Privacy Policy

BBQ rub gift set

This Privacy Policy explains how Onlyitems OÜ (“Company”, “we”, “our”, or “us”) collects, uses, and protects your personal data when you visit our website, purchase products, or interact with our services.

Onlyitems OÜ operates the brand Mister Smoky, which produces and sells spice blends and seasoning products.

By using our website, you agree to the collection and use of information in accordance with this Privacy Policy.

1. Company Information

Company name: Onlyitems OÜ
Registration number: 17058920
VAT ID: EE102782242

Address:
Vesivärava tn 50-301
Kesklinna linnaosa
10152 Tallinn
Harju maakond
Estonia

Phone: +371 26545151

2. Personal Data We Collect

We may collect the following personal data when you interact with our website.

Information you provide directly

When you:

  • place an order
  • contact us through a contact form
  • subscribe to our newsletter
  • create an account
  • communicate with customer support

We may collect:

  • Full name
  • Email address
  • Phone number
  • Billing address
  • Shipping address
  • Order details
  • Payment information (processed securely by third-party payment providers)

We do not store full payment card details.

Automatically collected information

When you visit our website, we may automatically collect certain information, such as:

  • IP address
  • Browser type
  • Device type
  • Pages visited
  • Time spent on pages
  • Referring website

This information helps us improve website functionality and user experience.

3. How We Use Your Personal Data

We use your personal data for the following purposes:

  • Processing and delivering orders
  • Providing customer support
  • Managing customer accounts
  • Communicating regarding purchases or inquiries
  • Improving our website and services
  • Sending newsletters and marketing communications (only if you have consented)
  • Preventing fraud and ensuring website security
  • Complying with legal obligations

4. Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process personal data based on the following legal grounds:

Contractual necessity
To process and deliver your orders.

Legal obligations
To comply with accounting, tax, and regulatory requirements.

Legitimate interests
To improve our services, prevent fraud, and ensure website security.

Consent
When you subscribe to newsletters or marketing communications.

You may withdraw your consent at any time.

5. Cookies

Our website uses cookies to enhance your browsing experience.

Cookies help us:

  • remember your preferences
  • analyze website traffic
  • improve website performance
  • provide a better shopping experience

You can disable cookies through your browser settings. However, some parts of the website may not function properly if cookies are disabled.

6. Sharing Personal Data

We do not sell or rent personal data.

We may share your personal information with trusted third parties only when necessary to operate our business, such as:

  • Payment processing providers
  • Shipping and logistics partners
  • Website hosting providers
  • Email marketing services
  • Analytics services

These service providers only process personal data as required to perform their services.

7. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy, including:

  • processing orders
  • complying with legal obligations
  • resolving disputes
  • enforcing agreements

Accounting and order information may be stored for the period required by law.

8. Your Data Protection Rights

Under GDPR, you have the right to:

  • access your personal data
  • correct inaccurate data
  • request deletion of your personal data
  • restrict data processing
  • object to data processing
  • request transfer of your data (data portability)

If you wish to exercise any of these rights, please contact us.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data against:

  • unauthorized access
  • accidental loss
  • misuse
  • disclosure or alteration

Despite our efforts, no online transmission is completely secure.

10. Third-Party Websites

Our website may contain links to external websites.
We are not responsible for the privacy practices or content of those websites.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

Any changes will be posted on this page with an updated revision date.

12. Contact Information

If you have any questions regarding this Privacy Policy or how your personal data is processed, please contact us:

Onlyitems OÜ

Vesivärava tn 50-301
Kesklinna linnaosa
10152 Tallinn
Harju maakond
Estonia

Phone: +371 26545151