Privacy policy

Conveyor Shop OÜ ("we", "us") is a company registered in Estonia under registry code 16872920, VAT ID EE102684489. We are the data controller for personal data processed through this website and in our business communications.

Registered office: Riia tn 20a-7, Tartu 51010, Estonia

Workshop and visiting address: Savioja 8/2, Vahi 60534, Tartu vald, Estonia

Contact: sales@conveyorshop.com · +372 52 555 68

We collect personal data in the following ways:

Data you give us directly

• Contact form submissions: name, email address, phone number, company name, country, message content, and any files you upload (such as drawings).
• Quote requests: the products and configurations you add to the quote cart, together with the contact details you submit.
• Email and phone correspondence: messages, attachments, and call notes.
• Contract and project documentation: company representative names, business contact details, billing information, and shipping addresses.

Data collected automatically

• IP address, browser type, device type, and operating system.
• Pages visited, time spent on pages, referring website, and approximate location (country/city level).
• Quote cart contents stored locally in your browser via localStorage (this data does not leave your device unless you submit a quote request).

We process your personal data only for specific, legitimate purposes, and only on a valid lawful basis under GDPR Article 6.

• Contract: to prepare quotes, fulfill orders, and provide after-sales support (Art. 6(1)(b)).
• Legitimate interest: to respond to enquiries, communicate with business customers, improve our website, and protect against fraud or abuse (Art. 6(1)(f)).
• Consent: for optional analytics cookies and any marketing communications (Art. 6(1)(a)).
• Legal obligation: to meet tax, accounting, and other statutory obligations (Art. 6(1)(c)).

We do not use your data for automated decision-making or profiling that would significantly affect you.

Our website uses cookies and similar technologies to function properly and to understand how visitors use the site.

Strictly necessary cookies

These are required for the website to work — for example, to remember your language preference or to keep items in your quote cart. They do not require consent.

Analytics cookies

We use Google Analytics to understand which pages visitors find useful, how they navigate the site, and where they come from. This helps us improve the content and user experience. Google Analytics collects anonymous usage data, including your IP address (which is anonymised), browser, device, and pages visited.

Analytics cookies are only set if you give explicit consent through our cookie banner. You can withdraw consent at any time by clearing your browser cookies or using your browser settings to block them.

Blocking cookies

You can configure your browser to block or delete cookies. Note that blocking strictly necessary cookies may cause parts of the website to malfunction.

We do not sell or rent your personal data. We share data only with service providers who help us operate our business, and only as needed:

Service providers (data processors)

• Website hosting and email infrastructure (EU-based).
• Google Analytics (Google Ireland Limited) — for website analytics. Data may be transferred to the United States under EU Standard Contractual Clauses and the EU–US Data Privacy Framework.
• Google Maps (Google Ireland Limited) — embedded map on our contact page. Loading the map page may transmit your IP address to Google.
• Payment processors and banks — for invoice payments and escrow services, when applicable.
• Shipping and logistics providers — when arranging delivery on your behalf.
• Accounting and tax service providers — for statutory obligations.

Authorities and legal requirements

We may disclose data to public authorities (tax, customs, law enforcement) when required by law, court order, or to investigate fraud or other illegal activity.

Business partners

If you contacted us through one of our partners or distributors, we may share your enquiry with that partner so they can follow up. We will tell you if this applies in your case.

We keep your personal data only as long as needed for the purposes described in this policy or as required by law.

• Contact enquiries: up to 2 years after our last communication, unless they lead to a contract.
• Quote requests: up to 2 years from the quote date.
• Contract and order data: 7 years after the end of the contract, to meet accounting and tax obligations.
• Analytics data: up to 14 months in Google Analytics, then deleted.
• Server logs: up to 90 days for security and troubleshooting.

After these periods, your data is deleted or anonymised.

Under GDPR you have the following rights regarding your personal data:

• Right of access: You can ask what personal data we hold about you and receive a copy.
• Right to rectification: You can ask us to correct inaccurate or incomplete data.
• Right to erasure: ("right to be forgotten") You can ask us to delete your personal data, subject to legal retention obligations.
• Right to restrict processing: You can ask us to limit how we use your data in certain circumstances.
• Right to data portability: You can ask for your data in a structured, machine-readable format and to have it transmitted to another controller.
• Right to object: You can object to processing based on legitimate interest or for direct marketing.
• Right to withdraw consent: Where processing is based on consent (e.g. analytics cookies), you can withdraw it at any time.
• Right to complain: You can file a complaint with the Estonian Data Protection Inspectorate (aki.ee) if you believe we have not handled your data correctly.

To exercise any of these rights, email us at sales@conveyorshop.com. We will respond within one month, in line with GDPR Article 12. We may ask you to verify your identity before processing the request.

We apply appropriate technical and organisational measures to protect your data against accidental loss, unauthorised access, alteration, or disclosure. These include:

• HTTPS encryption for all data transmitted between your browser and our servers.
• Access controls limiting who in our company can see personal data.
• Regular backups and security updates.
• Confidentiality agreements with all service providers who process data on our behalf.

No system is completely secure. If a personal data breach occurs that is likely to result in a risk to your rights, we will notify the Estonian Data Protection Inspectorate within 72 hours and, where required by law, inform you directly.

We may update this privacy policy from time to time to reflect changes in our practices, technologies, or legal requirements. Material changes are communicated by updating the "Last updated" date at the top of this policy. For significant changes that affect how we process your data, we will provide more prominent notice.

Your continued use of the website after changes are published constitutes your acceptance of those changes.

Questions or requests: Contact us at sales@conveyorshop.com or by post to:

Conveyor Shop OÜ
Riia tn 20a-7, Tartu 51010, Estonia