Privacy policy

Effective Date: 2025-12-12

Xoltra OÜ (“we,” “us,” or “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, share, and safeguard your information when you visit or make purchases on mekulo.com.

By using our website or purchasing from us, you agree to the practices described in this Privacy Policy.

1. Data We Collect

We collect the following personal data from our users:

• Identity & Contact Data: name, email address, phone number, delivery address.
• Payment Data: payment card or other payment information necessary to process orders.
• Technical Data: IP address, device information.
• Analytics & Tracking: data collected via analytics and Facebook Pixel.
• Cookies: cookies necessary for website functionality and analytics.

We do not use cookies for retargeting or advertising purposes.

2. Purpose of Data Processing

We process your personal data for the following purposes:

1. Order Processing & Delivery: To process your purchase, manage orders, and deliver goods.
2. Customer Support: To respond to inquiries and resolve issues.
3. Fraud Prevention & Security: To detect and prevent fraudulent activity.
4. Marketing (optional): To send newsletters or promotional communications if you have given consent.
5. Analytics & Website Improvement: To analyze website traffic, improve our services, and monitor performance.

3. Legal Basis for Processing (GDPR)

We process your personal data based on the following legal grounds:

• Contract Performance: Necessary to fulfill your orders and provide our services.
• Consent: Where you have opted in to receive marketing communications.
• Legitimate Interests: Fraud prevention, analytics, website improvement, and security.
• Legal Obligation: Retaining data for accounting and tax purposes as required by Estonian law.

4. Data Sharing

We share your personal data only with third parties necessary to provide our services:

• Delivery Companies & Suppliers: To fulfill orders and handle shipping.
• Payment Processors: To securely process payments.

We do not share your data with marketing platforms or other third parties.

5. Data Retention

We retain your personal data:

• Until your order is completed, including delivery and resolution of any disputes.
• Up to 7 years for accounting and tax compliance as required by Estonian law.

After this period, your data will be securely deleted or anonymized.

6. Cookies and Tracking

We use cookies and tracking technologies for:

• Website functionality.
• Analytics purposes via Facebook Pixel.

No cookies are used for retargeting or third-party advertising.

7. International Data Transfers

All personal data is stored and processed within the European Union (EU). We do not transfer your data outside the EU.

8. Your Rights Under GDPR

You have the following rights regarding your personal data:

1. Access: Request a copy of the personal data we hold about you.
2. Correction: Request correction of inaccurate or incomplete data.
3. Deletion: Request erasure of your personal data (subject to legal/accounting obligations).
4. Restriction of Processing: Request limits on how we process your data.
5. Data Portability: Receive your data in a structured, commonly used, machine-readable format.
6. Objection: Object to certain processing, including marketing.
7. Withdraw Consent: Withdraw consent for marketing at any time without affecting prior processing.
8. Lodge Complaint: File a complaint with a supervisory authority (e.g., Estonian Consumer Protection Board).

To exercise your rights, please contact us at: info@mekulo.com.

9. Security of Your Data

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, or disclosure.

10. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Updated versions will be published on mekulo.com with the effective date. We encourage you to review this policy regularly.

11. Contact Information

For questions, concerns, or requests regarding this Privacy Policy or your personal data, contact:

Xoltra OÜ
Harju maakond, Tallinn, Kesklinna linnaosa, Tornimäe tn 5, 10145, Estonia
Email: info@mekulo.com