Privacy Policy

Last updated: 11 November 2026

Vavanta.eu is operated by Ovinet OÜ, a European company based in Estonia. This policy explains how we collect, use and protect personal data when you visit our website, place an order or contact us.

Who is responsible for your data?

Ovinet OÜ is the controller of personal data used to operate our store and manage customer relationships.

• Registry code: 14176820
• VAT code: EE102204791
• Registered address: Kruusimäe tee 5/1, Palvere küla, Kose vald, Harju maakond, 75108, Estonia
• Email: info@vavanta.eu

What information do we collect?

We collect information you provide when ordering, creating an account, contacting us or subscribing to marketing. This may include:

• Your name, email address and telephone number.
• Billing and delivery addresses, or your chosen pickup location.
• Company details, where provided for a business purchase.
• Products ordered, payment references, payment status and delivery information.
• Account details and order history.
• Messages and information relating to enquiries, returns, refunds and warranty claims.

We also receive payment and delivery updates from the providers involved in your order. Our website processes technical information such as IP addresses, browser details and security logs. With your consent, analytics and marketing tools also collect information about website visits and interactions.

How and why do we use your information?

For people representing a business customer, we use business contact information based on our legitimate interest in managing that business relationship.

Information marked as required at checkout is needed to process your purchase. Without it, we may be unable to accept or deliver your order. Marketing subscriptions and optional tracking are voluntary.

Payments and delivery

We use Montonio for payment services and delivery integrations. We share the order, contact and transaction information needed for your selected service.

Banks, card processors and digital-wallet providers may also process information to complete your payment. Payment providers may act as independent controllers for their own payment processing, fraud prevention and legal obligations.

For payments by pro forma invoice or bank transfer, we process the invoice details, payment reference and information needed to match your payment or arrange a refund.

To deliver your order, we share your name, delivery address or pickup location, contact details and necessary shipment information with the selected delivery provider and relevant shipping service providers.

Read more in Montonio’s Privacy Policy.

Cookies and Google Analytics

Our website uses cookies and similar technologies to support the basket, checkout, account login, security and privacy preferences.

We use Google Analytics to understand how visitors use our website and improve our store. Analytics information may include online identifiers, device and browser details, pages visited, website interactions, referral sources and approximate location.

Optional analytics and marketing cookies require your prior consent. You can reject these cookies and still shop with us. You can change or withdraw your choice through [INSERT COOKIE SETTINGS LINK].

The cookie declaration at [INSERT COOKIE DECLARATION LINK] lists the cookies and similar technologies actually used, their providers, purposes and durations.

Further information: Google’s Privacy Policy.

Klaviyo and email marketing

We use Klaviyo to manage marketing subscriptions and send newsletters, product updates and special offers to subscribers.

This involves your email address, subscription preferences, consent records and your name if provided. Where enabled and covered by your consent, we may also use purchase history, browsing activity and email interactions to personalise messages and measure their effectiveness.

You can unsubscribe at any time using the link in a marketing email or by contacting info@vavanta.eu. Withdrawing consent does not affect processing lawfully carried out before withdrawal.

We may keep limited information to record your opt-out and prevent further marketing. Essential messages about orders, payments, delivery and claims are sent independently of marketing preferences.

Further information: Klaviyo’s legal and privacy information.

Who else receives your information?

Where necessary, we share relevant information with hosting and IT providers, email service providers, accountants, professional advisers and authorities legally entitled to receive it.

Providers processing information on our behalf must follow appropriate data-processing arrangements. Some recipients, including payment providers, process information independently under their own legal responsibilities.

International data transfers

Some service providers, including Google and Klaviyo, may process personal data outside the European Economic Area, including in the United States.

Such transfers require a valid legal mechanism, such as an applicable European Commission adequacy decision or Standard Contractual Clauses with any necessary supplementary safeguards.

[CONFIRM THE TRANSFER DESTINATIONS AND SAFEGUARDS APPLICABLE TO YOUR GOOGLE AND KLAVIYO AGREEMENTS BEFORE PUBLICATION.]

Contact us for information about the safeguards applicable to your data and how to obtain a copy.

How long do we keep your information?

We retain personal data only for as long as needed for its purpose or to meet legal requirements.

• Accounting records: generally seven years from the end of the financial year in which the transaction was recorded.
• Orders, returns and claims: for the time needed to complete the purchase, meet applicable obligations and resolve or defend legal claims.
• Customer accounts: while needed to provide the account service. Closing an account does not erase records we must retain for other lawful purposes.
• Marketing information: while your subscription remains active and the information is needed for that purpose. After you unsubscribe, we delete or restrict the marketing profile and retain only necessary compliance and opt-out records.
• Support messages and security logs: for as long as needed to resolve the enquiry, investigate an incident or handle a related claim.
• Analytics data: [INSERT THE ACTUAL GOOGLE ANALYTICS RETENTION PERIOD]. Cookie lifetimes and retention of aggregated reports may differ.

Your privacy rights

Subject to applicable conditions, you can request access to, correction or deletion of your personal data, restriction of processing, and a portable copy of data.

You may object to processing based on legitimate interests for reasons relating to your situation. You can object to direct marketing and withdraw consent at any time.

Email info@vavanta.eu to exercise your rights. We may request information needed to verify your identity. We normally respond within one month. If a lawful extension is needed, we explain the reason within that month.

You may complain to the Estonian Data Protection Inspectorate, or to the competent supervisory authority where you live, work or believe an infringement occurred.

Security and policy updates

We apply appropriate technical and organisational measures to protect personal data and limit access to people who need it for their work.

We update this policy when our practices or legal requirements change. The latest version is published on this page.

For privacy questions, contact info@vavanta.eu.