Privacy Policy

Last updated: 01.01.2026

This Privacy Policy describes how Verdacasa OÜ (“we”, “us”, “our”) collects, uses, and protects personal data when you visit or make a purchase from www.verdacasa.com (the “Site”).

The Site is hosted on Shopify Inc., which provides the online e-commerce platform and acts as a data processor.

Personal Data We Collect

When you visit or make a purchase from the Site, we may collect the following personal data:

  • Name
  • Email address
  • Phone number
  • Billing and delivery address
  • Payment and order information
  • IP address and device information
  • Customer support communications

Payment data is processed securely by third-party payment providers and is not stored by us.

Purpose of Processing

We process personal data to:

  • Fulfill and deliver customer orders
  • Process payments and refunds
  • Provide customer support
  • Comply with legal and accounting obligations
  • Improve the functionality and security of the online shop

Legal Basis

Personal data is processed on the following legal bases:

  • Performance of a contract
  • Legal obligation
  • Legitimate interest
  • Consent (for marketing communications)

Sharing of Personal Data

Personal data may be shared with:

  • Shopify Inc.
  • Payment service providers
  • Delivery and logistics partners
  • Accounting and IT service providers

Data is shared only to the extent necessary to provide services.

International Transfers

Shopify may process personal data outside the European Economic Area (EEA). Such transfers are protected by GDPR-approved safeguards, including Standard Contractual Clauses.

Marketing Communications

We send newsletters and promotional messages only with the customer’s consent.

Customers can unsubscribe at any time via the link in the email or by contacting customer support.

Data Retention

Personal data is stored only as long as necessary:

  • Order and accounting data: as required by law
  • Customer accounts: until deletion request
  • Marketing data: until consent is withdrawn

Your Rights

Customers have the right to:

  • Access and correct their personal data
  • Request data deletion
  • Object to or restrict processing
  • Withdraw consent at any time

Requests can be submitted via customer support and will be answered within one month.

Data Security

We apply appropriate technical and organizational measures, including SSL encryption and secure hosting, to protect personal data.

Contact and Complaints

Email: info@verdacasa.com

Supervisory authority:

Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon)

Email: info@aki.ee

Website: https://www.aki.ee