Privacy Policy

Last updated: September 1, 2025

This Privacy Policy explains how SayRUG processes personal data when you use our websites, online services, or purchase products (“Services”). SayRUG operates internationally and processes data in compliance with the General Data Protection Regulation (GDPR) and other applicable laws. This Policy applies to all websites, subdomains, and online services operated by SayRUG, regardless of the top-level domain used.

1. Data Controller

SayRug OÜ
Ahtri tn 12, 10151 Tallinn, Estonia
Email: [email protected]

2. Categories of Data We Process

• Data you provide: name, surname, email, phone number, billing/shipping address, account details, communication history, order details, payment references (full payment data is processed by external payment processors).
• Automatically collected data: IP address, device and browser type, usage information, log data, cookies and similar technologies (see Cookie Policy).
• Optional data: marketing preferences, wishlist content, design project information (where voluntarily provided).

3. Purposes and Legal Bases

1. (A) Service delivery & legal compliance – managing accounts, orders, payments, shipping, support, fraud prevention, legal obligations. Legal bases: contract, legal obligation, legitimate interest.
2. (B) Marketing communications – sending offers, updates, and personalized promotions. Legal basis: consent or legitimate interest (where permitted). Opt-out anytime.
3. (C) Personalization & analytics – improving our Services, user experience, and relevance of content. Legal basis: legitimate interest or consent (for certain cookies or tracking).

Providing data for purpose (A) is required to use core Services. Providing data for (B) and (C) is optional and does not affect orders or account use.

4. International Users & Global Data Processing

SayRUG operates globally. Personal data may be processed, stored, or accessed in the EU and other countries that may have different data protection laws. Where data is transferred outside the EEA/UK, we use lawful safeguards such as the European Commission’s Standard Contractual Clauses or equivalent mechanisms.

5. Data Retention

We keep data only as long as necessary for the purposes described above or as required by law. Order and invoicing data may be retained for up to 10 years for accounting and legal compliance. Marketing data is stored until consent is withdrawn or the user opts out.

6. Recipients of Personal Data

• service providers (hosting, payment, logistics, support, analytics, communications), bound by data processing agreements;
• professional advisors (legal, accounting, compliance);
• public authorities, when legally required;
• entities involved in mergers, acquisitions, or business restructuring.

We do not sell personal data.

7. Your Rights

You have the right to access, correct, delete, restrict, or transfer your data, and to object to processing where applicable. If processing is based on consent, you may withdraw it at any time. To exercise these rights, email [email protected].

You also have the right to lodge a complaint with your local data protection authority.

8. Children

Our Services are not directed to individuals under 16. We do not knowingly collect data from children. If you believe we have done so, please contact us and we will delete the data.

9. Cookies

See our Cookie Policy for details on the use and control of cookies and similar technologies.

10. U.S. Privacy Notice

We do not “sell” personal information. Where U.S. state laws (such as California’s CPRA) apply, you may have rights to know, delete, correct, and opt out of certain targeted advertising. You may exercise these rights by contacting us.

11. Changes to This Policy

We may update this Policy. The latest version and date will always appear on this page.

12. Contact & Help Center

SayRug OÜ, Ahtri tn 12, 10151 Tallinn, Estonia
Email: [email protected]

Need assistance with something else? Visit our Help Center.