This Privacy Policy explains how Nexora Virex OÜ, registry code 17501769, VAT EE102984299, registered address Tartu mnt 67/1-13b, 10115 Tallinn, Estonia, processes personal data for the Urban Kick Shop website and online store.
1. Data controller
The data controller is Nexora Virex OÜ. For privacy questions, contact us at [email protected].
2. Personal data we process
We may process: name, email address, phone number, billing address, shipping address, order details, product selections, payment status, customer messages, refund/return details, IP address, device and browser information, cookie identifiers and website usage data.
3. Purposes and legal bases
- Order processing and delivery: to accept orders, process payment status, prepare shipment and provide customer support. Legal basis: contract performance.
- Accounting and compliance: to keep invoices, accounting records, tax records and business documentation. Legal basis: legal obligation.
- Fraud prevention and website security: to protect the website, customers and business from misuse, spam, fraud or unauthorised access. Legal basis: legitimate interest and legal obligation where applicable.
- Customer support: to answer emails, resolve delivery issues, process returns and respond to complaints. Legal basis: contract performance and legitimate interest.
- Website improvement and analytics: to understand website performance and improve user experience where analytics tools are enabled. Legal basis: legitimate interest or consent where required.
- Marketing communications: only where legally permitted or where the customer has given consent. Legal basis: consent or legitimate interest where applicable.
4. Service providers
We may share necessary data with service providers that help us operate the store, including hosting providers, content delivery/security providers, payment processors, email providers, couriers, fulfilment partners, accounting providers, IT support providers and analytics or marketing tools where enabled. These providers may process data only as needed to provide their services.
5. International transfers
Some service providers may process data outside the European Economic Area. Where this happens, we rely on appropriate safeguards such as adequacy decisions, Standard Contractual Clauses or other lawful transfer mechanisms required by GDPR.
6. Cookies
We use cookies and similar technologies for essential website functions, cart/checkout operation, security and, where enabled, analytics or marketing. More information is available in our Cookie Policy.
7. Data retention
Order, accounting and tax records are retained for the period required by applicable law. Customer support messages are retained for as long as needed to handle the request and protect legal interests. Technical logs and cookie data are retained for limited periods depending on their purpose and provider settings.
8. Your rights
Subject to GDPR conditions, you may request access to your personal data, correction, deletion, restriction, portability, objection to processing, or withdrawal of consent where processing is based on consent. You may also have the right to lodge a complaint with a data protection authority.
9. Security
We use reasonable technical and organisational measures to protect personal data, including encrypted website connections, limited access to administrative systems and service providers selected to support secure ecommerce operations. No online system can be guaranteed to be completely secure.
10. Contact
For privacy requests, contact [email protected]. Please include enough information for us to identify your request and verify your identity where necessary.