Privacy policy

Effective Date: 01.01.2024

This Privacy Policy describes how Hatcat OÜ (hereinafter "we", "us", or "our company") collects, uses, shares, and protects your personal information when you visit our website www.hatcat.eu (hereinafter "Site") or purchase our products.

We take your privacy seriously and are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

1. Controller of Personal Data

The controller (Responsible) of your personal data is:

Hatcat OÜ
Registration number: 16286332
Legal address: Harju maakond, Tallinn, Kesklinna linnaosa, Vesivärava tn 50-201, 10152, Estonia
Email:

2. What Information We Collect

We collect personal data in two main ways:

A) Information you provide to us voluntarily:

• Contact Information: First name, last name, email address, phone number.
• Shipping Information: Shipping address (including country, city, street, building number, postal code, "Nova Poshta" branch number).
• Payment Information: Billing address. (Please note: we do not collect or store your full credit card details. This data is processed directly by our third-party payment gateways).
• Support Information: Any information you provide when contacting our customer support.

B) Information collected automatically (Technical Information):

• Device Information: Your IP address, browser type and version, operating system, time zone.
• Usage Information: Data on how you interact with our Site (pages you visited, time spent on the site, links you clicked).
• Cookies: We use cookies to ensure the functionality of the site, for analytics, and for marketing purposes. You can manage your cookie settings in your browser.

3. How We Use Your Information

We use the collected information exclusively for specific, clearly defined purposes:

• To Fulfill Orders: Processing your payments, organizing delivery (including transferring your address and phone number to logistics partners like "Nova Poshta"), and providing you with order confirmations.
• To Communicate With You: Responding to your support requests, sending service messages (e.g., about order status).
• To Improve Our Site: Analyzing user behavior to optimize navigation, product range, and user experience (e.g., using Google Analytics).
• For Marketing (with your consent): Sending you news, special offers, and promotions via email, from which you can unsubscribe at any time.
• For Security and Fraud Prevention: Verifying transactions for potential risk or fraudulent activity.

4. Legal Basis for Processing (according to GDPR)

We process your personal data on the following legal bases:

• Performance of a Contract (Art. 6(1)(b) GDPR): When we process your data to fulfill an order (delivery, payment).
• Your Consent (Art. 6(1)(a) GDPR): When you have given clear consent for data processing for a specific purpose (e.g., subscribing to our email newsletter).
• Our Legitimate Interests (Art. 6(1)(f) GDPR): When we process data to improve our service, for analytics, or to prevent fraud, provided that your interests and fundamental rights do not override ours.
• Legal Obligation (Art. 6(1)(c) GDPR): When we are required to retain certain data to comply with legislation (e.g., tax or accounting laws).

5. Data Transfer to Third Parties

We do not sell or rent your personal data. We may share your information only with a limited circle of trusted partners who help us conduct our business:

• Logistics Companies (Carriers): Such as "Nova Poshta", for the delivery of your orders.
• Payment Gateways: For the secure processing of your payments.
• Analytics Service Providers: Such as Google Analytics, to analyze site traffic.
• Marketing Platforms: For sending email newsletters (only with your consent).

We require all third parties to adhere to strict data security rules and to use the data only for the purposes for which we provided it.

6. Your Rights Under GDPR

As a data subject located in the EU (or if your data is processed by an EU-based controller), you have the following rights:

• Right of Access (Art. 15 GDPR): You can request a copy of the personal data we hold about you.
• Right to Rectification (Art. 16 GDPR): You can request the correction of inaccurate or incomplete information.
• Right to Erasure ("Right to be Forgotten") (Art. 17 GDPR): You can request the deletion of your data if it is no longer needed for the original purposes or if you have withdrawn your consent.
• Right to Restriction of Processing (Art. 18 GDPR): You can request that we temporarily stop processing your data (but continue to store it).
• Right to Data Portability (Art. 20 GDPR): You can request your data in a structured, machine-readable format.
• Right to Object (Art. 21 GDPR): You can object to the processing of your data based on our legitimate interests (e.g., for direct marketing).
• Right to Withdraw Consent: If processing is based on consent, you can withdraw it at any time.
• Right to Lodge a Complaint: You have the right to lodge a complaint with a data protection supervisory authority. For Hatcat OÜ, the lead supervisory authority is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon).

To exercise any of these rights, please contact us at the address specified in Section 1.

7. Data Security

We take all reasonable technical and organizational measures to protect your personal data from loss, theft, unauthorized access, or alteration.

All traffic on our Site is encrypted using SSL/TLS technology. Access to your personal data is restricted to those employees and contractors who need it to perform their job duties.

8. Data Retention

We retain your personal data only for as long as necessary to achieve the purposes for which it was collected (e.g., to fulfill your orders).

We are required to retain data related to completed orders for a longer period in accordance with accounting and tax legislation (e.g., in Estonia, this is 7 years).

9. Minors

Our Site is not intended for individuals under the age of 16 (or another age established by local law). We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Effective Date".

11. Contacts

If you have any questions about this Privacy Policy or how we process your data, please contact us:

Hatcat OÜ
Email: