Privacy Policy

Last updated: August 2025

1. Introduction

Welcome to SHAMPC. We are committed to protecting your privacy and ensuring that your personal data is handled in a safe and responsible manner. This Privacy Policy explains how OÜ shampcmaa ("we", "us", or "our") collects, uses, and protects your information when you visit our website shampc.online and use our wholesale services.

2. Data Controller Information

The entity responsible for processing your personal data is:

  • Company Name: OÜ shampcmaa

  • Registry Code: 17296269

  • Address: Narva mnt 148-9, 13628 Tallinn, Estonia

  • Email: [email protected]

  • Phone: +44 07848 152633

3. Data We Collect

We may collect and process the following categories of personal data:

  • Contact Information: Name, email address, phone number, and company name (provided via contact forms or order inquiries).

  • Usage Data: IP address, browser type, operating system, referring URLs, and information on how you interact with our website.

  • Wholesale Data: Business tax IDs, billing addresses, and purchase history.

  • Customer Support Data: Any information you provide when contacting us for support or product inquiries.

4. Legal Basis for Processing

Under the GDPR, we process your data based on the following legal grounds:

  • Consent: When you opt-in to receive our product updates or use non-essential cookies.

  • Contractual Necessity: When processing is required to fulfill wholesale orders, manage deliveries, or take steps at your request prior to entering into a contract.

  • Legitimate Interests: For improving our website, ensuring security, and conducting B2B communication.

  • Legal Obligation: To comply with Estonian tax, accounting, and reporting laws.

5. How We Use Your Data

We use your personal data to:

  • Process and deliver wholesale orders for electronics.

  • Respond to your inquiries and stock requests.

  • Send promotional materials or inventory updates (with your consent).

  • Analyze website traffic to improve user experience.

  • Prevent fraudulent activity and ensure the security of our website.

6. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected:

  • Inquiries: Kept for up to 2 years after the last communication.

  • Wholesale/Client Data: Kept for the duration of the relationship plus 7 years (as required by Estonian accounting law for invoices).

  • Marketing Data: Kept until you unsubscribe or withdraw consent.

7. Data Sharing and Transfers

We do not sell your personal data. We may share your information with:

  • Service Providers: Hosting providers (Framer), logistics and shipping partners, and analytics tools.

  • Legal Authorities: If required by law or to protect our legal rights.

  • International Transfers: If we transfer data outside the EEA, we ensure appropriate safeguards (such as Standard Contractual Clauses) are in place.

8. Cookies

Our website uses cookies to enhance your experience.

  • Essential Cookies: Required for the website to function.

  • Analytics Cookies: Used to understand how visitors use the site. You can manage your cookie preferences through your browser settings.

9. Your Rights

Under the GDPR, you have the following rights:

  • Access: Request a copy of the data we hold about you.

  • Rectification: Request correction of inaccurate data.

  • Erasure: Request deletion of your data.

  • Restriction: Request that we limit the processing of your data.

  • Data Portability: Request a transfer of your data.

  • Objection: Object to processing based on legitimate interests.

  • Withdraw Consent: Withdraw your consent at any time.

To exercise these rights, please contact us at [email protected].

10. Security

We implement appropriate technical and organizational measures (such as SSL encryption) to protect your personal data against unauthorized access, loss, or alteration.

11. Complaints

If you believe your data is being handled incorrectly, you have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon):