Privacy Policy
Last updated: 29.07.2026
SecondCycle OÜ (hereinafter SecondCycle, us or company) respects the privacy of its customers and website visitors and processes personal data in accordance with the EU General Data Protection Regulation (GDPR), the personal data protection legislation of the Republic of Estonia, and this privacy policy.
1. Data controller
SecondCycle OÜ
Registration code: 12703103
VAT no.: EE102121463
Website: https://resale.ee
E-mail: info@resale.ee
For any questions regarding the processing of personal data, please contact us by email.
2. What personal data do we collect?
Depending on how you use our website or services, we may process the following data:
- first and last name;
- company name and registry code (for business customers);
- email address;
- telephone number;
- delivery and billing address;
- order and purchase history;
- payment-related information;
- information necessary for resolving warranty and complaints;
- correspondence with customer support;
- IP address;
- browser and device technical data;
- usage data collected via cookies.
We do not knowingly collect personal data of children under 13 years of age.
3. Purposes of processing personal data
We process personal data for the following purposes:
- to accept and fulfil orders;
- for delivery of goods;
- to process payments;
- for resolving warranty and complaints;
- for managing customer accounts;
- for providing customer support;
- to meet accounting and tax obligations;
- for fraud and misuse prevention;
- for website security;
- for website development and usage statistics collection;
- to send marketing communications where you have given consent or the law otherwise permits it.
4. Legal basis for processing personal data
We process personal data on the following legal bases:
- the conclusion and performance of a contract;
- compliance with legal obligations;
- the company's legitimate interest (for example, website security, fraud prevention and improving the quality of customer service);
- your given consent.
5. Payment processing
The online shop uses third-party payment solutions, including Montonio and ESTO services.
When making a payment, the personal data required to process the payment is transferred to the relevant payment service provider. SecondCycle OÜ does not store customers' full payment card details.
6. Delivery of goods
To deliver your order, we share only the necessary data with the courier service provider, such as:
- name;
- telephone number;
- email address;
- delivery address.
7. Cookies
The website uses cookies to:
- ensure the website functions correctly;
- save user preferences;
- enable the use of the shopping cart and customer account;
- analyse how the website is used;
- measure the effectiveness of marketing campaigns;
- improve user experience.
Among others, we use the following types of cookies:
- necessary cookies;
- functional cookies;
- statistical cookies;
- marketing cookies.
Users can manage cookie usage through their browser settings or via the cookie consent tool displayed on the website.
8. Analytics and marketing
The website may use the following services:
- Google Analytics;
- Google Ads;
- Meta Pixel.
These services help analyse website usage and evaluate the effectiveness of advertising campaigns. Where necessary, anonymous or pseudonymised usage data is collected.
9. Customer support chat and AI assistant
The website has a customer support chat window. During customer service hours (Mon–Fri 10–18), chats are generally answered by a customer service agent; at other times, and when an agent is unable to respond straight away, an AI assistant based on artificial intelligence responds. The chat window always shows whether you are being answered by a customer service agent or the AI assistant.
During the chat, we process the following data:
- chat messages and the time they were sent;
- name, email address or phone number, if you provide them yourself in the chat;
- the address of the web page from which the chat was started, and the page language;
- an encrypted identifier derived from the IP address, which we use solely to prevent spam and abuse.
We process the data in order to answer your questions, advise you on choosing products and, where necessary, contact you. The legal basis is our legitimate interest in providing customer service and, at your request, taking steps prior to entering into a contract.
To compose the AI assistant's responses, the content of the chat is transmitted to the artificial intelligence service provider Anthropic PBC (USA), which processes the data as our authorised processor. Data is transferred outside the European Economic Area on the basis of standard contractual clauses approved by the European Commission. Under the terms of the service, chats are not used to train artificial intelligence models.
The AI assistant's responses are for information purposes only and may contain inaccuracies. With regard to product prices, stock levels and terms, the information published on the online shop's product page and in the terms of sale applies. Please do not share sensitive personal data in the chat (for example, your personal identification code, bank card details or health data).
Chats are retained for up to 12 months, after which they are deleted automatically.
10. Who may we share data with?
Personal data may be shared only to the extent necessary to provide the service or to comply with legal obligations.
Such partners may include:
- payment service providers (such as Montonio and ESTO);
- transport and courier service providers;
- accounting service providers;
- IT and web hosting service providers;
- the artificial intelligence service provider Anthropic PBC, whose model composes the chat AI assistant's responses;
- analytics and marketing platforms;
- government agencies, if required by law.
All partners are required to ensure the proper protection of personal data.
11. Retention of personal data
Personal data is retained only for as long as necessary to achieve the purpose of processing or to fulfil obligations under law.
For example:
- accounting records are retained for the period required by law;
- warranty-related data is retained for the duration of the warranty period and, if necessary, for a reasonable time after it ends;
- customer account data is retained until the account is deleted or the customer submits a corresponding request;
- marketing consent is retained until it is withdrawn;
- customer support chats are retained for up to 12 months.
12. Security of personal data
We apply appropriate technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration or destruction.
Access to personal data is limited to employees or partners who need it to perform their duties.
13. Your rights
You have the right to:
- obtain information about the processing of your personal data;
- access your personal data;
- request the correction of inaccurate data;
- request the deletion of personal data in cases provided by law;
- restrict the processing of personal data;
- object to the processing of personal data;
- withdraw consent given;
- receive your personal data in a structured, machine-readable format, where applicable.
To exercise your rights, please contact us at info@resale.ee.
14. Lodging a complaint
If you believe your personal data is being processed unlawfully or that your rights have been violated, you have the right to contact the Estonian Data Protection Inspectorate.
15. Changes to the privacy policy
SecondCycle OÜ reserves the right to amend this privacy policy as necessary. The version published on the website is always the current, valid one.
16. Contact
SecondCycle OÜ
Registration code: 12703103
VAT no.: EE102121463
Website: https://resale.ee
E-mail: info@resale.ee
