Privacy Policy

Privacy Policy – Runaslava Group OÜ
Last updated: [26/07-2025]

This Privacy Policy describes how Runaslava Group OÜ (“we”, “us”, “our”, “Company”) collects, uses, shares, and protects your personal data when you use our website www.grimbynature.com (“Service”), in accordance with the General Data Protection Regulation (GDPR) and applicable Estonian law.

1. Who We Are

Data Controller:
Runaslava Group OÜ
Parda tn 6, Kesklinna linnaosa, 10151 Tallinn, Estonia
[email protected]

2. What Personal Data We Collect

We collect and process:

Identity data (name, surname)

Contact data (email, phone, delivery/billing address)

Order data (products ordered, transaction history)

Payment data (handled securely by payment providers—no card storage)

Usage data (IP, device/browser data, site usage, cookies)

Communications (emails, support messages)

3. How We Collect Your Data

Directly from you (purchase, account creation, subscribing, contact)

Automatically (website usage/cookies)

From partners (fulfillment, payment)

4. Why We Collect Your Data

Legal basis:

Contract (order fulfillment)

Consent (marketing—can be withdrawn)

Legal obligation (tax/accounting)

Legitimate interest (fraud prevention, security, service improvement)

Purposes:

Order processing and delivery (incl. via 3PL partner in Czech Republic)

Support and complaint handling

Marketing (where permitted)

Analytics and user experience improvement

5. How We Share Your Data

Data may be shared with:

Fulfillment/3PL partners (Czech Republic warehouse)

Payment processors (secure handling)

IT/service providers (hosting, support, analytics)

Legal/regulatory authorities (where required)

We do not sell your personal data. All partners are GDPR-compliant.

6. International Data Transfers

Data may be processed within and occasionally outside the EU under recognized safeguards.

7. Cookies & Tracking

We use cookies/technologies for:

Functionality/security

Remembering preferences

Analytics

See our Cookie Policy for more.
You can adjust preferences in your browser; disabling cookies may affect site use.

8. Data Retention

We keep data:

For as long as needed for the stated purpose or legal compliance (max. 7 years)

Marketing data until unsubscribed/consent withdrawn

9. Your Rights Under GDPR

You have the right to:

Access, correct, or erase data

Restrict or object to processing

Data portability

Withdraw consent at any time

Lodge a complaint with the supervisory authority (Estonian Data Protection Inspectorate – www.aki.ee)

Contact [email protected] to exercise your rights.

10. Children’s Privacy

Service not intended for children under 18. If you believe a child has provided data, contact us and we’ll promptly delete it.

11. Security

We implement appropriate measures to safeguard your data but cannot guarantee complete internet security.

12. External Links

Our site may link to external websites. We are not responsible for external sites' practices.

13. Updates to Policy

We may update this policy at any time. Material changes will be communicated on this page and by email if required.

14. Contact & Complaints

Questions or requests?
Email: [email protected]
Mail: Runaslava Group OÜ, Parda tn 6, Kesklinna linnaosa, 10151 Tallinn, Estonia
Supervisory authority:
www.aki.ee (Estonian Data Protection Inspectorate)