Privacy Policy

OpenYourEyes OÜ values your privacy and is committed to complying with all applicable laws and regulations regarding any personal data we may collect about you when you visit our website openyoureyes.love. By using our website, you consent to the collection and use of your data in accordance with this privacy policy.

With this privacy policy, we want to explain what data we collect, how we use it, on what legal basis we do so, and what rights you have to protect your data. This policy applies to our website and its visitors.

The controller of your data is OpenYourEyes OÜ

Company registration number: EE103011404

Address: Poordi tn 3-12, Kesklinna District, Tallinn, Harju County, 10156, Estonia

Email: info@openyoureyes.love

Phone: +372 508 8840

We collect and process information in accordance with the European Union General Data Protection Regulation (GDPR), which came into force on 25.05.2018.

Data Collection and Use

What data we collect

The information we collect includes both information that you knowingly and actively provide to us when using our services, and information that your devices automatically send us when accessing our website.

Your personal data may reach us in the following ways:

When you place an order on the openyoureyes.love online store
When you register as a user of the openyoureyes.love online store
When you contact us by email
When you browse the website openyoureyes.love
When you provide personal data about another person who will receive the goods
When you make payments using online banking or another electronic payment method
When you comment on, like, or share a post on our social media account
When you subscribe to our newsletter
When you comment on posts on our website

Types of data collected

Personal data

We only ask you for personal information when it is necessary to provide you with a service. When contacting us or visiting our website, you may share the following information with us:

First and last name
Email address
Postal address, country, county, city
Phone number

Log files

Our website openyoureyes.love records log files of its visitors. The information collected may include: type of device used, IP address, browser type, Internet Service Provider (ISP), date and time of visit, and entry/exit pages. This information is used to analyze trends, administer the website, and gather demographic information. It is not intended to, and does not, identify you personally.

Cookies

Like most websites, openyoureyes.love uses “cookies” — text files saved to your device when you visit the website. You can disable cookies in your browser settings, but this may disrupt the service provided to you.

Cookies are divided into persistent and session cookies, and by purpose into the following categories:

Necessary cookies (always active, no consent required). Enable core functionality of our website, such as the shopping cart and user authentication. Without these cookies, we cannot provide you with the requested services.

Functional cookies. Allow your browser to remember your choices, such as cookie preferences or language settings.

Analytical cookies. We use Google Analytics (Google Ireland Limited) to collect anonymized/pseudonymized statistics about how our website is used — such as pages visited, session duration, and traffic sources. This helps us understand how visitors use the website and improve its content.

Advertising cookies. We intend to use the Meta Pixel (Meta Platforms Ireland Limited), which allows us to measure the effectiveness of our advertising campaigns and show you relevant ads on Facebook/Instagram. The Meta Pixel reads and sets cookies and may share certain data (such as page visits and purchases) with Meta.

All analytical and advertising cookies are activated only after you give explicit consent via our cookie banner. You may withdraw your consent at any time in the cookie banner settings.

We also use Google Search Console, which does not set cookies on your browser but shows us aggregated data provided by Google about how our website appears in Google search results (e.g. search terms, click counts). It is not related to tracking individual visitors.

How we use data

We may use the collected information for the following purposes:

To maintain, administer, develop, and expand our website
To collect statistics so that we can offer better services and understand visitor behavior
To identify you by email
To send you information and request feedback about our services
To prevent fraud and protect our website
To stay in contact with you via a social media account
To provide customer support by email when you contact us with a question
To improve the quality of our service
To develop new products or services
To ship/deliver goods, process orders, issue invoices, and confirm your order or process refunds
To send newsletters and marketing offers, if you have given your consent (using our platform MailerLite)
To analyze data, study trends, and evaluate the effectiveness of our advertising campaigns

Legal basis for processing

Each processing activity is based on one of the following grounds under Article 6(1) of the GDPR:

Processing activity	Legal basis
Order processing, delivery, payment processing, order-related customer support	Performance of a contract (Art. 6(1)(b))
Retention of accounting records	Legal obligation (Art. 6(1)(c))
Newsletter and direct marketing (MailerLite)	Consent (Art. 6(1)(a))
Google Analytics, Meta Pixel, and other analytical/advertising cookies	Consent (Art. 6(1)(a))
Website security, fraud prevention, aggregated statistics	Legitimate interest (Art. 6(1)(f))
General customer support by email	Performance of a contract / legitimate interest (Art. 6(1)(b)/(f))
Dispute resolution and legal claims	Legitimate interest / legal obligation (Art. 6(1)(f)/(c))

When and with whom we share your data

We share your personal data only with the following categories of recipients, who are required to protect your data:

Payment processor Montonio — processes your payment and order data to enable secure payment.
Courier companies and parcel machine operators (Omniva, Smartpost, DPD) — receive the data necessary to deliver your order.
Google Ireland Limited (Google Analytics, Search Console) — website statistics and search performance analysis.
Meta Platforms Ireland Limited (Meta Pixel) — advertising targeting and performance measurement.
MailerLite Limited — sending newsletters and marketing messages, if you have given your consent.

We may also share your data:

In connection with a change of ownership of our company, a merger, sale of assets, financing, or acquisition — in which case we will notify you.
With your consent, for any other purpose.
When required by law, or in good faith to comply with a legal obligation, protect our rights or property, or ensure the safety of our users.

International data transfers

Some of the service providers listed above (Google, Meta, MailerLite) may process your data outside the European Economic Area (e.g. in the United States). In such cases, we ensure your data is protected through safeguards recognized by the European Commission, such as Standard Contractual Clauses or the EU-U.S. Data Privacy Framework, where the provider is certified under it.

Retention of your personal data

Order and invoice data: retained for up to 7 years, in accordance with the record-keeping requirements of the Estonian Accounting Act.
Newsletter subscriber data: retained until you unsubscribe from the newsletter.
Log files: generally retained for a short period, unless used to strengthen security or unless a longer retention period is legally required.
Other personal data: retained only as long as necessary for the purposes described in this privacy policy, to fulfil our legal obligations, or to resolve disputes.

Processing of children’s data

None of our products or services are directed at children under the age of 13, and we do not knowingly collect data from children under 13. If we suspect that we are processing the data of a person under 13, we will remove that person from all of our databases.

Your rights regarding the protection of your data

You always have the right not to share your data with us, with the understanding that this may affect your experience on our website. If you decide not to share your data with us, we will not treat you worse because of it.

Even if you have previously given consent to share your personal data for marketing purposes, you retain the right to withdraw that consent at any time. If you believe that the data we have collected about you is inaccurate, outdated, incomplete, irrelevant, or misleading, please contact us at: info@openyoureyes.love.

If you believe we have violated an applicable data protection law and wish to file a complaint, please contact us using the details above. We will investigate your complaint promptly and respond in writing within 15 days. You also have the right to lodge a complaint directly with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) or your local data protection authority.

GDPR data protection rights

Right of access – you may request copies of your personal data.
Right to rectification – you may request correction of inaccurate data, or completion of incomplete data.
Right to erasure – under certain conditions, you may request deletion of your personal data.
Right to restrict processing – under certain conditions, you may request that we restrict the use of your data.
Right to object – under certain conditions, you may object to our use of your data (e.g. for direct marketing).
Right to data portability – under certain conditions, you may request that we transfer your data to a third party or directly to you.
Right to withdraw consent – where processing is based on consent (e.g. newsletter, analytics, advertising cookies), you may withdraw it at any time, without affecting the lawfulness of processing before withdrawal.

Security of your data

The security of your personal data is important to us, but no method of transmission over the Internet or electronic storage is 100% secure. OpenYourEyes OÜ takes all reasonably necessary measures to ensure your data is processed securely and in accordance with this privacy policy and applicable law.

Links to other websites

Our website may contain links to other websites that we do not operate. We have no control over, and assume no responsibility for, the content or privacy practices of third-party sites.

Privacy policy updates

We reserve the right to make changes to this privacy policy as needed. When updated, we will revise the “last modified” date below. Continued use of our website after an update constitutes your tacit consent to the changes.

Last modified 02/08/2026