Privacy policy

Privacy and personal data

Last revised: 05/11/2026.

Watering Can Design — arroseur-arrose.com

Controller: PIMA OÜ, registry code 16227549, VAT EE102381902, Meistri tn 6, Mustamäe linnaosa, Tallinn, Harju maakond, 13517, Estonia. For personal data enquiries: contact@arroseur-arrose.com. This notice concerns this site and its services; see also the terms of sale.

We process the contact details you provide and account, order, delivery, payment and correspondence information needed for purchases and customer service. Technical data may include IP address, browser, device, pages visited and cookie identifiers. Information necessary for an order is needed to fulfil it; advertising choices are separate.

Purposes and legal bases: contract performance or precontractual steps for orders, payments, deliveries and purchase enquiries; legal obligations for accounting and authority requests; legitimate interests in security, fraud prevention and defending rights, subject to your rights; consent for newsletters and tracking technologies that require it. Browsing or accepting this notice is not consent to every processing operation. You may withdraw consent without affecting the lawfulness of earlier processing.

The site uses Shopify for hosting and commerce functions. Necessary data is accessible to authorised staff and payment, delivery, hosting and support providers according to their tasks. Shopify acts as processor for services described in its Data Processing Addendum; its own roles for certain services are described in its Consumer Privacy Policy. This does not assert that every optional Shopify service is active on this store.

Shopify infrastructure and providers may process data outside the European Economic Area. Contractual mechanisms and safeguards applicable to Shopify services are described in its addendum, including Appendix C for the EEA, UK and Switzerland. This reference does not certify a single mechanism for all our providers or a particular certification. You may request information on safeguards for your data.

We retain data as necessary for its purposes: customer relations and order follow-up, accounting and tax obligations, claim periods and defending rights, followed by deletion or anonymisation when there is no legal reason for retention. Account closure does not automatically erase data subject to retention obligations. Cookie durations vary by cookie and service; Shopify’s official cookie policy explains their purposes and durations, without implying every listed cookie is present here.

Cookies strictly necessary for the cart, security and service operation are distinct from analytics or advertising cookies requiring consent where applicable. Continuing to browse is not that consent. For tracking technologies requiring consent, you may refuse or withdraw consent as easily as you give it. Withdrawal does not affect earlier lawful processing. If you cannot access privacy choices, contact contact@arroseur-arrose.com. Browser settings also let you delete or block cookies, but do not replace the required prior choice for non-essential tracking technologies.

Subject to GDPR conditions, you have rights of access, rectification, erasure, restriction, objection, portability and withdrawal of consent. Write to contact@arroseur-arrose.com; proportionate identity verification may be requested if there is reasonable doubt, without routinely requiring an identity document copy. We normally respond within one month, subject to lawful extensions and exceptions. You may unsubscribe through newsletter links and complain to a competent supervisory authority, including Estonia’s Andmekaitse Inspektsioon or the authority of your habitual residence. We use appropriate safeguards without promising absolute security. Material changes to this notice will be brought to your attention as required by law.