Privacy Policy

Effective Date: August 29, 2026

Data Controller: Matelier OY

Contact Email: support@mybrushstore.ee

At Matelier OY, accessible from our website, one of our main priorities is the privacy of our visitors. This Privacy Policy document outlines the types of information that is collected and recorded by Matelier OY and how we use it, in compliance with the General Data Protection Regulation (GDPR) and applicable data protection laws.

If you have additional questions or require more information about our Privacy Policy, do not hesitate to contact us at support@mybrushstore.ee.

1. Data Controller

Matelier OY is the data controller responsible for processing your personal data collected through this website.

  • Company Name: Matelier OY

  • Contact Email: support@mybrushstore.ee

2. Information We Collect

We collect personal information that you voluntarily provide to us when you interact with our website, place an order, sign up for newsletters, or contact customer support. This may include:

  • Identity & Contact Data: Name, email address, shipping and billing address, phone number.

  • Transaction Data: Details about payments, order history, and products purchased.

  • Technical & Usage Data: IP address, browser type and version, time zone setting, operating system, device details, and interaction patterns with our website.

3. How We Use Your Information

We process your personal data for the following purposes:

  • To process, fulfill, and manage your orders and customer service requests.

  • To improve, personalize, and optimize our website’s performance and user experience.

  • To analyze how visitors interact with our website.

  • To communicate with you regarding updates, customer service matters, or marketing messages (where consent has been provided).

  • To detect, prevent, and address technical issues, fraud, or security risks.

4. Analytics, Cookies, and Google Tag Manager

We use cookies and analytical tools to collect information about how users navigate and interact with our website.

Google Tag Manager (GTM)

Our website uses Google Tag Manager (GTM) provided by Google LLC. GTM is a tag management system that allows us to deploy and manage website measurement tools and analytical scripts. GTM itself does not set cookies or directly store personal data, but it triggers other tags (such as web analytics scripts) that may collect device identifiers, IP addresses, and user behavior patterns.

Cookies

Cookies are small data files stored on your device. You can choose to accept, decline, or configure cookie preferences through your browser settings or via our site’s cookie consent banner. Please note that disabling technical or necessary cookies may impact website functionality.

5. Legal Basis for Processing (GDPR)

We process personal data based on the following legal grounds:

  • Performance of a Contract: Processing is necessary to fulfill orders or service agreements.

  • Legitimate Interests: Necessary for our legitimate business operations, analytics, and security measures.

  • Consent: Where you have explicitly opted in (e.g., accepting analytical/marketing cookies or subscribing to a newsletter).

  • Legal Obligation: Necessary to comply with statutory accounting and tax regulations.

6. Data Sharing and Third Parties

We do not sell, trade, or rent personal data to third parties. We may share information with trusted third-party service providers (such as hosting providers, payment gateways, logistics partners, and analytical services) only to the extent necessary to perform services on our behalf and under strict data protection terms.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, and reporting obligations.

8. Your Data Protection Rights

Under the GDPR, you have the following rights:

  • Right to Access: Request a copy of the personal data we hold about you.

  • Right to Rectification: Request correction of inaccurate or incomplete data.

  • Right to Erasure: Request the deletion of your personal data (“right to be forgotten”).

  • Right to Restrict Processing: Request restriction of data processing under certain conditions.

  • Right to Data Portability: Request transfer of your data to another controller.

  • Right to Object: Object to data processing based on legitimate interests or direct marketing.

To exercise any of these rights, please contact us at support@mybrushstore.ee.

9. Changes to This Privacy Policy

We may update our Privacy Policy periodically. Any changes will be published on this page with an updated effective date.

10. Contact Us

For any questions regarding this Privacy Policy or data protection practices, please contact:

Matelier OY

Email: support@mybrushstore.ee

Shopping Cart