Privacy policy

1. Controller

OÜ Deu Nehitus, Pargi tee 3-2, Orava küla, Võru vald, 64101, Estonia, registry code 16735420, is the controller of the personal data processed on this site. Contact for privacy questions: info@snuscore.com.

2. What we process, why, and on what legal basis

• Account and contact data (name, company, registration and VAT number, email, phone, billing and delivery address): to open and run your account and to answer you. Basis: contract (Art. 6(1)(b) GDPR).
• Date of birth of private buyers: to make sure we sell nicotine products only to adults. Basis: legal obligation (Art. 6(1)(c)).
• Orders, invoices and payments: to deliver, invoice and keep accounting records. Basis: contract and legal obligation.
• VAT number check in the EU VIES system, to apply the correct VAT. Basis: legal obligation.
• Technical data (IP address, browser, a session cookie): to run the site securely. Basis: legitimate interest (Art. 6(1)(f)).
• Usage statistics, only if you accept them in the cookie banner. Basis: consent (Art. 6(1)(a)), which you can withdraw at any time.

3. Who receives your data

• UAB Nordstock Global (Elektronikos g. 76, 35116 Panevėžys, Lithuania), which packs and ships Northern EU Warehouse orders for us, and our partner warehouses for the orders they ship.
• Carriers (for example UPS, DPD, GLS) receive your name, delivery address and phone for delivery.
• Service providers that process data on our behalf: Vercel (website hosting), Contabo (database server in Germany), Shopify (stock), Google (email and documents), Resend (sending emails), Slack (internal order notifications).
• Tax authorities and other public bodies when the law requires it.

We don't sell personal data. Some providers may process data outside the EU; in that case transfers are covered by EU standard contractual clauses or an adequacy decision.

4. How long we keep it

Account data as long as your account exists. Invoices and accounting records for 7 years, as accounting law requires. Statistics data for up to 14 months.

5. Cookies

A necessary cookie keeps you logged in, and one remembers your age confirmation for 30 days. Statistics cookies are set only if you accept them; change your choice any time with "Cookie settings" in the footer.

6. Your rights

You can ask for access to your data, correction, deletion, restriction, a copy to take elsewhere (portability), and you can object to processing based on legitimate interest. Write to info@snuscore.com. You may also complain to a data protection authority, for example the Estonian Data Protection Inspectorate (aki.ee), the Lithuanian State Data Protection Inspectorate (vdai.lrv.lt) or the authority in your own country.