Privacy Policy
Introduction
KaleidoGlow values your privacy and is committed to complying with all applicable laws and regulations regarding any personal data we may collect about you when you visit our website, KaleidoGlow.eu. By using our website, you agree to the collection and use of your data in accordance with this Privacy Policy.
This Privacy Policy explains what information we collect, how we use it, and what rights you have to protect your personal data. This policy applies only to our website and its visitors and does not apply to information collected through other channels.
The data controller is Kaleidoglow (Reval STC OÜ, registry code 11281924).
Email: info@Kaleidoglow.eu
We collect and process information in accordance with the European Union’s General Data Protection Regulation (GDPR), which came into force on 25 May 2018.
Data Collection and Use
What Information We Collect
The information we collect includes both information that you knowingly and actively provide to us when using or participating in our services or campaigns, as well as information automatically sent by your devices when accessing our products and services.
Your personal data may reach us in the following ways:
- When you place an order in the KaleidoGlow.eu online store.
- When you register for an account in the KaleidoGlow.eu online store.
- When you contact us by email.
- When you browse KaleidoGlow.eu.
- When you provide personal information about another person who will receive the goods.
- When you make payments using online banking or another electronic payment method.
- When you comment on, like, or share a post on our social media account.
- When you subscribe to our newsletter.
- When you leave a review of products on KaleidoGlow.eu.
Types of Data We Collect
Personal Data
We only request personal information when it is necessary to provide you with a service. When you contact us or visit our website, you may share the following information with us:
- First and last name
- Date of birth
- Email address
- Postal address, country, county, city
- Phone number
- Bank account number
- Payment card details
- Your purchase history and activity in our online store
- Information about your web browser and IP address
Log Files
Our website, KaleidoGlow.eu, stores log files about its visitors. The information collected may include:
- Type of device used
- Internet Protocol (IP) address
- Browser type
- Internet Service Provider (ISP)
- Date and time of website visits
- Entry and exit pages and the number of clicks made on the website
Information contained in log files is used to analyse trends, administer the website, track visitors’ activity, and gather demographic information. This information is not intended to, and does not enable us to, identify individuals.
Cookies
Like most websites, KaleidoGlow.eu uses cookies. A cookie is essentially a text file stored on your device when you visit a website. Cookies are used to determine and store preferences, regional settings, service usage choices, and more.
For more information, please read our Cookie Policy.
How We Use Your Data
We may use the information we collect for various purposes, including:
- Maintaining, managing, developing, personalising, and expanding our website.
- Collecting statistics to help us provide better services and/or offers, and to understand and analyse visitor behaviour on our website.
- Identifying you by phone, text message, or email.
- Sending you information and requesting feedback about our services.
- Preventing fraud and protecting our website.
- Enabling us to communicate with you through social media accounts.
- Improving the quality of our services and providing more efficient browsing solutions.
- Developing new products or services, or improving their functionality.
- Shipping and delivering goods, processing orders, issuing invoices, processing orders through online banking, confirming your orders, and issuing refunds.
- Recommending products and services that may be of interest to you based on your previous orders.
- Simplifying and speeding up our interactions when you contact us.
- Other purposes, such as analysing data, researching trends, and evaluating the effectiveness of our advertising campaigns.
When We May Share Your Data
- We may share or transfer your personal data in connection with a change of ownership, merger, sale of assets, financing, or acquisition of our company. We will notify you of any transfer of your personal data and inform you if it becomes subject to a different Privacy Policy.
- We may share your data with our affiliated companies, requiring them to comply with this Privacy Policy. These affiliates may include our parent and subsidiary companies, joint venture partners, or companies owned by us.
- We may share your data with our business partners to offer you certain products, services, or promotions.
- We may disclose your personal data for any other purpose with your consent.
- We may share your personal data with third parties, such as authorised data processors, accountants, transport and courier companies, and payment service providers. The data controller transfers the personal data necessary for processing payments to the authorised processor, Maksekeskus AS.
- We are required to disclose your personal data when required by law. In good faith, we may also disclose your data to comply with legal obligations, protect our rights or property, prevent or detect potential violations related to the use of our services, and ensure the safety of service users.
Retention of Your Personal Data
The company retains your personal data only for as long as necessary to fulfil the purposes set out in this Privacy Policy. We retain and use your personal data to the extent necessary to comply with our legal obligations (for example, when we are required to retain your data in accordance with applicable laws), resolve disputes, and enforce our legal agreements and policies.
- Purpose of processing: Order processing Maximum retention period: 3 years after the order has been fulfilled, except for data that must be retained for longer to comply with legal obligations.
- Purpose of processing: Ensuring the operation of online store services Maximum retention period: 12 months from the date of collection (e.g. server logs, security logs, technical data).
- Purpose of processing: Customer management Maximum retention period: 3 years after the last purchase.
- Purpose of processing: Financial activities and accounting Maximum retention period: 7 years, in accordance with the retention periods established by accounting legislation.
- Purpose of processing: Marketing Maximum retention period: Until consent is withdrawn or 3 years after the last marketing-related activity.
The company also retains log files for internal analysis purposes. Log files are generally kept for shorter periods, unless the data is used to strengthen security, improve the functionality of our services, or we are legally required to retain it for a longer period.
Processing Children’s Data
None of our products or services are intended for children under the age of 13, and we do not knowingly collect personal data from children under 13. If we become aware that we have processed the personal data of someone under 13, we will remove that person’s information from all our databases.
Your Rights Regarding the Protection of Your Data
You always have the right not to share your personal data with us, understanding that this may affect your experience on our website. If you choose not to share your data with us, we will not treat you less favourably as a result.
By providing us with personal information, you acknowledge that we collect, store, use, and disclose it in accordance with this Privacy Policy. You have the right to request details about the data we collect about you.
If we receive your personal information from a third party, we will protect it in accordance with this Privacy Policy and the laws of the Republic of Estonia. If you provide us with another person’s data, you confirm that you have the right and permission to do so.
Even if you have previously consented to sharing your personal data with us for marketing purposes, you retain the right to change your mind at any time. You always have the right to opt out of communications with us and request that we remove your data from our databases.
From time to time, we may also request information to verify your identity.
If you believe that the information we have collected about you is inaccurate, outdated, incomplete, irrelevant, or misleading, please contact us by email at info@kaleidoglow.eu. We will make every reasonable effort to correct any inaccurate, incomplete, misleading, or outdated information.
If you believe that we have violated applicable data protection laws and wish to file a complaint, please contact us using the contact details provided in this document and include all relevant details of the alleged violation. We will promptly investigate your complaint and respond to you in writing, providing the results of our investigation and outlining the steps we will take to resolve your complaint. You also have the right to contact the relevant supervisory or data protection authority.
GDPR Data Protection Rights
We want to ensure that you are fully aware of all your data protection rights. Every website user is entitled to the following rights:
- Right of access – You have the right to request copies of your personal data.
- Right to rectification – You have the right to request that we correct any information you believe is inaccurate. You also have the right to request that we complete information you believe is incomplete.
- Right to erasure – Under certain conditions, you have the right to request the deletion of your personal data.
- Right to restriction of processing – Under certain conditions, you have the right to request that we restrict the processing of your personal data.
- Right to object to processing – Under certain conditions, you have the right to object to the processing of your personal data.
- Right to data portability – Under certain conditions, you have the right to request that we transfer the data we have collected to another organisation or directly to you.
Data Security
The security of your personal data is important to us. However, please remember that no method of transmitting information over the Internet or method of electronic storage is 100% secure. While we make every effort to protect your data, we cannot guarantee its absolute security.
Kaleidoglow takes all reasonably necessary measures to ensure that your data is processed securely and in accordance with this Privacy Policy and the laws of the Republic of Estonia. Your data will not be transferred to any organisation or country unless there is a valid reason for doing so and the security of your data is ensured.
Links to Other Websites
Our website may contain links to other websites that are not owned by us. If you click on a third-party link, you will be redirected to that third party’s website. We strongly recommend that you review the privacy policy of every website you visit.
We have no control over third-party websites and accept no responsibility for their content, privacy policies, services, or anything else related to them.
Updates to This Privacy Policy
We reserve the right to make changes to this Privacy Policy whenever necessary. Whenever this Privacy Policy is updated, we will revise the document’s update date displayed at the bottom of the page.
If you continue to visit and use our website after the Privacy Policy has been updated, we will consider this as your implied acceptance of the changes.
Last updated: 30 September 2026