Privacy policy

This policy explains how DOSEIT processes personal data when you visit doseit.ee, place an order or contact us. Our online store serves customers in Estonia.

1. Who is responsible for your data?

CIBUS OÜ (DOSEIT)
Registry code: 16348886
VAT number: EE102427206
Registered address: Kaarli pst 11, 58/3, 10119 Tallinn, Harjumaa, Estonia
Warehouse and return address: Kaarli pst 11, 58/3, 10119 Tallinn, Harjumaa, Estonia
Email: doseit.info@gmail.com
Telephone: +372 5663 3014
Website: doseit.ee

CIBUS OÜ is the controller of the personal data we use to operate DOSEIT. Contact us at the email address above for privacy questions or to exercise your rights.

2. Data we collect and where it comes from

  • Information you provide: your name, email address, telephone number, delivery and billing details, selected delivery point, order details and messages to customer service.
  • Order and payment information: purchased products, amounts, transaction references, payment status, returns and refunds. Payment providers process payment credentials; we do not receive your full card number or card security code.
  • Website and device information: IP address, browser and device details, pages viewed, shopping-cart activity, cookie identifiers and consent preferences. Non-essential tracking is subject to your consent.
  • Information from service providers: payment confirmations, delivery status and information needed to prevent fraud or resolve a payment dispute.

We do not ask for health information to sell food supplements. Please do not send diagnoses, medical records or test results in order notes or ordinary customer-service messages.

3. Why we use your data and the legal basis

  • Orders and customer service: to process payments, deliver goods, communicate about orders and handle returns — performance of a contract or steps requested before a contract (GDPR Article 6(1)(b)).
  • Legal obligations: to keep accounting records and comply with tax, consumer-protection and other applicable requirements (Article 6(1)(c)).
  • Security and claims: to prevent fraud, keep our store secure and establish, exercise or defend legal claims — our legitimate interests in protecting customers and our business (Article 6(1)(f)), balanced against your rights.
  • Marketing and optional tracking: to send newsletters you have subscribed to and use non-essential analytics or advertising technologies — your consent (Article 6(1)(a)). You can withdraw consent at any time.

Order contact and delivery details are necessary to fulfil your purchase. Without the required information we may be unable to process or deliver your order. Marketing and optional-cookie consent are not a condition of purchase.

4. Shopify, payments and other recipients

Our store is hosted by Shopify. We share the information needed to run the store with Shopify and its service providers. Payments are processed through Shopify Payments and the payment method you choose, including Shop Pay, Apple Pay or Google Pay where available. The relevant payment provider may also process information as an independent controller for its own legal and security obligations.

We share delivery details with the carrier you select at checkout, such as Omniva, DPD or Smartpost Itella, and the shipping services needed to arrange your parcel. Authorised providers supporting our email, store administration and accounting may receive only the information needed for their work. We may disclose information to competent authorities where required by law or to advisers where necessary to handle legal claims.

Shopify Network Intelligence is enabled. Shopify may use data from your interactions with our store together with interactions with other merchants and Shopify to provide enhanced services, including personalisation and advertising. Information may be processed by Shopify and relevant service providers in other countries. Consent is required for non-essential tracking and personalised advertising. For Shopify's own processing, see the Shopify Consumer Privacy Policy. You can also exercise your rights and manage relevant choices through the Shopify Privacy Portal.

5. Cookies, analytics and advertising

Essential cookies support functions such as the shopping cart, checkout, security and remembering your privacy choices. Optional analytics and marketing technologies require consent. Our store has a Meta (Facebook and Instagram) integration; where you consent to the relevant tracking, it can share device identifiers and browsing or purchase events with Meta to measure advertising and personalise ads. See Meta's Privacy Policy for its processing.

You can accept or reject optional categories using the cookie banner and change your choices through the site's cookie preferences. You may also contact us for help withdrawing consent. Browser settings let you delete or block cookies, but blocking essential cookies may affect checkout. Rejecting optional cookies does not prevent you from buying products.

If you subscribe to marketing emails, you can unsubscribe using the link in each email or by contacting us. Transactional messages about an order are separate from marketing.

6. International transfers and security

Some providers may process data outside the European Economic Area. Where this happens, transfers must rely on an applicable adequacy decision or appropriate safeguards, such as the European Commission's Standard Contractual Clauses. Contact us for information about the safeguards relevant to your data.

We use appropriate technical and organisational measures, including access restrictions and secure services, to protect personal data. Access is limited to people and providers who need it for the purposes described here.

7. How long we keep data

  • Accounting source documents are kept for seven years from the end of the financial year in which the transaction was recorded, as required by Estonian law.
  • Other order records, correspondence and complaint information are kept for as long as necessary to fulfil the order, handle the issue and meet applicable legal or claim-limitation periods.
  • Account information is kept while it is needed to provide your account. Closing an account does not remove records we must retain by law.
  • Marketing contact information is used until you unsubscribe or withdraw consent. We may retain a minimal suppression record so that we respect your choice, and evidence of consent where necessary for compliance.
  • Cookie, consent and technical-log retention depends on the purpose and the relevant technology. Data is deleted or anonymised when no longer needed, unless a legal obligation or an ongoing dispute requires retention.

8. Your rights

Subject to the conditions in the GDPR, you may request access to your data, correction, erasure, restriction of processing or data portability. You may object to processing based on legitimate interests and object to direct marketing at any time. You can withdraw consent without affecting the lawfulness of processing before withdrawal.

Email doseit.info@gmail.com to make a request. We may need to verify your identity using only information proportionate to the request. We normally respond within one month; if an extension permitted by the GDPR is necessary, we will explain it within that month.

You may complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon): www.aki.ee, or another competent supervisory authority.

9. Changes to this policy

We may update this policy to reflect changes to our services or legal obligations. The current version is published on this page. Where required, we will inform you of material changes or ask for fresh consent before processing for a new purpose.