Privacy Policy

Last updated: April 15, 2026

PHIARCA (“PHIARCA”, “we”, “us”, or “our”) manages this online store and website, including the data, content, features, tools, products, and services made available to you to provide a curated shopping experience (the “Services”). The Services are built on WordPress and use the WooCommerce e‑commerce plugin and related extensions and integrations to operate our online store. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction through the Services or when you contact us through any other means.

Please read this Privacy Policy carefully. By using or accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand how your personal information is collected, used, and disclosed in accordance with it.

In the event of any conflict between our Terms of Service and this Privacy Policy, this Privacy Policy will prevail with respect to the collection, processing, and disclosure of your personal information.

Personal information we collect or process

When we use the term “personal information,” we mean any data that identifies you or can reasonably be linked to you or another person. Personal information does not include data collected anonymously or data that has been de‑identified so that you cannot be identified or reasonably linked to you.

Depending on how you interact with the Services, where you live, and what is permitted or required by applicable law (including the General Data Protection Regulation, “GDPR”), we may collect or process the following categories of personal information, including inferences drawn from such information:

• Contact details, including your name, billing address, shipping address, phone number, and email address.
• Financial information, including credit card numbers, debit card numbers and financial accounts, payment card information, financial account details, transaction details, payment method, payment confirmation, and other payment‑related information.
• Account information, including your username, password, security questions, preferences, and settings.
• Transaction information, including items you view, add to your cart, save to your wish list, purchase, return, exchange, or cancel, as well as your past transactions.
• Communications with us, including information you provide when you contact customer support, send us questions or feedback, or otherwise communicate with us.
• Device information, including information about your device, browser, or network connection, your IP address, and other unique identifiers.
• Information about usage, including information relating to your interaction with the Services, such as how and when you use or browse them, the pages you view, and your actions on the site.

We also use cookies and similar technologies in connection with the Services. WooCommerce and WordPress may set cookies to remember your cart, recently viewed products, and other preferences (for example, cookies such as woocommerce_cart_hash, woocommerce_items_in_cart, and woocommerce_recently_viewed).

Sources of personal information

We may collect personal information from the following sources:

• Directly from you, including when you create an account, place an order, complete forms, respond to surveys, communicate with us, or otherwise provide personal information to us by any means.
• Automatically through the Services, including information from your device when you use our products or services or visit our website, as well as through cookies, pixels, and similar technologies.
• From our service providers, including payment processors, analytics providers, advertising partners, hosting providers, email service providers, and others who perform services for us.
• From our partners or other third parties, for example, if you access our Services through a third‑party platform or interact with third‑party integrations.

How we use your personal information

Depending on how you interact with us or which Services you use, we may use your personal information for the following purposes:

Providing, personalizing, and improving the Services

We use your personal information to provide you with the Services and to perform our contract with you. This includes:

• Processing and fulfilling your orders and payments.
• Creating, maintaining, and managing your account.
• Remembering your preferences and items of interest (for example, your cart or wish list).
• Arranging shipping and facilitating returns and exchanges.
• Sending you transactional and account‑related notifications (for example, order confirmations, shipping updates, and security alerts).
• Allowing you to post reviews or other content.
• Personalizing and improving the Services, including by recommending products and tailoring content based on your interests and past interactions.

Marketing and advertising

We may use your personal information for marketing and promotional purposes, such as:

• Sending you commercial, advertising, and promotional communications via email, text message, or postal mail, as permitted by law.
• Showing you online advertisements about our products or services on our own Services or on other websites and platforms, including based on items you have previously viewed, added to your cart, purchased, or other activities on the Services.

You can manage your communication preferences as described in the “Your rights and choices” section below.

Security and fraud prevention

We use your personal information to help maintain the security and integrity of our Services, including to:

• Authenticate your account and provide a secure shopping and payment experience.
• Detect, investigate, and prevent potential fraudulent, illegal, dangerous, or malicious activity.
• Protect public safety and the security of our systems and users.

If you choose to register an account, you are responsible for maintaining the confidentiality of your login credentials. We strongly recommend that you do not share your username, password, or other login information with anyone.

Communications with you

We use your personal information to:

• Provide you with customer support and respond to your requests and inquiries.
• Communicate with you about your account, orders, and our Services.
• Maintain and manage our relationship with you.

Legal and compliance purposes

We use your personal information to:

• Comply with applicable laws and legal obligations.
• Respond to valid legal processes, including requests from law enforcement or government authorities.
• Investigate or participate in civil discovery, potential or actual litigation, or other legal proceedings.
• Enforce or investigate possible violations of our terms, policies, or other agreements.

How we disclose personal information

We may disclose your personal information to third parties in the following circumstances, in accordance with this Privacy Policy and applicable law:

• With service providers and vendors who perform services on our behalf, such as web hosting, IT management, payment processing, data analysis, customer support, email delivery, cloud storage, order management, logistics and shipping, marketing, and advertising services.
• With business and marketing partners to provide marketing services and show you advertising, including on other websites and platforms, subject to their own privacy policies and applicable law.
• When you instruct us to do so, request it, or otherwise consent to the disclosure of certain information to third parties (for example, to send a gift order to another person or when you use social media widgets or login integrations).
• With our affiliates or, where applicable, within our corporate group.
• In connection with a business transaction involving PHIARCA, such as a merger, acquisition, reorganization, sale of assets, insolvency, or similar event.
• To comply with legal obligations and legal processes (for example, to respond to subpoenas, search warrants, or similar requests).
• To enforce our Terms of Service or other applicable policies and to protect or defend the Services, our rights, and the rights of our users or others.

We do not sell your personal information in the sense of “sale” under the GDPR. If we engage in activities that qualify as “sale” or “sharing” of personal information under other applicable privacy laws, we will provide you with the relevant notices and rights.

Cookies

We use cookies and similar technologies on our website to help it function properly, improve your browsing experience, analyze website traffic, and support marketing activities. Some cookies are necessary for the website to work, while others are only used with your consent.

You can control or disable cookies through your browser settings at any time. Please note that some parts of the website may not function properly if you disable certain cookies.

For more information about how we use cookies and how you can manage your preferences, please refer to our Cookie Policy.

Relationship with WooCommerce and other third‑party tools

Our store uses the WooCommerce plugin and related WordPress extensions to operate the online shop. These tools may process personal information (such as order details, IP address, browser information, and device information) to enable core e‑commerce functionality, including cart management, checkout, and payment processing.

Depending on your configuration and installed extensions, WooCommerce and related third‑party plugins may:

• Set cookies to remember your session, cart contents, and recently viewed products.
• Log IP addresses and basic technical details in server log files for security and diagnostics.
• Exchange information with payment gateways and external services to process your orders.

We configure and use these tools as data controller under the GDPR, and they generally act as our data processors. Their processing of your personal information is subject to their own terms, privacy policies, and data‑processing agreements, where applicable.

Third‑party websites and links

The Services may include links to websites or other online platforms operated by third parties. If you access links that lead to sites not affiliated with or controlled by us, we recommend that you review their privacy and security policies and other terms and conditions.

We do not control and are not responsible for the privacy or security of such sites, including the accuracy, completeness, or reliability of any information they contain. Any information you provide in public or semi‑public spaces—including information you share on third‑party social media platforms—may be visible to other users of the Services and to users of those third‑party platforms, without any limitation on its use by us or by third parties.

The inclusion of any third‑party links does not, by itself, imply our endorsement of the content of those platforms or their owners or operators, unless expressly stated in the Services.

Data on minors

The Services are not intended for use by minors, and we do not knowingly collect personal information from minors under the age defined as a child by applicable law in your jurisdiction.

If you are a parent or legal guardian of a minor who has provided us with their personal information, you may contact us using the contact details below to request its deletion. To the best of our knowledge, we do not “sell” or “share” (as those terms may be defined under applicable law) personal information of individuals under the age of 16.

Security and retention of your information

We use appropriate technical and organizational measures designed to protect your personal information from accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access, taking into account the nature of the personal information and the risks involved in processing it. However, no security measure is perfect or infallible, and we cannot guarantee “absolute security.”

Any information you send to us electronically may not be secure in transit. We recommend that you do not use unsecured channels to send us sensitive or confidential information.

We retain your personal information for as long as necessary for the purposes described in this Privacy Policy, including to:

• Maintain your account.
• Provide the Services.
• Fulfill our legal obligations.
• Resolve disputes.
• Enforce our agreements and policies.

When determining appropriate retention periods, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process it, and applicable legal requirements.

Your rights and choices

Depending on where you live and subject to applicable law, you may have some or all of the rights listed below regarding your personal information. These rights may apply only in certain circumstances and can be subject to conditions and limitations.

Rights under GDPR and similar laws

Where the GDPR or similar data‑protection laws apply (for example, if you reside in the European Economic Area (EEA), the United Kingdom (UK), or other jurisdictions with comparable laws), you may have the following rights:

• Right of access: To request confirmation as to whether we process your personal information and to obtain a copy of such information.
• Right to rectification: To request that we correct inaccurate or incomplete personal information that we hold about you.
• Right to erasure: To request that we delete your personal information in certain circumstances (for example, where it is no longer needed for the purposes for which it was collected).
• Right to restriction of processing: To request that we restrict the processing of your personal information in certain cases (for example, while we verify or investigate your concerns).
• Right to data portability: To receive a copy of your personal information in a structured, commonly used, and machine‑readable format and to request that we transfer it to a third party, where technically feasible and subject to certain conditions.
• Right to object: To object to our processing of your personal information where we rely on legitimate interests as our lawful basis, including for direct marketing.
• Right to withdraw consent: Where we process your personal information based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

Rights related to marketing and online tracking

You can manage your preferences regarding marketing communications and certain online tracking technologies as follows:

• Email marketing: You may opt out of receiving promotional emails at any time by following the unsubscribe instructions in those emails or by contacting us at the email address below. If you opt out, we may still send you non‑promotional communications related to your account or orders (for example, order and shipping confirmations).
• Cookies and tracking technologies: You can typically configure your browser to reject cookies or to notify you when a cookie is set. You may also have options via cookie banners or preference tools on our site. Please note that disabling cookies may affect the functionality of the Services.
• Global Privacy Control and similar signals: Where required by applicable law, we will treat recognized browser‑based opt‑out signals (such as Global Privacy Control) as a request to limit certain processing or sharing of personal information for the browser and device used.

Exercising your rights

You may exercise your rights by contacting us using the details in the “Contact” section below. When you contact us, we may need to verify your identity before processing your request, as permitted or required by applicable law.

Where permitted by law, you may appoint an authorized representative to submit requests on your behalf. We may require the representative to provide proof of authorization and may ask you to confirm your identity directly with us. We will respond to your request within a reasonable period and within the timeframes required by applicable law.

We will not discriminate against you for exercising any of your rights under applicable data‑protection laws.

If you reside in the EEA or the UK

If you reside in the European Economic Area (EEA) or the United Kingdom (UK), the following additional information applies:

• PHIARCA is the “data controller” of your personal information for the purposes of the GDPR and UK GDPR.
• You have the rights described above, including rights of access, rectification, erasure, restriction, portability, objection, and withdrawal of consent, subject to applicable conditions and limitations.

You also have the right to lodge a complaint with your local data‑protection authority if you believe that our processing of your personal information violates applicable law.

In Estonia, the competent supervisory authority is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), located in Tallinn (website: http://www.aki.ee, email: info@aki.ee).

International transfers

PHIARCA is registered in Estonia, and your personal information may be processed and stored in Estonia and in other countries where our service providers, partners, or IT infrastructure are located. This means that your personal information may be transferred to countries outside your country of residence, some of which may not provide the same level of data protection as your home jurisdiction.

Where required by law, we will ensure that appropriate safeguards are in place for such international transfers of personal information. For transfers from the EEA or UK to countries that have not been recognized as providing an adequate level of protection, we generally rely on European Commission Standard Contractual Clauses (SCCs) or equivalent contractual protections, unless another lawful transfer mechanism applies.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time (for example, to reflect changes in our practices, the Services, or applicable laws). When we make changes, we will post the updated Privacy Policy on this page and update the “Last updated” date at the top.

Where required by law, we will provide you with additional notice of material changes (for example, by email or by displaying a prominent notice on the Services) and, if necessary, obtain your consent.

We encourage you to review this Privacy Policy periodically to stay informed about our privacy practices.

Contact

If you have any questions about this Privacy Policy or our privacy practices, or if you wish to exercise any of your rights, please contact us at:

• Phone: +372 5866 0316
• Email: support@phiarca.com

For the purposes of applicable data‑protection legislation, PHIARCA is the data controller of your personal information.