Privacy Policy

Gateway Holdings OÜ, trading as BrandsGateway, is responsible for the personal data described here. We use it to run your account, ship your orders, invoice you and meet our tax and customs duties, answer your questions, keep our service secure, and send business customers emails about our products. You can refuse marketing emails at any time. Contact: [email protected].

Gateway Holdings OÜ, registry code 14276496, Narva mnt 5, 10117 Tallinn, Estonia, trading as BrandsGateway, VAT EE101980032. Email: [email protected]. We have not appointed a data protection officer, as the law does not require one for our business.

Our customers and people who register; the staff of our customers and suppliers; people who contact us; visitors of brandsgateway.com.

Running your account, orders, returns and payments: our contract with you. Verifying your phone number at sign-up: the contract, and our interest in preventing fake accounts. Invoices, accounting, tax and customs: our legal obligations. Answering questions: the contract, or our interest in answering enquiries. Preventing fraud and keeping our systems secure: our interest in protecting our business and customers. Analytics: your consent for analytics cookies. Marketing emails: see below. Legal claims: our interest in protecting our rights. Where we rely on our interests, you can ask for the assessment we made.

We send customers emails about products similar to what they buy from us, as Estonian law allows for existing customers. You can refuse them at any time, through the link in every email, in your account settings, or by writing to us. Emails about your account and orders are not marketing.

The fields marked as required are needed to open your account, ship your orders and invoice you. Everything else is optional.

Product vendors and warehouses that ship the goods; carriers; payment providers; our IT providers for hosting, email, support and security; the platforms you connect, such as Shopify; our accountants; authorities where the law requires. Providers working for us are bound by data-processing agreements. We do not sell personal data.

Some of our providers are in the United States. We use them only where they are certified under the EU-U.S. Data Privacy Framework, or under the European Commission's Standard Contractual Clauses; you can ask us for a copy. When you ship an order outside the EEA, the carriers receive the delivery details.

Invoices and accounting records: 7 years from the end of the financial year (Estonian Accounting Act). Account data: while your account is open, and afterwards as long as needed to settle open orders, returns and claims. Support messages: as long as needed to answer them and handle any follow-up. Marketing emails: until you refuse them.

Necessary cookies keep the site working. Other cookies are used only if you agree in the cookie banner, where you can also change your choice.

Many of our customers are online shops that sell our products. When you order from one, the shop sends us your name, address, phone, email and order details so we can ship your order. We do this on the shop's behalf; the shop is responsible for your data, so please send requests to it. We keep only the invoice and customs records the law requires, and never use your data for our own marketing. How we handle it is set out in our Data Processing Addendum with the shop.

You can ask for a copy of your data, have it corrected or deleted, restrict its use, receive it in a portable format, and object to its use for our interests. You can withdraw consent at any time.

You can object to marketing emails at any time, free of charge, and we will stop.

Write to [email protected]. We answer within one month, free of charge. You can also complain to the Estonian Data Protection Inspectorate (aki.ee) or the authority in your EU country.

We publish the new version here and email customers about changes that matter to them.