Privacy policy

Last updated: June 27, 2026

1. INTRODUCTION

Heliscent operates this website and online store, including all related information, content, features, tools, products, and services (the “Services”) in order to provide you with a curated shopping experience.

This Privacy Policy describes how DELTA ECOM OÜ, operating under the brand Heliscent, collects, uses, and discloses your personal data when you visit, use, or make a purchase from our Services, or otherwise communicate with us.

Our store is hosted on Shopify Inc., which provides the e-commerce platform that enables us to sell our products and services.

If there is any conflict between this Privacy Policy and our Terms of Service, this Privacy Policy takes precedence regarding personal data processing.

By using our Services, you confirm that you have read and understood this Privacy Policy.

2. DATA CONTROLLER INFORMATION

The data controller responsible for your personal data is:

DELTA ECOM OÜ
Tornimäe tn 5
10145 Tallinn
Estonia
Registry code: 17405675
VAT number: EE102942286
Email: info@heliscent.com

3. DEFINITION OF PERSONAL DATA

“Personal data” means any information relating to an identified or identifiable natural person.

This includes information that can directly or indirectly identify you, such as identifiers, device data, or purchase history.

Anonymous or aggregated data that cannot identify you is not considered personal data.

4. PERSONAL DATA WE COLLECT

Depending on your interaction with our Services, we may collect the following categories of personal data:

4.1 Contact Information

  • Full name
  • Billing address
  • Shipping address
  • Email address
  • Phone number (if provided)

4.2 Order & Transaction Data

  • Purchased items
  • Cart contents
  • Order history
  • Returns and cancellations
  • Payment confirmation details
  • Delivery details

4.3 Payment Data

We do not store full payment card details.

Payments are processed by third-party payment providers (e.g. Shopify Payments, Stripe, PayPal), which may collect:

  • Card type
  • Last 4 digits
  • Billing country
  • Payment token information

4.4 Account Information

  • Login credentials
  • Preferences
  • Account settings

4.5 Device & Technical Data

  • IP address
  • Browser type and version
  • Time zone
  • Device identifiers
  • Cookies and tracking technologies

4.6 Usage Data

  • Pages viewed
  • Products viewed
  • Click behavior
  • Session duration
  • Navigation patterns

4.7 Communications Data

  • Customer support messages
  • Emails sent to us
  • Feedback or inquiries

5. SOURCES OF PERSONAL DATA

We collect personal data from:

  • Direct interactions with you (orders, sign-ups, messages)
  • Automatically through cookies and analytics tools
  • Shopify platform and integrated apps
  • Payment processors
  • Shipping and logistics providers
  • Marketing and advertising partners

6. PURPOSES AND LEGAL BASIS FOR PROCESSING

We process your personal data under the following GDPR legal bases:

6.1 Performance of Contract

We process data to:

  • Process orders
  • Deliver products
  • Provide customer support
  • Manage returns and refunds

6.2 Legal Obligation

We process data to:

  • Comply with tax laws
  • Maintain accounting records
  • Respond to legal requests

6.3 Legitimate Interests

We process data to:

  • Improve and optimize our Services
  • Prevent fraud and abuse
  • Analyze customer behavior
  • Secure our website and systems
  • Conduct limited marketing activities

6.4 Consent

We process data based on consent for:

  • Email marketing
  • Cookies and tracking technologies
  • Personalized advertising

You may withdraw consent at any time.

7. HOW WE USE YOUR DATA

We use personal data to:

  • Provide and fulfill orders
  • Process payments
  • Deliver customer support
  • Send order updates
  • Improve user experience
  • Prevent fraud and security issues
  • Send marketing communications (if opted-in)
  • Comply with legal obligations

8. COOKIES & TRACKING TECHNOLOGIES

We use cookies and similar technologies to:

  • Enable website functionality
  • Store user preferences
  • Analyze traffic and usage
  • Support marketing and advertising

You can control cookies through your browser settings or cookie consent banner.

Some cookies are essential for the operation of the website.

9. HOW WE SHARE PERSONAL DATA

We may share personal data with:

9.1 Shopify

Shopify provides our e-commerce infrastructure and processes data on our behalf.

9.2 Service Providers

  • Payment processors
  • Shipping carriers
  • IT and cloud services
  • Customer support tools
  • Analytics providers

9.3 Marketing Partners

We may share limited data with advertising partners to:

  • Display personalized ads
  • Measure campaign performance
  • Improve marketing relevance

9.4 Legal Requirements

We may disclose data if required:

  • By law
  • By court order
  • By government authorities

9.5 Business Transfers

In case of:

  • Merger
  • Acquisition
  • Restructuring
  • Bankruptcy

Personal data may be transferred as part of business assets.

10. SHOPIFY DATA PROCESSING

Our store is hosted by Shopify.

Shopify processes personal data to:

  • Provide platform functionality
  • Ensure security
  • Improve services

Some data may be transferred outside the EEA under appropriate safeguards (e.g. Standard Contractual Clauses).

You may also exercise rights directly through Shopify’s privacy portal.

11. INTERNATIONAL DATA TRANSFERS

Your data may be transferred outside the European Economic Area (EEA).

When this occurs, we ensure appropriate safeguards such as:

  • EU Standard Contractual Clauses (SCCs)
  • Adequacy decisions by the European Commission
  • Other legally recognized protections

12. DATA RETENTION

We retain personal data only as long as necessary for:

  • Order fulfillment
  • Legal and tax obligations
  • Dispute resolution
  • Security and fraud prevention
  • Business operations

Retention periods vary depending on data type and legal requirements.

13. DATA SECURITY

We implement reasonable technical and organizational measures to protect your data.

However, no system is 100% secure, and we cannot guarantee absolute security.

We recommend that you do not share sensitive data via unsecured channels.

14. YOUR RIGHTS (GDPR)

If you are located in the EU/EEA, you have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion (“right to be forgotten”)
  • Restrict processing
  • Data portability
  • Object to processing
  • Withdraw consent at any time

15. MARKETING COMMUNICATIONS

You may opt out of marketing emails at any time by:

  • Clicking “unsubscribe” in emails
  • Contacting us directly

You will still receive essential transactional messages (e.g. order updates).

16. CHILDREN’S DATA

Our Services are not intended for individuals under the age of majority.

We do not knowingly collect personal data from minors.

If such data is identified, it will be deleted promptly.

17. AUTOMATED DECISION-MAKING

We do not use automated decision-making or profiling that produces legal or similarly significant effects on users.

18. THIRD-PARTY WEBSITES

Our website may contain links to third-party websites.

We are not responsible for their privacy practices and encourage you to review their policies.

19. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time.

Updates will be posted on this page with a revised “Last updated” date.

20. CONTACT INFORMATION

For privacy-related questions or requests:

DELTA ECOM OÜ
Tornimäe tn 5
10145 Tallinn
Estonia
Registry code: 17405675
VAT: EE102942286
Email: info@heliscent.com