.

The latest version of this Privacy Policy is always available on our website, and the date of the most recent update is displayed at the top of this page.

Contact

If you have any questions about this Privacy Policy, the processing of your personal data or wish to exercise your rights, please contact us:

Fookuses Fitness OÜ
Registry code: 17382773
Email: fitness@fookuses.com