Privacy Policy
1. Introduction
Welcome to Bubbli!
At Bubbli, we respect your privacy and are committed to protecting your personal information.
This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you visit our website, purchase our products, subscribe to recurring deliveries, contact us, or otherwise interact with our services.
Bubbli is operated by TKD Commerce OÜ, a company registered in Estonia.
Data Controller
Legal company name: TKD Commerce OÜ
Registered address: Keevise tn 3, 11415 Tallinn, Estonia
Brand name: Bubbli
Website: https://www.hellobubbli.com
Email: info@hellobubbli.com
We process personal data in accordance with applicable data protection laws, including the European Union's General Data Protection Regulation (GDPR) and relevant Estonian legislation.
2. Personal Information We Collect
We collect personal information necessary to provide our products and services, process orders, improve the shopping experience, and communicate with customers.
2.1 Information You Provide
When you make a purchase, create an account, subscribe to our products, or contact us, we may collect:
- Full name
- Email address
- Telephone number
- Billing and shipping addresses
- Order and purchase history
- Account details and preferences
- Subscription preferences and delivery frequency
- Customer support inquiries and communications
- Product reviews and feedback
- Information submitted through contact forms
Certain information is required to process purchases and deliver orders. Without this information, we may be unable to provide the requested services.
2.2 Payment Information
When you purchase products from Bubbli, payment information is securely processed by our authorized payment service providers.
Depending on the payment method, this may include billing information, transaction details, payment confirmations, and limited payment card information.
We do not directly store complete payment card numbers or card security codes through our standard online checkout.
2.3 Information Collected Automatically
When you visit our website, we may automatically collect certain technical and browsing information, including:
- IP address
- Browser type and device information
- Operating system
- Pages visited and products viewed
- Shopping cart activity
- Approximate geographic location
- Referring websites
- Date and time of visits
- Cookie identifiers and website interaction information
Some information is necessary for website operation and security. Other information is collected for analytics and marketing only where legally permitted and, where required, with your consent.
3. How We Use Your Personal Information
We use personal information for the following purposes:
Order Processing and Delivery
To process purchases, confirm payments, prepare orders, arrange shipping, provide delivery updates, and handle returns or refunds.
Customer Accounts
To manage customer accounts, maintain order histories, and provide access to relevant account features.
Subscriptions and Recurring Orders
To create, manage, and process recurring subscriptions, including scheduled payments, delivery preferences, subscription modifications, and cancellations.
Customer Support
To respond to inquiries, resolve complaints, handle delivery issues, and provide assistance with our products and services.
Marketing Communications
To send newsletters, promotional offers, product announcements, and other marketing communications where permitted by applicable law.
Website Analytics and Improvements
To understand website usage, improve performance, identify technical problems, and enhance the overall shopping experience.
Advertising and Campaign Measurement
To evaluate advertising performance and, where required, with your consent, display advertisements relevant to your interests.
Security and Fraud Prevention
To protect our website, customers, and business against fraud, unauthorized access, and other security threats.
Legal and Accounting Obligations
To comply with applicable legal, tax, accounting, and consumer protection requirements.
4. Legal Basis for Processing Personal Data
Under the General Data Protection Regulation (GDPR), we process personal data only where we have a valid legal basis.
Performance of a Contract
We process personal data when necessary to fulfill our contractual obligations to customers. This includes processing orders, arranging deliveries, managing recurring subscriptions, handling payments, and providing customer support related to purchases.
Compliance with Legal Obligations
We process certain personal data to comply with applicable legal requirements, including tax regulations, accounting obligations, consumer protection laws, and other statutory responsibilities.
Legitimate Interests
We may process personal data where necessary for our legitimate business interests, provided these interests do not override your fundamental rights and freedoms. This includes preventing fraud, maintaining website security, improving our services, and responding to certain customer inquiries.
Consent
Where required by law, we obtain your consent before processing personal data for specific purposes. This may include sending promotional emails, using non-essential analytics cookies, and activating advertising or marketing tracking technologies.
You may withdraw your consent at any time by contacting us or adjusting your relevant privacy preferences.
Withdrawal of consent does not affect the lawfulness of processing carried out before your consent was withdrawn.
5. Marketing Communications
We may send marketing communications about Bubbli products, promotions, special offers, and brand updates where you have provided consent or where otherwise permitted by applicable law.
These communications may include:
- Product announcements and launches
- Discounts and special promotions
- Subscription-related offers
- Brand news and updates
- Relevant product recommendations
You can unsubscribe from marketing emails at any time by clicking the unsubscribe link included in our emails or contacting info@hellobubbli.com.
Unsubscribing from marketing communications does not affect essential messages relating to orders, payments, deliveries, or active subscriptions.
6. Subscriptions and Recurring Orders
Bubbli may offer customers the option to purchase selected products through recurring subscriptions.
When you subscribe, we process the personal information required to:
- Create and manage your subscription
- Schedule recurring orders and deliveries
- Process recurring payments
- Manage subscription changes, pauses, or cancellations
- Send essential subscription notifications
- Maintain appropriate transaction records
Relevant information may be processed by authorized subscription management and payment service providers.
Customers can manage subscriptions according to the conditions described in our Subscription Terms and Conditions.
7. Sharing Personal Information
We do not sell customer contact lists or personal information to data brokers.
We may share personal information with trusted third parties where necessary to operate our business, fulfill customer orders, provide services, comply with legal obligations, or carry out activities for which we have obtained the required consent.
These third parties may include:
E-commerce and Hosting Providers
To operate and maintain our online store, manage customer accounts, and process purchases.
Payment Service Providers
To securely process payments, recurring charges, refunds, and financial transactions.
Shipping and Logistics Partners
To arrange deliveries and provide relevant tracking information. This may require sharing customer names, delivery addresses, telephone numbers, and order information.
Subscription Management Providers
To manage recurring purchases, subscription schedules, and related customer preferences.
Customer Service and Product Review Providers
To facilitate customer support, collect product feedback, and manage reviews.
Marketing and Analytics Partners
To measure website performance, analyze advertising effectiveness, and provide marketing services where legally permitted.
Affiliate and Referral Partners
To manage referral programs, track eligible referrals, and administer promotional partnerships.
Professional Advisers and Public Authorities
To comply with legal obligations or obtain professional accounting, legal, or regulatory assistance.
We seek to ensure that service providers processing personal data on our behalf are subject to appropriate confidentiality, security, and data protection obligations.
Some third parties may act as independent data controllers for certain processing activities, in accordance with applicable law.
8. Cookies and Tracking Technologies
Our website uses cookies and similar technologies to provide essential functionality and improve your browsing experience.
Cookies may be used to:
- Maintain shopping cart functionality
- Support secure checkout
- Remember language and website preferences
- Analyze website traffic
- Improve website performance
- Measure advertising effectiveness
- Provide relevant marketing content
Where legally required, we obtain your consent before activating non-essential cookies or similar tracking technologies.
You can manage your cookie preferences through the cookie settings available on our website.
For additional information, please refer to our Cookie Policy.
9. Data Retention
We retain personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy or to comply with applicable legal obligations.
Retention periods depend on the type of information collected and the reason for processing it.
Order and Accounting Information
Transaction records, invoices, and relevant accounting documents are generally retained for seven years in accordance with applicable Estonian accounting requirements.
Customer Account Information
Customer account information may be retained while the account remains active and for an additional period where necessary to comply with legal obligations or resolve disputes.
Subscription Information
Subscription records may be retained during an active subscription and afterward where necessary for accounting, legal compliance, or dispute resolution.
Customer Support Communications
Customer support records are retained for as long as reasonably necessary to resolve inquiries, address complaints, and protect legitimate business interests.
Marketing Information
Marketing information is retained until consent is withdrawn, the customer objects to direct marketing, or the information is no longer necessary for its intended purpose. Limited information may be retained where necessary to respect opt-out requests.
Analytics and Cookie Information
Retention periods depend on the type of information collected and the applicable cookie or tracking technology.
When personal information is no longer required, we delete, anonymize, or securely dispose of it, unless continued retention is legally required or justified.
10. International Data Transfers
Some service providers involved in operating our website and processing orders may process personal information outside Estonia or the European Economic Area (EEA).
Where personal data is transferred outside the EEA, we take appropriate steps to ensure that such transfers comply with applicable data protection laws.
Depending on the circumstances, safeguards may include European Commission adequacy decisions, approved Standard Contractual Clauses, or other legally recognized transfer mechanisms.
Customers may contact us for additional information about applicable safeguards.
11. Data Security
We take appropriate technical and organizational measures to protect personal information against unauthorized access, accidental loss, misuse, alteration, and disclosure.
These measures may include:
- Secure website connections
- Access controls and authentication
- Restricted access to customer information
- Secure payment processing
- Appropriate administrative security measures
- Use of service providers with relevant security safeguards
Although we take reasonable precautions to protect personal information, no internet-based system can be guaranteed to be completely secure.
We regularly assess our security practices and take appropriate steps to address identified risks.
12. Your Rights Under GDPR
Under the General Data Protection Regulation, you have certain rights regarding your personal information, subject to applicable legal conditions.
Right of Access
You may request confirmation of whether we process your personal data and obtain access to that information.
Right to Rectification
You may request correction of inaccurate personal information or completion of incomplete information.
Right to Erasure
You may request deletion of your personal information where the legal requirements for erasure are met.
Right to Restrict Processing
You may request that we restrict the processing of your personal information in certain circumstances.
Right to Data Portability
Where applicable, you may request certain personal information in a structured, commonly used, machine-readable format.
Right to Object
You may object to certain processing activities, including processing based on legitimate interests and processing for direct marketing purposes.
Right to Withdraw Consent
Where processing is based on consent, you may withdraw your consent at any time.
Rights Relating to Automated Decision-Making
You have rights concerning certain decisions based solely on automated processing that produce legal or similarly significant effects.
To exercise your rights, please contact us at: info@hellobubbli.com
We will respond to requests without undue delay and generally within one month, subject to applicable legal requirements.
Where reasonably necessary, we may request additional information to verify your identity.
You also have the right to lodge a complaint with a data protection supervisory authority.
In Estonia, the relevant authority is:
Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon)
Website: https://www.aki.ee
You may also contact the competent supervisory authority in another EU or EEA country where applicable.
13. Children's Privacy
Our website and products are intended for general consumer use and are not specifically directed toward children.
We do not knowingly collect personal information from children for independent marketing purposes without an appropriate legal basis and any legally required parental authorization.
If you believe that a child has provided personal information in circumstances that raise privacy concerns, please contact us at info@hellobubbli.com.
We will review the matter and take appropriate action in accordance with applicable law.
14. Third-Party Websites
Our website may contain links to third-party websites, social media platforms, or other external services.
These websites may collect and process personal information according to their own privacy policies.
We encourage visitors to review the privacy policies of third-party websites before providing personal information.
We are not responsible for the independent privacy practices of external websites that we do not control.
15. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our business operations, website functionality, services, or applicable legal requirements.
Any updates will be published on this page, together with a revised "Last updated" date.
Where required by law, we will provide additional notice or obtain consent before implementing relevant changes to how personal information is processed.
We encourage customers to review this policy occasionally.
16. Contact Information
If you have questions, concerns, or requests regarding this Privacy Policy or the processing of your personal information, please contact us.
Bubbli
Legal company name: TKD Commerce OÜ
Registered address: Keevise tn 3, 11415 Tallinn, Estonia
Country: Estonia
Email: info@hellobubbli.com
Website: https://www.hellobubbli.com
