Last updated: 10 October 2026
This policy explains what personal data Sizerlane collects when you visit sizerlane.com, buy from us or contact us, why we use it, who we share it with, and your rights under the EU General Data Protection Regulation (GDPR).
1. Who is responsible for your data
The data controller is Sizerlane OÜ, a private limited company registered in Estonia, registry code 17613669, [TO FILL: registered address]. Email: [TO FILL: contact address @sizerlane.com].
2. What we collect
- Order and contact details: name, delivery and billing address, email address, phone number (if you give it).
- Order details: what you bought, prices, delivery method, returns and refunds.
- Payment details: payment status and method. Card details are handled by the payment provider; we do not see or store your full card number.
- Messages: what you write to us through the contact or withdrawal form or by email.
- Device and usage data: IP address, browser, device and pages visited, collected through cookies and similar technologies, as described in section 6.
3. Why we use it and on what legal basis
- To take, deliver and support your order (including returns, refunds and guarantee claims): to perform our contract with you (GDPR Art. 6(1)(b)).
- To keep accounting and tax records: to meet our legal obligations (GDPR Art. 6(1)(c)).
- To answer your messages: to perform the contract or take steps you ask for before one (Art. 6(1)(b)), or our legitimate interest in replying to you (Art. 6(1)(f)).
- To keep the shop secure and prevent fraud: our legitimate interest (Art. 6(1)(f)).
- To send you marketing emails and use non-essential cookies: only with your consent (Art. 6(1)(a)), which you can withdraw at any time.
We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.
4. Who we share it with
We share personal data only as far as needed for the purposes above, with:
- Shopify, which hosts our shop and processes data on our behalf. See the Shopify privacy policy.
- Our payment provider, to process your payment: [TO FILL once the payment provider is chosen].
- Our supplier and its courier, who pack and deliver your order: they receive your name, delivery address and, where the courier needs them, your phone number or email address.
- Our accountant and public authorities, where the law requires it.
We do not sell your personal data.
5. Transfers outside the EU
Some of our service providers, including Shopify, may process data outside the European Economic Area. Where they do, the transfer relies on an EU adequacy decision or on the European Commission's Standard Contractual Clauses.
6. Cookies
Our shop uses cookies that are needed for it to work (for example, your cart and checkout). We use analytics or marketing cookies only if you agree to them in the cookie banner, and you can change your choice at any time.
7. How long we keep it
We keep order and accounting records for as long as Estonian accounting and tax law requires. We keep messages for as long as needed to deal with your request and any follow-up, and marketing consent records until you withdraw consent. Then we delete or anonymise the data.
8. Your rights
You have the right to access your personal data, to have it corrected or erased, to restrict or object to its processing, to data portability, and to withdraw consent at any time without affecting processing before the withdrawal. To use any of these rights, email [TO FILL: contact address @sizerlane.com]. We answer within one month.
You also have the right to complain to a data protection supervisory authority. In Estonia this is the Data Protection Inspectorate (Andmekaitse Inspektsioon), Tatari 39, 10134 Tallinn, www.aki.ee. You can also complain to the authority in the EU country where you live: list of EU authorities.
9. Children
Our shop is not aimed at children, and we do not knowingly collect data about children.
10. Changes
We may update this policy. The date at the top shows the latest version.