01
Who We Are
Codester OÜ is the controller of personal data processed through the FlexMag website and store. This policy applies to website browsing, checkout, payment processing, order fulfilment, delivery communications, returns handling, and customer support.
When this policy refers to "we", "us", or "FlexMag", it means Codester OÜ acting as the business behind the store.
02
What Personal Data We Collect
Depending on how you use the site, we may collect the following categories of personal data:
- Identity and contact data, including your name, email address, phone number, and shipping or billing address.
- Order data, including products ordered, bundle selections, shipping method, discounts, order value, payment status, and refund or return history.
- Payment-related data, including limited billing metadata and payment confirmation received from payment processors. We do not store full payment card details on our servers.
- Technical and usage data, including IP address, browser type, device information, session data, approximate location, referral source, and on-site interactions.
- Communications data, including emails, customer support requests, delivery inquiries, chargeback documentation, and other messages you send us.
- Fraud-prevention and risk signals, including order patterns, technical identifiers, and information used to verify purchases or prevent abuse.
03
How We Use Personal Data
We use personal data only where necessary for legitimate business and legal purposes, including to:
- operate the website and maintain checkout, cart, account, and order functionality;
- process and confirm orders, collect payment, and arrange shipment and delivery;
- provide customer support, handle returns, refunds, complaints, and warranty-style issues;
- detect, investigate, and prevent fraud, payment abuse, unauthorized access, or misuse of the store;
- analyze traffic, site performance, product demand, and conversion behaviour to improve the store;
- comply with accounting, tax, consumer-protection, and other legal obligations;
- send service communications and, where permitted, marketing communications.
04
Legal Basis for Processing
Where data protection law requires a legal basis, we process personal data on one or more of the following bases: performance of a contract, compliance with legal obligations, legitimate interests in operating and protecting the business, and consent where consent is required for specific activities.
- Contract: to accept orders, take payment, ship products, and provide customer service.
- Legal obligation: to keep records required for accounting, tax, fraud reporting, and consumer law compliance.
- Legitimate interests: to secure the website, improve performance, prevent misuse, and manage operations.
- Consent: for optional marketing or non-essential cookies where applicable.
05
Who We Share Data With
We share personal data only where necessary to run the store or comply with the law. Recipients may include:
- Payment providers that process transactions and help prevent payment fraud.
- Shipping, fulfilment, and logistics providers that deliver orders and provide delivery updates.
- Hosting, ecommerce, and technical vendors that operate the website, store infrastructure, or support systems.
- Analytics, advertising, and performance providers that help us understand store usage and campaign effectiveness.
- Professional advisers and authorities where disclosure is required by law or necessary to establish, exercise, or defend legal claims.
These service providers may process personal data on our behalf under their own contractual and legal obligations.
06
Cookies and Similar Technologies
The site may use cookies, pixels, local storage, and similar technologies to keep the store functioning, remember preferences, measure performance, and support fraud prevention and marketing.
- Essential cookies are used for core site features such as cart, checkout, security, and session continuity.
- Analytics cookies help us measure traffic and understand how visitors use the site.
- Marketing technologies may be used to measure advertising performance or support remarketing, where allowed.
You can manage cookies through your browser settings. Disabling certain cookies may affect site functionality, especially cart and checkout.
07
How Long We Keep Data
We retain personal data only for as long as necessary for the purpose for which it was collected, including to complete transactions, resolve disputes, provide support, maintain required business records, and comply with tax, accounting, and legal obligations.
Retention periods vary depending on the type of data and the reason it was collected. When data is no longer needed, we will delete it, anonymize it, or securely archive it where continued retention is legally required.
08
Your Rights
Depending on your location and the law that applies, you may have the right to request access, correction, deletion, restriction, objection, portability, or withdrawal of consent for certain types of processing.
- request a copy of the personal data we hold about you;
- ask us to correct inaccurate or incomplete information;
- ask us to delete data where we no longer have a valid basis to keep it;
- object to certain processing based on legitimate interests;
- withdraw consent for optional marketing or similar activities;
- lodge a complaint with a competent data protection authority.
To exercise a privacy right, contact us at support@flexmag.net. We may need to verify your identity before processing the request.
09
Security
We use reasonable technical and organizational measures designed to protect personal data against unauthorized access, loss, alteration, misuse, or disclosure. However, no method of transmission over the internet or electronic storage is completely secure, so absolute security cannot be guaranteed.
10
International Data Transfers
Some of our service providers may process personal data outside Estonia or the European Economic Area. Where this happens, we rely on appropriate safeguards required by applicable law, such as contractual protections, service-provider commitments, or other recognized transfer mechanisms.
11
Contact
If you have questions about this Privacy Policy or how your personal data is handled, contact:
- Codester OÜ
- Registry code: 16353798
- Address: Harju maakond, Lääne-Harju vald, Vasalemma alevik, Paekivi tn 8, 76101, Estonia
- Email: support@flexmag.net
We may update this Privacy Policy from time to time to reflect changes in legal requirements, business operations, or the store itself. The latest version will always be posted on this page.