Privacy Policy

Who We Are

Golden Dust Wear is a curated online marketplace for fashion, accessories and independent creators. This website is operated by:

GOLDEN DUST WEAR OÜ
Registry code: 17430259
Registered address: Tornimäe tn 3, 10145 Tallinn, Estonia
Email: contact@goldendustwear.com
Website: https://goldendustwear.com

Golden Dust Wear acts as the data controller for the personal data collected through this website. We have not appointed a data protection officer. For any question about your personal data, please contact us at the address above.

Independent sellers who receive customer data in order to fulfil an order act as separate data controllers for that data, as described in Section 6.

Information We Collect

We collect personal data that you provide directly to us, data generated when you use our website, and data necessary to provide our marketplace services. This may include:

• identity information, such as your name and surname
• contact information, such as your email address, billing address, shipping address and phone number
• account information, such as login details, account preferences, wishlist and order history
• order information, such as purchased items, delivery details and customer service communications
• return information, such as return and refund requests, the reasons given, photographs you submit and the results of the inspection of returned items
• seller information, such as seller applications, store details, business and contact information, trade register and tax identification details, payout details and identity or verification documents where required
• communication data, such as messages sent through forms, email or customer support
• payment-related information, such as transaction references, payment status and billing details
• technical information, such as IP address, browser type, device type, operating system, pages viewed, referring URLs and cookies
• marketing preferences, such as whether you have agreed to receive newsletters or promotional communications

We do not intentionally collect sensitive personal data, such as data concerning health, unless required by law or voluntarily provided by you in a specific context.

The data marked as required in our forms is necessary to create an account, place an order, process a return or review a seller application. If you do not provide it, we cannot carry out the request. Providing data for marketing purposes is always optional.

How We Use Your Information

We use your personal data to operate, provide and improve Golden Dust Wear. This includes using your information to:

• process and manage orders
• create and manage customer accounts
• allow sellers to create and manage vendor accounts
• enable sellers to process, prepare and ship orders
• provide customer service and respond to enquiries
• send order confirmations, shipping updates and service-related messages
• process returns, refunds, disputes and complaints
• verify seller applications and marketplace activity
• maintain the safety, security and integrity of our website
• prevent fraud, abuse, misuse or unauthorised access, including return abuse as described in Section 5
• comply with tax, accounting, consumer protection, legal and regulatory obligations
• improve our website, services, user experience and marketplace features
• send marketing communications where permitted by law or where you have consented
• analyse website performance and understand how visitors use our website

Legal Basis for Processing

We only process your personal data when we have a lawful basis to do so under Article 6 of the GDPR.

Performance of a contract

When you create an account, place an order, request a return or a refund, or use our marketplace services, and when we take steps at your request before entering into a contract, for example when reviewing a seller application.

Compliance with legal obligations

When we keep accounting and tax records, handle your consumer rights, verify the identity of sellers and report information about sellers to the tax authorities where required, or respond to lawful requests from public authorities.

Our legitimate interests

When we operate, secure and improve the marketplace, prevent fraud and abuse, including the return monitoring described in Section 5, respond to enquiries that are not linked to a contract, send information about similar products to existing customers where permitted by law, and establish, exercise or defend legal claims. Where we rely on legitimate interests, you may object to the processing, as described in Section 13.

Your consent

For non-essential cookies and, where required, for newsletters and marketing communications. You may withdraw your consent at any time. Withdrawing consent does not affect the lawfulness of the processing carried out before the withdrawal.

Return Monitoring and Abuse Prevention

To protect our sellers and the marketplace against return abuse and fraud, we monitor return activity on customer accounts, as described in Section 19 of our Refund and Return Policy. This processing is based on our legitimate interest in preventing abuse and fraud and in keeping the marketplace fair for sellers and customers.

For this purpose, we use your order history, your return and refund requests and the reasons given, the dates of these requests, the results of inspections of returned items, including photographs, the outcome of refunds and claims, and related communications.

No measure is taken on the basis of automated processing alone. Any measure described in Section 19 of our Refund and Return Policy is decided by a member of our team after an individual review. You will be informed of the measure and may present your point of view and contest it by contacting us.

The seller concerned receives the information relating to the return of their own order, such as inspection results and photographs. We do not share your return history with other sellers.

Return monitoring data is kept for as long as your account remains active and for no longer than 24 months after your last order, unless a longer period is required to handle a dispute or a legal claim.

You may object to this processing at any time, on grounds relating to your particular situation, by contacting us at contact@goldendustwear.com. We will then stop the processing unless we can demonstrate compelling legitimate grounds for it, or unless the data is needed for the establishment, exercise or defence of legal claims.

Marketplace Sellers

Golden Dust Wear is a marketplace. Products are sold by independent sellers through our platform, and the identity of the seller is shown on the product page and on your order confirmation.

When you place an order, we share with the relevant seller the personal data necessary to fulfil it, such as your name, shipping address, order details and any information required to prepare or deliver your order. Each seller receives only the data relating to their own orders.

Sellers may use customer data only for purposes directly related to the order, including:

• preparing and shipping the order
• communicating about the order
• handling returns, exchanges or customer service
• complying with applicable legal obligations

Sellers are not allowed to use customer data for unrelated marketing, resale, or any purpose not connected to the order unless they have a separate lawful basis to do so. Where a seller is established outside the European Economic Area, Section 11 applies.

Payments

Payments on Golden Dust Wear are processed by secure third-party payment providers, such as Stripe.

We do not store your full payment card details on our website. Your payment information is handled by the payment provider according to its own privacy policy and security standards.

We receive limited payment-related information, such as payment status, transaction reference, billing details and fraud prevention information, in order to process your order, handle refunds and maintain business records.

Seller payouts are processed through the payment provider, which may collect identity and bank account information directly from sellers in order to meet its own legal obligations.

Cookies and Similar Technologies

Our website uses cookies and similar technologies to operate properly and improve your experience. Cookies may be used to:

• keep the website functioning
• remember your preferences
• manage your cart and checkout
• keep you logged into your account
• improve website performance and security
• understand how visitors use our website
• support analytics or marketing tools, where applicable

Essential cookies are required for the website to work and do not require your consent. Analytics, marketing and other non-essential cookies are only set with your consent.

You can give, refuse or withdraw your consent at any time through the cookie settings available on our website. The cookie banner lists the cookies used and their duration. You can also manage or delete cookies through your browser settings.

Marketing Communications

We send newsletters and promotional communications only if you have subscribed, or where permitted by law. Where you have purchased from us, we may send you information about similar products by email, unless you objected when your email address was collected or at any time afterwards.

You can unsubscribe at any time, free of charge, by using the unsubscribe link in our emails or by contacting us at contact@goldendustwear.com. When you object to direct marketing, we stop using your data for that purpose.

We do not sell your personal data for marketing purposes.

Who We Share Your Data With

We share your personal data only where necessary to operate our business and provide our services. Recipients may include:

• marketplace sellers, where necessary to fulfil an order or handle a return
• payment processors
• hosting and website service providers
• email and communication providers
• delivery, shipping or logistics providers
• fraud prevention and security providers
• analytics providers, where you have consented
• accounting, legal, tax or administrative service providers
• the Estonian Tax and Customs Board and other tax authorities, where we are required to report information about sellers
• public authorities, regulators, courts or law enforcement, where legally required

Service providers acting on our behalf process personal data only on our instructions, under a data processing agreement, and only for the purposes for which the data was shared.

We do not sell your personal data.

International Data Transfers

Golden Dust Wear is based in Estonia. Some service providers and some sellers may be located outside the European Economic Area.

Service providers

Where a service provider processes personal data outside the European Economic Area, the transfer is based on an adequacy decision of the European Commission, including the EU-US Data Privacy Framework for certified companies, or on the Standard Contractual Clauses adopted by the European Commission.

Sellers established outside the European Economic Area

Where you order from a seller established outside the European Economic Area, the data needed to fulfil your order is transferred to that seller because the transfer is necessary for the performance of the contract you have requested. The seller’s identity is shown on the product page before you order. The country of the seller may not offer a level of data protection equivalent to that of the European Union.

You may contact us for more information about the safeguards applied to a specific transfer.

How Long We Keep Your Data

We keep your personal data only for as long as necessary for the purposes described in this Privacy Policy. In general:

• account data is kept for as long as your account remains active, or until you ask us to delete it
• order, invoice and transaction records are kept for seven years, as required by the Estonian Accounting Act
• seller data is kept for as long as the seller relationship lasts, and afterwards for the periods required by tax, accounting and seller verification rules
• return monitoring data is kept for no longer than 24 months after your last order, as described in Section 5
• customer service messages are kept for as long as necessary to handle your request, and with the related order records where they concern an order
• marketing data is kept until you unsubscribe or withdraw consent; a record of your consent or objection is kept as evidence
• technical and security data is kept for a limited period to protect the website and prevent abuse
• data relating to a dispute or a claim is kept until the matter is resolved and the applicable limitation period has expired

When personal data is no longer needed, we delete it or anonymise it.

Your Rights

Under the GDPR, you have the right to:

• access the personal data we hold about you and obtain a copy of it
• have inaccurate or incomplete data corrected
• have your personal data deleted, where the conditions of the GDPR are met
• have the processing restricted
• receive the data you provided to us in a portable format, and have it transmitted to another controller
• object to processing based on our legitimate interests, on grounds relating to your particular situation
• object at any time to the use of your data for direct marketing
• withdraw your consent where processing is based on consent
• not be subject to a decision based solely on automated processing which produces legal effects concerning you or similarly significantly affects you

We do not take decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you.

To exercise your rights, contact us at contact@goldendustwear.com. We reply within one month. This period may be extended by two further months for complex or numerous requests, in which case we will tell you why. Exercising your rights is free of charge. We may ask you to confirm your identity before responding.

Right to lodge a complaint

You have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), or with the supervisory authority of the EU or EEA country where you live, work or where the alleged infringement took place.

Andmekaitse Inspektsioon
Tatari tn 39, 10134 Tallinn, Estonia
Email: info@aki.ee
Telephone: +372 627 4135
Website: aki.ee

Account Deletion

If you have created an account, you may request the deletion of your account and associated personal data by contacting us at contact@goldendustwear.com.

Certain information must be kept where required by law or where it is needed for a pending matter, for example order records, invoices, tax records, fraud prevention records or data relating to an open return, refund or dispute. That information is kept only for the periods set out in Section 12.

Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.

No online service can be guaranteed to be completely secure. You are responsible for keeping your login details confidential and for using a secure password.

Where a personal data breach is likely to result in a high risk to your rights and freedoms, we will inform you without undue delay.

Third-Party Links

Our website may contain links to third-party websites, services, social media pages or payment platforms.

We are not responsible for the privacy practices, content or security of third-party websites. We encourage you to read their privacy policies before providing personal data to them.

Children

Golden Dust Wear is not intended for children under the age of 16.

We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child without appropriate consent, we will take steps to delete it.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations or business practices.

The updated version is published on this page with a new “Last updated” date. Where a change significantly affects how we use your personal data, we will also inform you by email or through a notice on the website.