Privacy Policy

1. Introduction

Woollyes (“we”, “us” or “our”) is committed to protecting your privacy and handling your personal information responsibly.

This Privacy Policy explains how we collect, use, store, disclose and protect your personal information when you visit our website, browse our products, place an order, contact us or otherwise interact with our services.

This policy applies to customers and website visitors in the United Kingdom and the European Union, where applicable.

We process personal information in accordance with applicable data protection legislation, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the EU General Data Protection Regulation (EU GDPR), where applicable.

Website: https://www.woollyes.eu

Contact email: info@woollyes.eu

2. Who We Are

Woollyes is the brand responsible for the website and the processing of personal information described in this Privacy Policy, subject to the legal entity operating the store.

The identity and contact details of the relevant data controller are:

Where required by applicable law, we will also provide the details of our EU representative or Data Protection Officer, if applicable.

3. Personal Information We Collect

We may collect the following categories of personal information, depending on how you interact with our website.

Information You Provide Directly

When you place an order, create an account, contact us or subscribe to marketing communications, we may collect:

  • Name
  • Email address
  • Billing and delivery address
  • Telephone number
  • Order details and purchase history
  • Customer service enquiries and communications
  • Account information
  • Marketing preferences and consent records

Payment Information

Payments are processed through the payment providers made available at checkout. We may receive payment-related information, such as payment status, transaction references and limited payment details.

Full payment card information is generally handled by the relevant payment processor rather than stored directly by Woollyes, depending on the payment method and system configuration.

Automatically Collected Information

When you visit our website, certain information may be collected automatically, subject to applicable consent requirements. This may include:

  • IP address
  • Browser type and device information
  • Operating system
  • Website pages visited and interactions
  • Referring websites and traffic sources
  • Approximate location derived from technical information
  • Cookie identifiers and online activity data

Information From Third Parties

We may receive information from service providers and third parties, such as payment processors, delivery partners, analytics providers, advertising platforms and social media platforms, where permitted by law and consistent with their applicable privacy terms.

4. How We Use Your Personal Information

We use personal information for the following purposes:

Order processing and fulfilment: To process payments, confirm orders, arrange delivery, manage returns and refunds, and provide order-related updates.

Customer service: To respond to enquiries, resolve complaints and provide assistance with products and orders.

Website operation and improvement: To maintain our website, understand how visitors use it, troubleshoot technical issues and improve functionality.

Personalisation: To remember relevant preferences and provide a more convenient shopping experience.

Marketing and promotions: To send promotional emails, newsletters and information about products or offers where we have the required consent or another lawful basis under applicable law.

Advertising and measurement: Where permitted and, where required, with your consent, to measure advertising performance, understand campaign effectiveness and show relevant promotions.

Security and fraud prevention: To protect our website, customers, transactions and business against fraud, unauthorised access and misuse.

Legal and regulatory obligations: To maintain appropriate business records, respond to lawful requests and comply with applicable legal requirements.

5. Legal Bases for Processing

Where UK GDPR or EU GDPR applies, we process personal information only when an appropriate legal basis exists. Depending on the circumstances, these bases may include:

  • Contract: Processing necessary to fulfil your order or take steps you request before entering into a contract.

  • Legal obligation: Processing required to comply with applicable laws, such as tax and accounting requirements.

  • Legitimate interests: Processing necessary for legitimate business purposes, such as website security, fraud prevention and service improvement, where those interests are not overridden by your rights.

  • Consent: Processing based on your permission, where consent is required or relied upon, including certain marketing and non-essential cookie activities.

Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

6. Sharing Your Personal Information

We may share personal information with trusted third parties where necessary for the purposes described in this policy. These may include:

  • E-commerce and website hosting providers, including Shopify where applicable.
  • Payment processing providers.
  • Shipping, courier and logistics companies.
  • Customer support and communication platforms.
  • Email marketing providers.
  • Analytics and advertising providers, subject to applicable consent requirements.
  • IT, security and fraud-prevention providers.
  • Professional advisers, regulators and public authorities where legally required.

We require service providers acting on our behalf to handle personal information in accordance with applicable legal requirements and appropriate contractual safeguards.

We do not sell your personal information to third parties in exchange for money. Certain advertising or analytics activities may nevertheless constitute sharing or targeted advertising under some privacy laws, depending on how the services are configured.

7. International Data Transfers

Some of our service providers may process or store personal information outside the United Kingdom or the European Economic Area.

Where personal information is transferred internationally, we will take steps required by applicable data protection law. These may include relying on an applicable adequacy decision, approved contractual safeguards or another lawful transfer mechanism.

You may contact us using the details in this policy for further information about relevant safeguards, where applicable.

8. Cookies and Similar Technologies

Our website may use cookies, pixels, tags and similar technologies to support website functionality, remember preferences, analyse website usage and measure advertising performance.

Cookies may include:

Strictly necessary cookies: These support essential functions, such as security, shopping basket functionality and checkout.

Preference cookies: These remember settings and preferences.

Analytics cookies: These help us understand how visitors interact with our website.

Advertising cookies: These may be used to measure advertising effectiveness or provide relevant advertisements.

Where required by UK or EU law, non-essential cookies and similar technologies will only be used after you provide valid consent. You can change or withdraw your cookie preferences through the available cookie settings tool.

You may also manage cookies through your browser settings. Blocking certain cookies may affect website functionality.

For further details, please refer to our Cookie Policy or cookie settings, where available.

9. Marketing Communications

We may send you promotional emails about Woollyes products, new collections, special offers and other relevant updates where permitted by applicable law.

Where consent is required, we will request it before sending marketing communications.

You can unsubscribe at any time by using the unsubscribe link in our emails or by contacting info@woollyes.eu.

Unsubscribing from marketing emails will not prevent us from sending essential transactional communications, such as order confirmations, delivery updates or important service messages.

10. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including fulfilling orders, providing customer support, meeting legal obligations, resolving disputes and preventing fraud.

Retention periods depend on the type of information, the purpose for which it is processed and applicable legal requirements.

When personal information is no longer required, we will take appropriate steps to delete it or otherwise securely dispose of it, subject to applicable law and any legitimate retention requirements.

11. Data Security

We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration and disclosure.

The safeguards used may include access controls, secure service providers and appropriate security measures for data transmission and storage.

No method of electronic transmission or storage can be guaranteed to be completely secure. We therefore cannot guarantee absolute security, but we aim to protect personal information in a manner appropriate to the risks involved.

12. Your Privacy Rights

Depending on your location and applicable law, you may have the right to:

  • Request access to your personal information.
  • Request correction of inaccurate or incomplete information.
  • Request deletion of personal information in certain circumstances.
  • Request restriction of processing.
  • Object to certain processing activities, including processing based on legitimate interests.
  • Request a copy of certain information in a portable format.
  • Withdraw consent where processing relies on consent.
  • Opt out of direct marketing.
  • Lodge a complaint with the relevant data protection authority.

These rights are subject to applicable legal conditions and exceptions.

To exercise your rights, contact us at info@woollyes.eu. We may need to verify your identity before responding to your request.

If you are in the United Kingdom, you can contact the Information Commissioner's Office (ICO). If you are in the European Union, you may contact the relevant data protection supervisory authority in your country.

13. Children's Privacy

Our website is intended for a general audience and is not knowingly designed to collect personal information directly from children without an appropriate legal basis.

Where applicable law requires parental consent for a child's personal information to be processed, we will comply with those requirements.

If you believe a child has provided personal information to us in circumstances where it should not have been collected, please contact info@woollyes.eu so that we can review the matter and take appropriate action.

14. Third-Party Websites and Services

Our website may contain links to third-party websites, social media platforms or external services.

These third parties operate under their own privacy policies and practices. We are not responsible for their independent handling of personal information.

We encourage you to review the privacy policies of any third-party websites or services you use.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business, website, service providers or legal obligations.

The updated version will be published on this page with a revised “Last Updated” date. Where legally required, we will provide additional notice or obtain consent before implementing relevant changes.

Any changes will be handled in accordance with applicable law.

16. Contact Us

If you have questions about this Privacy Policy, wish to exercise your privacy rights or have concerns about how your personal information is handled, please contact us:

Woollyes

Website: https://www.woollyes.eu

Email: info@woollyes.eu

Business address: Woollyes OÜ
Allika, Suure-Lähtru Village
Lääne-Nigula Municipality, Lääne County 90632
Estonia

We will review your enquiry and respond in accordance with applicable data protection requirements.