Privacy policy

Last updated: October 2026

In this privacy policy we inform you, in accordance with Articles 13 and 14 of the General Data Protection Regulation (GDPR), which personal data we process when you visit our online shop at organiqly.shop or place an order with us, for what purposes and on what legal basis we do so, and what rights you have.

1. Controller

Organiqly OÜ
Tornimäe tn 5
10145 Tallinn
Estonia
Represented by its management board member Luc D.A. Scheele
Phone: +49 176 80506498
Email: info@organiqly.shop

2. Contact for data protection matters

For all questions about data protection and to exercise your rights, you can reach us at info@organiqly.shop or at the postal address above.

3. Hosting and shop system

Our online shop runs on the Shopify e-commerce platform. The provider for merchants in Europe is Shopify International Limited, Ireland; its parent company is Shopify Inc., Canada. Shopify provides the shop’s technical infrastructure, including hosting, cart, checkout, customer accounts, order management, newsletter sending and the contact form. In doing so, Shopify processes the data described in this policy on our behalf under a data processing agreement pursuant to Art. 28 GDPR.

The legal basis is Art. 6(1)(b) GDPR where the processing serves the performance of a contract or pre-contractual measures, and otherwise Art. 6(1)(f) GDPR; our legitimate interest lies in the secure, stable and efficient operation of our online shop.

Data may also be transferred to countries outside the European Economic Area, in particular to Canada and the USA. For Canada, there is an adequacy decision of the European Commission. For transfers to the USA, Shopify relies on certification under the EU-U.S. Data Privacy Framework where available and otherwise on the EU Standard Contractual Clauses. Further information can be found in Shopify’s privacy policy at shopify.com/legal/privacy.

The connection to our online shop is encrypted using SSL/TLS.

4. Server log files

Each time our online shop is accessed, Shopify automatically records information transmitted by your browser. This includes in particular the IP address, the date and time of access, the page requested, the previously visited page (referrer), the browser type and version, and the operating system. This data is processed to deliver the pages, to ensure system security and stability and to prevent misuse. The legal basis is Art. 6(1)(f) GDPR. Log data is stored only for as long as necessary for these purposes.

5. Cookies and consent banner

Our online shop uses cookies and similar technologies. We use strictly necessary cookies, for example for the cart, checkout, session management, security and storing your cookie choice, without consent because the shop cannot function without them. The legal basis is Article 5(3) of the ePrivacy Directive as implemented in the law of your country of residence (in Germany § 25(2) no. 2 TDDDG) and Art. 6(1)(b) and (f) GDPR.

On your first visit, we show you Shopify’s cookie banner with the options “Accept”, “Decline” and “Manage”. Cookies that are not strictly necessary, for example for statistics or preference functions of the platform, are set only if you consent via the banner. The legal basis is then Article 5(3) of the ePrivacy Directive as implemented in the law of your country of residence (in Germany § 25(1) TDDDG) and Art. 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future by deleting the cookies for our shop in your browser; the banner will then be shown again and you can make a new choice.

6. Customer account

You can use a customer account in our shop. You sign in via the “Login with Shop” function provided by Shopify or with a verification code sent to your email address. We process your email address, name, addresses and order history in order to provide the account. The legal basis is Art. 6(1)(b) GDPR. For a Shop account with Shopify, Shopify’s privacy terms apply in addition. You can request the deletion of your customer account at any time by email to info@organiqly.shop; statutory retention obligations remain unaffected.

7. Order processing and payment

When you place an order with us, we process the data you provide in the checkout, in particular your name, shipping and billing address, email address, phone number if provided, the items ordered, and payment and transaction data. We use this data to conclude and perform the contract, to send you order and shipping confirmations and to answer your questions. The legal basis is Art. 6(1)(b) GDPR; retention under commercial and tax law is based on Art. 6(1)(c) GDPR.

The following payment methods are available in our shop: American Express, Apple Pay, BLIK, EPS, Google Pay, Klarna, Maestro, Mastercard, MB WAY, MobilePay, Shop Pay, UnionPay and Visa. Payments are processed via Shopify Payments. Depending on the payment method you choose, the data required for the payment is passed on to the respective payment service, for example to Apple for Apple Pay, to Google for Google Pay, to Klarna when paying with Klarna, to Shopify for Shop Pay, and to the card schemes and payment providers involved. We do not store your full card details. The legal basis is Art. 6(1)(b) GDPR. The privacy notices of the payment services also apply to their processing. Klarna may, in particular for invoice or instalment purchases, carry out an identity and credit check under its own responsibility; details can be found in Klarna’s privacy notice.

8. Shipping

To deliver your order, we pass your name and shipping address to the carrier we have engaged. The legal basis is Art. 6(1)(b) GDPR. Where we also pass your email address or phone number to the carrier so that it can inform you of the delivery date or contact you with questions about the delivery, this is based on Art. 6(1)(f) GDPR; our legitimate interest lies in smooth delivery.

9. Newsletter

If you subscribe to our newsletter, we use your email address to send you information about our products, recipes and offers. Subscription uses the double opt-in procedure: after subscribing, you receive an email with a confirmation link, and we add you to the mailing list only after you click it. To document your subscription, we store the time of subscription and confirmation. The newsletter is sent via Shopify.

The legal basis is your consent under Art. 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future via the unsubscribe link in every newsletter or by email to info@organiqly.shop. The lawfulness of processing carried out before the withdrawal remains unaffected.

10. Contact form and contact by email

If you contact us via the contact form or by email, we process the data you provide, in particular your name, email address and the content of your message, in order to handle your request. The contact form is provided via Shopify. The legal basis is Art. 6(1)(b) GDPR where your request relates to a contract or pre-contractual measures, and otherwise Art. 6(1)(f) GDPR; our legitimate interest lies in responding to your request.

11. Storage periods

  • We retain order and invoice data for the retention periods required under commercial and tax law, generally six to ten years.
  • We store your customer account data until you request deletion of the account, unless retention obligations require otherwise.
  • We store your email address for the newsletter until you unsubscribe. We may keep proof of your consent beyond that for as long as necessary to defend against possible claims.
  • We store contact requests until your matter has been fully resolved, unless retention obligations require otherwise.

Otherwise, we delete personal data as soon as it is no longer required for the respective purpose.

12. Your rights

You have the following rights with regard to the personal data concerning you:

  • right of access (Art. 15 GDPR),
  • right to rectification (Art. 16 GDPR),
  • right to erasure (Art. 17 GDPR),
  • right to restriction of processing (Art. 18 GDPR),
  • right to data portability (Art. 20 GDPR),
  • right to object to processing (Art. 21 GDPR).

Right to object: Where we process your data on the basis of Art. 6(1)(f) GDPR, you may object to the processing at any time on grounds relating to your particular situation. We will then no longer process your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Withdrawal of consent: You can withdraw any consent you have given at any time with effect for the future (Art. 7(3) GDPR).

To exercise your rights, a message to info@organiqly.shop is sufficient.

13. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Estonian Data Protection Inspectorate:

Andmekaitse Inspektsioon (Estonian Data Protection Inspectorate)
Tatari 39
10134 Tallinn
Estonia
Email: info@aki.ee

You may also contact the supervisory authority in the EU member state of your habitual residence, your place of work or the place of the alleged infringement; in Germany, for example, the Bavarian State Office for Data Protection Supervision (BayLDA) or the data protection authority of your federal state.

14. Provision of your data

Providing the data marked as required fields in the checkout is necessary to conclude and perform the purchase contract. Without this data we cannot accept and fulfil your order. All other information is voluntary.

15. No automated decision-making

We do not use automated decision-making, including profiling, within the meaning of Art. 22 GDPR. Checks carried out by payment services under their own responsibility are governed by their privacy notices.

16. Fonts, analytics and marketing tools

The fonts used in our shop are served locally; no connection to Google Fonts servers is established when you visit our pages.

We currently do not use any third-party analytics or marketing tools, such as social media tracking pixels or Google advertising and analytics services. Before activating any such service, we will add it to this privacy policy and, where required, obtain your consent via the cookie banner.

17. Changes to this privacy policy

We update this privacy policy when our data processing or the legal situation changes. The current version published in our shop applies.