PRIVACY POLICY – PEDICOOL

Last updated: September 2026

This Privacy Policy explains how Pedicool collects, uses, stores, shares and protects personal data when you visit our website, place an order, contact us, request a return or refund, subscribe to marketing communications or otherwise interact with our services.

We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and other applicable data protection and privacy laws.

1. DATA CONTROLLER

The controller responsible for the processing of your personal data is:

SELLGREAT S.R.L
Trading name: Pedicool
VAT: RO40699227
Trade Register No.: J2019000596332
Registered office: Pictor Grigorescu 4, Rădăuți, Suceava, Romania
Email: info@pedicool.shop
Customer support hours: Monday – Friday / 08:00 – 17:00

For questions regarding this Privacy Policy or the processing of your personal data, you may contact us at info@pedicool.shop.

2. PERSONAL DATA WE MAY COLLECT

Depending on how you interact with Pedicool, we may collect and process the following categories of personal data:

2.1. Identification and contact information

• first and last name;
• telephone number;
• email address;
• delivery address;
• billing address, where applicable;
• city, region and postal code;
• country.

2.2. Order and transaction information

• order number;
• products ordered;
• product size, color, model or variant;
• order value;
• discounts and promotions applied;
• payment method;
• order status;
• delivery and tracking information;
• return, exchange, complaint and refund information.

2.3. Payment information

Depending on the payment method used, we may process limited information relating to payment status and transaction details.

Where payment is made online by card, card details are generally processed directly by the relevant payment service provider and are not necessarily stored directly by Pedicool.

For cash-on-delivery orders requiring a refund by bank transfer, we may collect:

• name of the bank account holder;
• IBAN;
• other banking information reasonably required to complete the refund.

2.4. Customer service and communication information

When you contact us, we may process:

• emails;
• messages;
• customer support requests;
• complaints;
• information provided during telephone conversations;
• information related to the resolution of an order or return.

2.5. Returns and product conformity information

When you request a return, refund or submit a complaint regarding a product, we may collect:

• order number;
• reason for return;
• description of the issue;
• photographs or videos of the product;
• photographs of packaging or labels;
• shipping and tracking information;
• bank details required for refunds.

2.6. Technical and usage data

When you visit our website, certain information may be collected automatically, including:

• IP address;
• device type;
• browser type and version;
• operating system;
• device identifiers;
• language settings;
• pages viewed;
• time spent on pages;
• referring website or advertising source;
• website interactions;
• approximate location derived from IP address;
• cookie and similar technology identifiers.

2.7. Marketing information

Where applicable, we may process information about:

• marketing consent;
• newsletter subscriptions;
• SMS marketing preferences;
• advertising interactions;
• campaign attribution;
• products viewed or purchased;
• responses to promotional communications.

3. HOW WE COLLECT PERSONAL DATA

We may collect personal data:

• directly from you when you place an order;
• when you complete a contact or return form;
• when you contact customer support;
• when you subscribe to marketing communications;
• automatically through cookies and similar technologies;
• from payment providers;
• from couriers and logistics providers;
• from our e-commerce platform and technical service providers;
• from advertising and analytics platforms, where permitted by law;
• from other service providers involved in processing your order or providing our services.

4. WHY WE PROCESS YOUR PERSONAL DATA

4.1. Processing and fulfilling orders

We process personal data to:

• receive and confirm orders;
• verify order information;
• prepare products for dispatch;
• deliver products;
• communicate order status;
• process payments;
• manage cash-on-delivery orders;
• provide customer support.

Legal basis: performance of a contract or steps taken at your request before entering into a contract.

4.2. Delivery and logistics

We process and share the information necessary to prepare, ship, track and deliver your order.

Legal basis: performance of the contract.

4.3. Returns, refunds, exchanges and complaints

We process personal data to:

• identify your order;
• process a return;
• evaluate returned products;
• process refunds;
• manage product conformity complaints;
• resolve customer service issues;
• comply with consumer protection obligations.

Legal basis: performance of the contract, compliance with legal obligations and, where applicable, our legitimate interests in managing and documenting customer claims.

4.4. Legal, tax and accounting obligations

We may process and retain information where required for:

• accounting;
• tax reporting;
• invoicing;
• fraud prevention;
• consumer protection compliance;
• regulatory obligations;
• responding to lawful requests from public authorities.

Legal basis: compliance with a legal obligation.

4.5. Fraud prevention and security

We may process information to:

• detect suspicious or fraudulent orders;
• prevent abuse of our services;
• protect our website and systems;
• prevent unauthorized access;
• protect our rights, customers and business.

Legal basis: our legitimate interests in protecting our business, customers, systems and transactions.

4.6. Improving our website and services

We may use data to:

• understand how our website is used;
• identify technical issues;
• measure website performance;
• improve user experience;
• analyze sales and product performance;
• improve our products and services.

Where such processing requires cookies or similar technologies subject to consent, it will only take place after the required consent has been obtained.

Legal basis: consent where legally required, and/or legitimate interests where permitted by law.

4.7. Marketing communications

Where legally permitted, we may send promotional communications relating to Pedicool products, offers or campaigns by email, SMS or other channels.

Where consent is legally required, marketing will only be sent after valid consent has been obtained.

You may unsubscribe from marketing communications at any time using the unsubscribe mechanism provided in the communication or by contacting us.

Legal basis: consent or another lawful basis permitted under applicable electronic communications and marketing laws.

4.8. Personalized advertising and measurement

Subject to your cookie and privacy choices, we may use advertising and analytics technologies to:

• measure advertising performance;
• attribute orders to advertising campaigns;
• create advertising audiences;
• show advertising that may be more relevant to users;
• measure conversions;
• limit repeated advertising.

Where required by law, these activities are performed only after obtaining your consent.

5. WHETHER PROVIDING PERSONAL DATA IS REQUIRED

Certain personal data is necessary in order to enter into and perform a contract with you.

For example, we generally need your name, telephone number, delivery address and order information in order to process and deliver an order.

If you do not provide the information necessary to process an order, we may be unable to accept or fulfill it.

Providing personal data for optional marketing activities is voluntary.

6. WHO WE MAY SHARE PERSONAL DATA WITH

We only share personal data where necessary for the purposes described in this Privacy Policy or where required by law.

Recipients or categories of recipients may include:

6.1. E-commerce and website providers

We may use third-party platforms and providers for:

• hosting our online store;
• processing orders;
• website functionality;
• store administration;
• technical infrastructure.

Our online stores may be operated using Shopify and related services.

6.2. Fulfillment and logistics providers

We share information necessary for warehousing, order preparation, shipping and returns with logistics partners.

This may include our fulfillment center and other providers involved in preparing and processing orders and returns.

6.3. Courier and delivery companies

We may provide delivery companies with information such as:

• customer name;
• telephone number;
• delivery address;
• order or parcel reference;
• cash-on-delivery amount;
• other information necessary for delivery.

6.4. Payment and banking providers

Payment processors, banks and financial service providers may process information necessary to complete payments or refunds.

6.5. Customer support and communication providers

We may use service providers for:

• email;
• SMS;
• telephone services;
• customer support;
• order notifications.

6.6. Analytics and advertising providers

Subject to your privacy and cookie choices, data may be processed by analytics, advertising and social media providers used to measure website performance and advertising campaigns.

6.7. Professional advisers

Where necessary, personal data may be shared with:

• accountants;
• auditors;
• lawyers;
• tax advisers;
• other professional advisers.

6.8. Public authorities

We may disclose personal data to tax authorities, courts, law enforcement agencies, regulatory authorities or other public bodies when required by law or pursuant to a valid legal request.

7. SHOPIFY

Our online store may be hosted and operated using Shopify.

Shopify and its affiliated entities may process personal data in connection with providing the e-commerce platform, infrastructure, security, analytics and other services used by our store.

Shopify may process data in different countries in accordance with its own privacy documentation and applicable data protection requirements.

8. COOKIES AND SIMILAR TECHNOLOGIES

Our website may use cookies, pixels, tags, local storage and similar technologies.

These technologies may be used for:

• essential website functionality;
• shopping cart functionality;
• security;
• saving user preferences;
• analytics;
• conversion measurement;
• advertising;
• personalization.

Where cookies or similar technologies are not strictly necessary and require consent under applicable law, they will only be activated after the user has provided the required consent.

You can manage your cookie preferences through the cookie consent tool available on the website.

Further information may be provided in our Cookie Policy.

9. ADVERTISING AND SOCIAL MEDIA

Subject to applicable law and your consent choices, we may use advertising services provided by platforms such as social media networks, search engines and other advertising providers.

These providers may receive or process certain technical, device, interaction, conversion or purchase-related information to measure advertising performance or deliver advertising.

The exact technologies used may vary over time.

Where required by law, non-essential advertising technologies are activated only after consent has been obtained.

10. INTERNATIONAL DATA TRANSFERS

Some of our service providers may process personal data outside the European Economic Area (“EEA”).

Where personal data is transferred outside the EEA, we take steps to ensure that the transfer is made in accordance with applicable data protection law.

Depending on the destination and provider, these safeguards may include:

• an adequacy decision adopted by the European Commission;
• Standard Contractual Clauses approved by the European Commission;
• other appropriate safeguards recognized under applicable data protection law.

Where applicable, you may contact us for further information regarding the safeguards used for international transfers.

11. HOW LONG WE KEEP PERSONAL DATA

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected and to comply with legal, accounting, tax, contractual and regulatory obligations.

Retention periods may vary depending on the type of data and purpose of processing.

In determining retention periods, we consider:

• the duration of our contractual relationship with the customer;
• applicable accounting and tax obligations;
• consumer protection obligations;
• applicable limitation periods;
• the need to establish, exercise or defend legal claims;
• security and fraud prevention requirements.

Order, invoicing and accounting information may be retained for the period required by applicable tax and accounting laws.

Customer service and complaint information may be retained for as long as necessary to resolve the issue and for an additional period where required to establish, exercise or defend legal claims.

Marketing data is generally retained until consent is withdrawn, the user unsubscribes, or the data is no longer reasonably necessary for the relevant marketing purpose, subject to any records we may need to retain to demonstrate compliance.

Cookie retention periods vary according to the cookie or technology used and are described, where applicable, in our cookie consent tool or Cookie Policy.

12. DATA SECURITY

We use reasonable technical and organizational measures designed to protect personal data against:

• unauthorized access;
• loss;
• destruction;
• alteration;
• unauthorized disclosure;
• unlawful processing.

However, no online transmission or storage system can be guaranteed to be completely secure.

Access to personal data is limited, where appropriate, to persons and service providers who need access for legitimate business purposes.

13. YOUR RIGHTS UNDER GDPR

Subject to the conditions and limitations provided by applicable law, you may have the following rights:

13.1. Right of access

You may request confirmation as to whether we process your personal data and obtain access to the data and related processing information.

13.2. Right to rectification

You may request correction of inaccurate personal data and completion of incomplete data.

13.3. Right to erasure

You may request deletion of your personal data in circumstances provided by law.

This right is not absolute. We may retain certain data where processing is required by law or where retention is necessary for the establishment, exercise or defense of legal claims.

13.4. Right to restriction of processing

You may request restriction of processing in circumstances provided by GDPR.

13.5. Right to data portability

Where processing is based on consent or contract and is carried out by automated means, you may have the right to receive personal data you provided to us in a structured, commonly used and machine-readable format and, where technically feasible, have it transmitted to another controller.

13.6. Right to object

Where processing is based on legitimate interests, you may object to such processing on grounds relating to your particular situation.

You have the right to object at any time to the processing of your personal data for direct marketing purposes.

13.7. Right to withdraw consent

Where processing is based on your consent, you may withdraw that consent at any time.

Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

13.8. Rights relating to automated decision-making

Where applicable, you have rights relating to decisions based solely on automated processing, including profiling, where such decisions produce legal effects or similarly significantly affect you.

14. HOW TO EXERCISE YOUR RIGHTS

You may exercise your data protection rights by contacting:

info@pedicool.shop

Please provide enough information for us to identify your request and, where necessary, verify your identity.

We may request additional information where reasonably necessary to prevent unauthorized access to personal data.

Requests will be handled within the time limits required by applicable law.

Exercising your rights is generally free of charge. However, where permitted by law, we may charge a reasonable fee or refuse to act on requests that are manifestly unfounded or excessive, particularly because of their repetitive character.

15. RIGHT TO LODGE A COMPLAINT

If you believe that your personal data has been processed in violation of applicable data protection law, you have the right to lodge a complaint with a competent data protection supervisory authority.

As SELLGREAT S.R.L is established in Romania, the Romanian supervisory authority is:

National Supervisory Authority for Personal Data Processing (ANSPDCP)

You may also have the right to contact the competent supervisory authority in the EU/EEA country where you habitually reside, work or where the alleged infringement occurred.

16. MARKETING OPT-OUT

You may stop receiving marketing communications at any time by:

• using the unsubscribe link included in marketing emails;
• using an opt-out mechanism included in SMS communications, where available;
• contacting us at info@pedicool.shop.

Unsubscribing from marketing does not prevent us from sending transactional or service-related messages necessary to process an order, delivery, return, refund or customer support request.

17. CHILDREN’S DATA

Our products and services are not specifically directed at children, and we do not knowingly seek to collect personal data from children for marketing purposes without an appropriate lawful basis.

If you believe that a child has provided personal data to us in circumstances that do not comply with applicable law, please contact us at info@pedicool.shop.

18. AUTOMATED DECISION-MAKING AND PROFILING

We may use limited automated tools to support activities such as fraud detection, advertising measurement, audience creation or website personalization.

We do not intend to make decisions based solely on automated processing that produce legal effects or similarly significantly affect customers unless such processing is permitted under applicable law and the required safeguards are implemented.

19. LINKS TO THIRD-PARTY WEBSITES

Our website may contain links to websites, services or platforms operated by third parties.

Pedicool is not responsible for the privacy practices of independent third parties.

We recommend reviewing the privacy information provided by those third parties before providing personal data to them.

20. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect:

• changes in applicable law;
• changes in our services;
• changes in our service providers;
• changes in the technologies used on our website;
• changes in our data processing activities.

The updated version will be published on the website with an updated revision date.

Where legally required, we will provide additional notice or obtain consent before materially changing the way personal data is processed.

21. CONTACT

For privacy-related questions or requests, please contact:

SELLGREAT S.R.L / Pedicool
Pictor Grigorescu 4
Rădăuți, Suceava
Romania
Email: info@pedicool.shop
Customer support hours: Monday – Friday / 08:00 – 17:00