Privacy policy

This Privacy Policy explains how Decadence OÜ (Estonia), operating the brand Decaplaza, collects, uses, shares, and protects personal data when you visit or make a purchase from decaplaza.com (the “Site”) or contact us (together, the “Services”). 

1) Data Controller

Controller: Decadence OÜ (Estonia)
Brand: Decaplaza
Website: decaplaza.com
Contact email: info@decaplaza.com

2) What personal data we collect

A. Data you provide (checkout and contact)

We collect personal data primarily during checkout or when you contact us, such as:

  • Contact details: name, email, phone number (if provided)
  • Shipping/billing details: address information
  • Order information: items purchased, sizes/variants, order notes, returns/exchange information
  • Communications: messages you send to us and our responses

B. Data collected automatically

  • Device and usage data: IP address, browser/device information, pages viewed, approximate location derived from IP, and interactions with the Site
  • Cookies and similar technologies: see Section 8

C. Payment data

Payments are handled through Shopify at checkout. We do not typically receive or store full payment card details. We may receive limited payment-related information (e.g., payment status, transaction identifiers) needed to confirm and manage your order.

3) Why we use your data (purposes)

We use personal data to:

  • Provide the Site and enable checkout
  • Process and fulfill orders (including confirmations, shipping, returns/exchanges)
  • Provide customer support and respond to inquiries
  • Detect, prevent, and investigate fraud or security issues
  • Maintain business records and comply with legal obligations (e.g., accounting/tax)
  • Improve our Services (e.g., performance, troubleshooting, analytics where used)
  • Send service-related messages (order and shipping updates)

If we send marketing emails, we will do so only where permitted by law and you can opt out at any time (see Section 9).

4) Legal bases (GDPR)

For EU/EEA users, we process personal data under these legal bases:

  • Contract (Art. 6(1)(b)): to process and deliver your order, handle returns/exchanges, and provide support
  • Legal obligation (Art. 6(1)(c)): to meet tax/accounting and consumer protection requirements
  • Legitimate interests (Art. 6(1)(f)): to run, secure, and improve our business and Site, prevent fraud, and provide efficient customer service
  • Consent (Art. 6(1)(a)): for non-essential cookies and certain marketing activities where required

5) Who we share data with

We share personal data only as needed to run the store and fulfill orders, including with:

Shopify (our e-commerce platform)

Our store is hosted on Shopify, which provides the online e-commerce platform that allows us to sell products and process orders. Shopify processes personal data as part of providing its services (hosting, checkout, payments handling, fraud prevention tools, and related infrastructure).

Service providers involved in fulfillment and operations

Depending on how we operate the store, we may share data with:

  • Shipping and logistics carriers
  • Email/service communication providers
  • IT, security, and analytics providers
  • Professional advisers (accountants/lawyers) where necessary
  • Authorities when required by law or to protect rights/safety and prevent fraud

We require service providers to protect personal data and process it only for the services they provide to us.

6) International sales & data transfers

Because we sell worldwide and use Shopify and other providers that may operate globally, your data may be processed outside the EU/EEA.

Where required, appropriate safeguards are used (such as adequacy decisions or Standard Contractual Clauses). Contact info@decaplaza.com if you want more information about applicable safeguards.

7) Data retention

We keep personal data only as long as necessary for the purposes described above, including:

  • Order and invoice records: retained as required for accounting/tax and legal compliance
  • Customer support messages: retained as needed to handle your request and maintain reasonable records
  • Fraud/security logs: retained as needed for security and prevention

8) Cookies and similar technologies

We use cookies and similar technologies to:

  • Enable essential site functions (cart/checkout, security)
  • Remember preferences
  • Understand how the site is used and improve performance (if analytics are enabled)

9) Marketing communications

If we send newsletters or promotional emails, you can opt out at any time via the unsubscribe link or by emailing info@decaplaza.com. Service emails (e.g., order confirmations) are not marketing.

10) Your rights (EU/EEA)

You may have the right to:

  • Access your data
  • Correct inaccuracies
  • Request deletion (where applicable)
  • Restrict or object to processing (especially where based on legitimate interests)
  • Data portability (in certain cases)
  • Withdraw consent (where processing is based on consent)

To exercise your rights, contact info@decaplaza.com.

Complaints

You can lodge a complaint with your local data protection authority. In Estonia, this is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon).