Privacy policy
Last updated: September 19, 2026
Who we are (data controller)
Travelgear OÜ ("we", "us") is the controller of the personal data we process about you when you visit or buy from our online store at travelgear.eu (and our country domains) and when you contact us.
Travelgear OÜ · Sepapaja tn 6, 15551 Tallinn, Estonia · Registry code 17586412 · Email: shop@travelgear.eu
Our store runs on Shopify. Shopify processes personal data on our behalf to provide the store, and in some cases acts as an independent controller for its own purposes — see "Shopify" below.
The personal data we process
Depending on how you interact with us, we may process:
- Contact and identity details — name, email, phone, billing and delivery address.
- Order and transaction data — items viewed, added to cart or purchased; order history; returns and exchanges; payment method and confirmation. We do not store full card numbers; card data is handled by our payment providers.
- Account data — if you create an account: username, password and preferences.
- Communications — the content of your messages when you contact customer service or leave a review.
- Technical and usage data — device, browser, IP address and similar identifiers, and how you interact with the store, collected through cookies and similar technologies (see "Cookies").
Why we process it, and our legal basis (GDPR Article 6)
| Purpose | Legal basis |
|---|---|
| Processing and delivering your orders, returns and refunds; managing your account | Performance of a contract (Art. 6(1)(b)) |
| Customer service and responding to your enquiries | Contract / our legitimate interest in supporting customers (Art. 6(1)(b)/(f)) |
| Fraud prevention, security and keeping the store working | Legitimate interest (Art. 6(1)(f)) |
| Complying with legal obligations, e.g. accounting and consumer law | Legal obligation (Art. 6(1)(c)) |
| Email/SMS marketing and personalised advertising | Your consent, or legitimate interest where permitted (Art. 6(1)(a)/(f)); you can opt out at any time |
| Non-essential cookies and analytics | Your consent (Art. 6(1)(a)) |
Where we rely on consent, you can withdraw it at any time; this does not affect processing carried out before withdrawal.
Cookies and similar technologies
We use cookies and similar technologies to make the store work, remember your cart and preferences, measure how the store is used, and — with your consent — for analytics and marketing.
Strictly necessary cookies are always active because the store cannot function without them. Non-essential cookies (analytics and marketing) are only set with your consent, which we request through our cookie banner when you first visit. You can change or withdraw your choices at any time via the cookie settings on our website, and you can control cookies through your browser settings.
Who we share data with
- Shopify, our store platform and hosting provider.
- Service providers acting on our behalf — payment processors, shipping and fulfilment carriers, email/marketing tools, analytics and IT providers.
- Authorities or advisers where required by law, or to establish, exercise or defend legal claims.
- In a business transfer such as a merger or acquisition.
We require our processors to protect your data and to use it only for the purposes we specify.
Shopify
The store is hosted by Shopify, which processes data about your use of the store to provide and improve it, and may use certain data across merchants to provide enhanced features, acting as a controller for those purposes. You can read the Shopify Consumer Privacy Policy at https://www.shopify.com/legal/privacy/consumers and exercise related rights via https://privacy.shopify.com/en.
International transfers
Where we or our providers transfer your data outside the EU/EEA, we rely on a recognised transfer mechanism, such as an adequacy decision or the European Commission's Standard Contractual Clauses, to ensure your data remains protected.
How long we keep your data
We keep personal data only as long as needed for the purposes above: order and accounting records for the periods required by Estonian tax and commercial law; account data while your account is active; and marketing data until you opt out. When data is no longer needed, we delete or anonymise it.
Your rights
Under the GDPR you have the right to access your data; to have inaccurate data corrected; to have data erased; to restrict or object to processing; to data portability; and to withdraw consent where we rely on it. To exercise any of these, email us at shop@travelgear.eu. We may need to verify your identity, and we will respond within the time limits set by law.
Complaints
If you have concerns about how we handle your data, please contact us first at shop@travelgear.eu. You also have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee) or with the supervisory authority in your EU/EEA country of residence.
Children
Our store is not directed at children, and we do not knowingly collect personal data from children below the age of digital consent in their country. If you believe a child has provided us with personal data, contact us and we will delete it.
Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated version here and change the "Last updated" date, and give notice of material changes as required by law.