Last updated: June 2, 2026

Who we are

This policy covers pyrefit.com, operated by Ecom Empire OÜ (the “controller” under GDPR and the “business” under CCPA/CPRA), registration number 16494984, Liimi tn 1b, Tallinn 10621, Estonia. Contact: info@pyrefit.com.

Information we collect

Information you give us

• Order data: name, shipping/billing address, email, phone, items purchased, payment information (processed by Shopify Payments and PayPal — we never see full card numbers).
• Customer service: the content of emails or chat messages you send us.
• Marketing opt-ins: email address when you subscribe to our newsletter.
• Account data: if you create an account, login credentials and order history.

Information collected automatically

• Device and browsing: IP address, browser type, operating system, referring URL, pages viewed, time on site, links clicked.
• Cookies and similar: see our Cookie Policy for full details.

Why we use your data (legal basis under GDPR)

• To fulfill your order (contract): payment, shipping, customer service, returns.
• To run our business (legitimate interest): fraud prevention, analytics, security, improving the Site.
• To send marketing (consent): only if you opt in to our newsletter. You can unsubscribe at any time.
• To comply with law (legal obligation): tax records, accounting, response to lawful requests.

Who we share data with

We do not sell your personal information. We share it only with vendors who help us operate, under strict confidentiality:

• Shopify Inc. — ecommerce platform, payments, customer accounts (US/Canada/EU servers).
• YunExpress, UPS, FedEx, USPS, DHL — shipping carriers (shipping address only).
• Klaviyo — email marketing (only if you opt in).
• Google Analytics & Google Ads — aggregated analytics and ad measurement.
• Meta (Facebook/Instagram) — advertising and conversion measurement (only if you accept marketing cookies).
• Tax/accounting — our accountant, where required by Estonian law.
• Law enforcement — only when legally compelled (subpoena, court order).

International transfers

Some of our vendors process data in the United States. Where data leaves the EU/EEA, we rely on the EU-US Data Privacy Framework or Standard Contractual Clauses approved by the European Commission.

How long we keep it

• Order data: 7 years (tax and accounting law).
• Customer service emails: 3 years.
• Marketing opt-ins: until you unsubscribe.
• Analytics cookies: 14 months max, then anonymized.

Your rights

You may request, at any time and free of charge:

• Access to a copy of your personal data.
• Correction of inaccurate data.
• Deletion (“right to be forgotten”) where we do not have a legal duty to keep it.
• Restriction or objection to processing.
• Portability — receive your data in a structured machine-readable format.
• Withdrawal of consent for marketing at any time.

To exercise any right, email info@pyrefit.com. We respond within 30 days. If we cannot, you may complain to your local data protection authority — in the US to your state Attorney General, in the EU to the supervisory authority of your country.

For California residents (CCPA/CPRA)

You have the right to know, delete, correct, and opt out of the “sale” or “sharing” of your personal information. We do not sell personal information. To exercise your rights or opt out of cross-context behavioral advertising, visit Do Not Sell or Share My Personal Information or email info@pyrefit.com.

Security

The Site uses SSL/TLS encryption end-to-end. Payment processing is PCI-DSS compliant via Shopify Payments. We follow industry-standard administrative, technical and physical safeguards. No system is 100% secure — in the unlikely event of a breach affecting your data, we will notify you and the relevant authority within 72 hours as required by law.

Children

The Site is not directed at children under 16. We do not knowingly collect data from anyone under 16. If you believe we have, contact us and we will delete it.

Changes to this policy

We may update this policy occasionally. The “Last updated” date shows the most recent revision. Material changes will be highlighted on the Site or by email.

Contact

Privacy questions: info@pyrefit.com. We respond within 30 days, often within 24 business hours.

---