Legal
Privacy Policy
This policy explains what personal data we collect when you visit our website or place an order, how we use it, and the rights you have under the EU General Data Protection Regulation (GDPR).
Last updated: January 2026
Responsible person
Bellus Pet Company
Pärnu mnt 142, Tallinn 11317, Estonia
info@ecopetbox.com · +372 517 6795
1. Responsible party
The responsible party under the GDPR is Bellus Pet Company (Bellus Pet & Co OÜ), Pärnu mnt 142, Tallinn 11317, Estonia. For any privacy request, contact us at info@ecopetbox.com.
2. Collection and processing of personal data
We collect and process your personal data only where this is necessary to provide our services or where you have given your explicit consent. Legal bases are Art. 6(1)(b) GDPR (performance of a contract), Art. 6(1)(c) GDPR (legal obligation), Art. 6(1)(f) GDPR (legitimate interests) and Art. 6(1)(a) GDPR (consent).
3. Categories of data processed
When you place an order: name, address, email, phone number and payment data.
When you visit the website: IP address, browser data and cookies (see below).
When you subscribe to the newsletter: email address and, optionally, your name.
4. Cookies and tracking
Our website uses cookies and similar technologies. Strictly necessary cookies are set on the basis of our legitimate interest (Art. 6(1)(f) GDPR). For all other cookies — in particular analytics, marketing and social media tracking — we ask for your explicit consent (Art. 6(1)(a) GDPR). Your consent is voluntary and can be withdrawn at any time from the cookie settings in the footer, with no disadvantage to you.
5. Third-party services
Shopify — our shop runs on Shopify (Shopify International Ltd., Dublin, Ireland) as a processor under Art. 28 GDPR. Shopify sets strictly necessary cookies for cart, checkout and session handling.
Google Analytics 4 — we use Google Analytics 4 (Google Ireland Ltd.) to analyse user behaviour with pseudonymised data. Data may be transferred to the USA under the EU-U.S. Data Privacy Framework and EU standard contractual clauses. Used only with your consent.
Meta Pixel & Conversions API — we use Meta Pixel and the Conversions API (Meta Platforms Ireland Ltd.) to measure ads on Facebook and Instagram and to run retargeting. Data may be transferred to the USA under EU standard contractual clauses. Used only with your consent.
TikTok Pixel & Events API — we use the TikTok Pixel and Events API (TikTok Technology Ltd., Dublin) to measure campaign performance and run retargeting. Data may be transferred outside the EU under EU standard contractual clauses. Used only with your consent.
Pinterest Tag — we use the Pinterest Tag (Pinterest Europe Ltd., Dublin) to measure conversions and show relevant ads on Pinterest. Used only with your consent.
6. Withdrawing your consent
You can withdraw your consent for all non-essential cookies and tracking at any time with effect for the future. Use the Cookie settings link in the footer, opt out directly at the providers above, or visit youronlinechoices.eu. Withdrawal does not affect the lawfulness of processing that took place before.
7. Newsletter
With your consent, we send you our newsletter (legal basis: Art. 6(1)(a) GDPR). You can unsubscribe at any time via the link in each newsletter or by email.
8. Sharing with third parties
We share your data with third parties only where this is necessary to fulfil a contract (for example shipping providers), where we are legally required to do so, or where you have consented.
9. Your rights
You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). To exercise your rights write to info@ecopetbox.com. You also have the right to complain to your local data protection authority.
10. Data security
Our website uses SSL encryption (HTTPS). Payment data is transmitted only over encrypted connections.
11. Retention
We store personal data only for as long as required for the relevant purpose or by statutory retention periods (for example ten years for tax-relevant data).