Privacy policy

Privacy Policy

Last updated: October 30, 2026

This Privacy Policy explains how personal data is collected, used, stored and protected when you visit reselleu.com, make a purchase, or otherwise contact ResellEU.

In this policy, “ResellEU”, “we”, “us” and “our” refer to the operator of reselleu.com, identified in Section 15, which is the data controller responsible for your personal data. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and the Estonian Personal Data Protection Act.

1. Personal Data We Collect

• Identity and contact data: full name, email address, billing address, phone number (if provided).
• Order and transaction data: products purchased, order number, amount paid, date and time of purchase, payment status, and your checkout consent to immediate delivery of digital content.
• Payment data: payments are processed by third-party payment providers. We never see or store your full card details. We only receive limited information such as payment method type, the last four digits of your card and payment confirmation.
• Account data (if you create an account): email address, encrypted password, order history and saved preferences.
• Technical and usage data: IP address, browser type and version, device type, operating system, approximate location based on IP, pages visited, time spent on the site, referring website, and download and access records for purchased products.
• Communication data: emails, messages and support requests you send us, and our replies.
• Marketing data: your marketing preferences and whether you have subscribed or unsubscribed.

2. How We Collect Your Data

• Directly from you: when you place an order, create an account, subscribe to emails or contact us.
• Automatically: through cookies and similar technologies when you use our website (see Section 7).
• From third parties: from our e-commerce platform, payment providers and fraud prevention services.

3. Why We Use Your Data and Our Legal Basis

• Processing your order, delivering digital products, sending order confirmations – Performance of a contract (Art. 6(1)(b))
• Customer support and answering your questions – Performance of a contract / legitimate interest (Art. 6(1)(b) and (f))
• Keeping accounting and tax records – Legal obligation (Art. 6(1)(c))
• Preventing fraud, securing our website, and defending against chargebacks and legal claims – Legitimate interest (Art. 6(1)(f))
• Analysing and improving our website – Consent for non-essential cookies (Art. 6(1)(a)) / legitimate interest
• Sending marketing emails – Consent (Art. 6(1)(a)), or legitimate interest for similar products to existing customers, as permitted by the Estonian Electronic Communications Act

Marketing: we send marketing emails to existing customers without separate consent only about products similar to those they purchased, and only if they were given a clear and free opportunity to object at checkout. You can unsubscribe at any time using the link in every marketing email, or by contacting us. Unsubscribing does not affect order-related emails.

4. Sharing Your Data

We do not sell or rent your personal data. We share data only with trusted service providers who process it on our behalf and under our instructions:

• Shopify (Shopify International Limited, Ireland): our e-commerce platform, which hosts the store and processes orders
• Payment providers (e.g. Stripe, Shopify Payments): to process payments securely
• Email service providers: to deliver products, order confirmations and, where you agreed, marketing emails
• Analytics providers: to understand how our website is used, if you consent
• Fraud prevention services: to detect and prevent fraudulent transactions
• Accountants and professional advisers: to meet legal and tax obligations

We may also disclose data where required by law, to authorities or financial institutions with a legal right to request it, or to establish, exercise or defend legal claims, including payment disputes and chargebacks.

5. International Data Transfers

Some of our service providers, including Shopify, may process personal data outside the European Economic Area (EEA), for example in Canada or the United States. When this happens, we make sure appropriate safeguards are in place, such as:

• a European Commission adequacy decision (for example for Canada, or for US companies certified under the EU–US Data Privacy Framework), or
• the European Commission’s Standard Contractual Clauses.

You can contact us for more information about these safeguards.

6. Data Retention

We keep personal data only as long as necessary:

• Order, invoice and payment records: 7 years, as required by the Estonian Accounting Act
• Checkout consent, delivery and access records: up to 3 years from the purchase, to handle disputes, chargebacks and legal claims
• Customer support communications: up to 3 years after the last contact
• Account data: until you delete your account, then as described above for order records
• Marketing data: until you unsubscribe or withdraw consent
• Cookies: according to the periods shown in our cookie banner

When data is no longer needed, it is securely deleted or anonymised.

7. Cookies

We use cookies and similar technologies:

• Strictly necessary cookies: required for the website, shopping cart and checkout to work. These do not require consent.
• Analytics and preference cookies: help us understand how visitors use the site and improve it.
• Marketing cookies: used to measure and personalise advertising.

Non-essential cookies are used only with your consent, which you give through our cookie banner. You can change or withdraw your consent at any time through the cookie settings on our website or your browser settings.

8. Data Security

We use appropriate technical and organisational measures to protect your personal data, including encrypted (SSL/TLS) connections, secure payment processing by certified providers, and limited access to data. No method of transmission over the internet is completely secure, but we take reasonable steps to protect your information.

9. Your Rights

Under the GDPR, you have the right to:

• Access: get a copy of the personal data we hold about you
• Rectification: correct inaccurate or incomplete data
• Erasure: ask us to delete your data, unless we must keep it by law (for example, accounting records)
• Restriction: ask us to limit how we use your data
• Objection: object to processing based on legitimate interest, and to direct marketing at any time
• Data portability: receive your data in a structured, machine-readable format
• Withdraw consent: at any time, without affecting processing that happened before withdrawal

To exercise your rights, email us at the address in Section 15. We will reply within one month of receiving your request. Where necessary, for example for complex or numerous requests, this period may be extended by up to two further months, in which case we will inform you within the first month. We may ask you to verify your identity before acting on a request.

Right to complain: you have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), Tatari 39, 10134 Tallinn, Estonia, www.aki.ee, or with the data protection authority in your country of residence.

10. Automated Decision-Making

Our payment and fraud prevention providers may use automated checks to detect fraudulent transactions, which can result in an order being declined or cancelled. If you think an order was wrongly declined, contact us and a person will review it. We do not use automated decision-making for any other purpose that produces legal or similarly significant effects for you.

11. Third-Party Websites

Our website and products may contain links to third-party websites and platforms, such as eBay. We are not responsible for their content or privacy practices. Please review their privacy policies before providing any personal data.

12. Age Restriction

Our website and products are intended for people 18 years of age or older. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, contact us and we will delete it.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in the law, our services or our business practices. The updated version will be published on this page with a new “Last updated” date. For significant changes, we will notify customers by email where appropriate.

14. Questions

For any questions about this Privacy Policy or how we handle your personal data, contact us at the email address below.

15. Data Controller and Contact Information

The data controller responsible for your personal data is:

LAUSTEC OÜ, operating ResellEU
Private limited company registered in the Estonian Commercial Register
Registry code: 17502314
VAT number: EE103027391
Registered address: Võistluse 8, Tallinn, 10132, Estonia
Email: hqresell9@gmail.com
Website: reselleu.com