Privacy Policy

Last updated: October 24, 2026

This Privacy Policy explains how personal information is used when you visit vereba.com, contact us, or purchase from Vereba. The controller responsible for this store is wholeteks OÜ, trading as Vereba, Pärnu mnt 11, Lihula, 90303, Estonia. You can contact us at support@vereba.com or +372 5630 6348 about privacy matters.

Information used to run the store

• Order and contact information: your name, email address, phone number, billing and delivery addresses, items ordered, order value, and delivery or return instructions.
• Payment and transaction information: payment status, transaction references, refunds, and information made available by the payment method you select. Payment providers collect the payment details needed to complete their services.
• Customer communications: your questions, order support history, and information or photographs you choose to provide about a return or product issue.
• Account information, if you create an account: login details, saved addresses, and order history.
• Technical information: IP address, browser and device details, request times, security logs, and essential session information used to provide and protect the website.

We receive information directly from you and, where needed to manage your order, from payment providers and delivery services. Please do not send sensitive information or complete payment credentials in a support message.

Purposes and legal bases

• Providing the purchase you request: to manage the cart, take and fulfill orders, process payments and refunds, deliver goods, and handle returns. Our basis is taking steps at your request or performing our contract with you.
• Meeting legal duties: to keep accounting and tax records and respond to lawful requests. Our basis is compliance with applicable legal obligations.
• Protecting the store and resolving issues: to secure the website, detect misuse, respond to inquiries, and establish or defend claims. Our basis is our legitimate interest in operating a safe, reliable business, balanced against your rights.
• Optional activities requiring consent: if offered, optional marketing or nonessential cookies are used only on the applicable consent basis. You can withdraw consent without affecting earlier lawful processing.

Details marked as required at checkout are needed to process and deliver an order. Without them, we may be unable to complete your purchase.

Who receives information

We share information as needed with hosting and technical service providers, the payment service you select, shipping and return carriers, customer communication services, professional advisers, and authorities when legally required. These recipients receive information relevant to their tasks.

The store uses WooCommerce on WordPress and is hosted through Hostinger. Payment providers process transactions under their own privacy notices, available from their checkout interface or service. Carrier information is used to deliver your order and arrange any return.

International processing

Our business is established in Estonia and our delivery market is the United States. Processing an order involves handling information in Estonia and sending the information necessary for delivery to services operating in the United States. Technical or payment providers may also process information in other countries.

Where a transfer outside the European Economic Area requires a safeguard, we use the applicable lawful transfer arrangement, such as an adequacy decision or appropriate contractual safeguards. Contact us for information about the providers and safeguards relevant to your order.

How long information is kept

We retain order and accounting records for the periods required by Estonian accounting and tax law, generally seven years after the relevant financial year. A longer period may apply where a specific legal obligation or unresolved claim requires it.

Account information is kept while the account is in use and as needed to meet related legal duties. Support records are kept as necessary to resolve the matter and deal with related claims. Technical and session information is kept for the period needed for site operation and security. We delete or anonymize information when it is no longer needed for these purposes.

Cookies and advertising

The store uses essential cookies and similar storage for functions such as the shopping cart, login, checkout, and security. See our Cookie Policy for more information and browser controls.

We do not sell personal information or use it for cross-context behavioral advertising. Optional analytics and advertising cookies are not part of the store’s essential functionality and are not enabled without any notice and choice required by applicable law.

Your privacy choices and rights

Depending on the applicable law and circumstances, you may request access to or a copy of your information, correction, deletion, restriction, or portability, and you may object to certain uses. You can withdraw consent for an activity based on consent. This does not affect processing already carried out lawfully.

Email support@vereba.com to make a request. We may need proportionate information to verify your identity. We respond within the legal period that applies to your request and explain if an exception or extension applies. Where available, you may ask us to review a privacy decision or use an authorized agent.

You may complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) at aki.ee/en, or to another competent supervisory authority. Applicable U.S. state law may provide additional rights. We do not discriminate against customers for exercising a privacy right.

Security, children, and third-party services

We use appropriate measures to protect personal information and restrict access to those who need it for their work. No website or transmission method can be guaranteed completely secure.

The store is intended for adults purchasing home products. We do not knowingly seek personal information from children under 13. If you believe a child has provided information, contact us so we can review and remove it where appropriate.

External websites and payment services have their own privacy practices. Please review their notices when you use their services.

Changes to this notice

We may update this notice when our services or legal requirements change. The revised notice will show its update date. Where required, we provide additional notice or obtain a new choice before changing how information is used.