Privacy Policy

Last updated: October 27, 2026

This policy explains how personal information is handled when you visit oddall.com, contact us, create an account or place an order. Oddall is operated by Navolsika OÜ, an Estonian private limited company. Navolsika OÜ is the controller responsible for the personal information described here.

1. Who to contact

For privacy questions or requests, email support@oddall.com with the subject “Privacy request.” You can also contact us using the details at the end of this policy. We will use only the information reasonably necessary to verify and respond to a request.

2. Information you provide

• Order and contact details: Your name, email address, telephone number, billing and delivery addresses, products ordered and delivery instructions.
• Transaction records: Order amounts, payment status, transaction references, refunds, exchanges and return details. The payment service selected at checkout handles payment credentials under its own terms; do not send full card details to our support team.
• Account details: If you choose to create an account, the information needed to manage your account, order history and account access.
• Support communications: Messages, order references and any photos or documents you choose to provide to resolve a question or product issue.
• Preferences: Choices you make about communications, cookies or other optional features offered by the store.

We obtain this information from you. We may also receive payment confirmation, delivery updates and related information from the providers involved in your order.

3. Information collected through the website

When you use the store, its hosting and shopping software can process technical information such as your IP address, browser and device information, pages requested, date and time, session information and security logs. Cookies and similar storage support functions such as keeping items in your cart, maintaining a login and protecting checkout.

Our store uses WordPress and WooCommerce and is hosted with Hostinger. Our Cookie Policy explains the shopping and account cookies that may be used. Optional analytics or advertising technologies, if offered, require the choices and notices appropriate to their purpose. Continuing to browse is not treated as consent to optional tracking.

4. Why we use information and our legal bases

• To fulfill orders and provide support: We use order, contact and transaction information to process purchases, arrange delivery, answer questions and handle returns. This is necessary to perform our contract with you or take steps you request before a purchase.
• To meet legal obligations: We keep the records needed for accounting, tax, consumer protection and other legal duties.
• To operate and protect the store: We use relevant technical and transaction information for site operation, troubleshooting, fraud prevention, security and the establishment or defense of legal claims. We rely on our legitimate interests in running a secure, reliable business, while considering the impact on your rights.
• For optional communications and technologies: Where consent is required, we rely on your consent. You may withdraw it at any time without affecting processing that was lawful before withdrawal.

We need the information marked as required at checkout to complete the order. If you do not supply it, we may be unable to take payment, deliver the goods or provide the requested service. Optional information is not required to make an ordinary purchase.

5. Who receives information

We disclose information only where needed for the purposes described in this policy, including to:

• Hosting, store administration, technical maintenance and security service providers, including Hostinger and the providers of the software and services actually used to operate the store.
• The payment provider you use at checkout, for authorization, payment, fraud prevention and refunds.
• Shipping and delivery partners, for addressing, delivery, tracking and returns.
• Professional advisers, accountants or authorities where required for a lawful business, accounting or legal purpose.

Providers receive the information needed for their role and must handle it under the applicable contractual or legal obligations. A payment provider or carrier may also process some information as an independent controller under its own privacy notice. We may disclose relevant records to comply with a legal obligation or protect rights in a dispute.

We do not sell or rent customer contact details. We do not use customer information or images in advertisements without the permission required for that use.

6. International processing

Navolsika OÜ is established in Estonia and serves customers in the United States. Information may be processed in Estonia, the United States or other locations where the providers involved in your order operate.

Where a transfer outside the European Economic Area is subject to GDPR safeguards, we use a valid transfer mechanism as appropriate, such as an applicable adequacy decision or approved contractual safeguards. You can contact us for information about the safeguards relevant to your data.

7. How long we keep information

We retain information for the purpose for which it was collected and then delete, anonymize or securely restrict it when it is no longer needed, subject to legal retention requirements.

• Accounting and transaction records: Relevant records are normally retained for 7 years from the end of the financial year to which they relate, as required by Estonian accounting rules. A longer period may apply to a continuing legal obligation or dispute.
• Account information: Kept while the account is active and as needed to provide account services. Closing an account does not remove order records that we must keep by law.
• Support and return records: Kept for the period reasonably needed to resolve the matter, administer the purchase and address legal claims.
• Technical records and cookies: Kept according to their operational or security purpose. Cookie lifetimes are described in the Cookie Policy or your browser’s storage information.

8. Your choices and rights

Depending on the law that applies, you may have the right to access a copy of your personal information, correct inaccurate information, request deletion, restrict processing, receive portable information, object to processing based on legitimate interests or withdraw consent.

U.S. state privacy laws may provide additional rights, such as rights concerning targeted advertising, certain disclosures or an appeal of a request decision, where those laws apply to the business and the request. You may contact us to ask about a right or make a request, including through an authorized agent where the law permits. We do not discriminate against you for exercising an applicable privacy right.

Some requests may be limited by the need to fulfill an order, protect another person’s information, meet a legal duty or maintain records for a legal claim. We will explain an applicable limitation. We respond within the timeframe required by the relevant law; for GDPR requests, this is normally within one month, with notice if a lawful extension is needed.

9. Security and automated checks

We use reasonable technical and organizational measures appropriate to the information and risks involved. Access to customer records is limited to the people and providers who need it for their work. No online transmission or storage system can be guaranteed completely secure.

Payment and security services may use automated checks to detect fraud or verify a transaction. If an order is affected and you believe a decision is incorrect, contact us to request that the order issue be reviewed. We do not use solely automated processing to make an independent legal or similarly significant decision about you without the protections required by applicable law.

10. Children

The store is intended for a general adult shopping audience and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided information to us, contact us so we can investigate and take the appropriate steps, including deletion where required.

11. Complaints and changes

Please contact us if you have a concern about your information. You may also complain to the Estonian Data Protection Inspectorate, Andmekaitse Inspektsioon, or another competent privacy authority. This does not limit other remedies available to you.

We may update this policy when our practices or legal obligations change. The date above identifies the latest version. We will provide additional notice when required for a material change.

12. Controller details

Navolsika OÜ — private limited company
Registry code: 17283568
VAT number: EE102881350