Privacy Policy

Last updated: 30 July 2026

Data Controller
Scope
Personal Data We Collect
Legal Basis for Processing
How We Use Your Data
Who We Share Data With
International Transfers
Retention
Your GDPR Rights
Cookies
Health-Related Information
Security
Children
Changes
Contact & Complaints

1. Data Controller

Anitone
Uus tn 30, 72718 Paide linn, Estonia
Email: contact@anitone.online

This Privacy Policy describes how Anitone ("we", "us", "our") processes personal data in connection with the website anitone.online and the supply of nutritional supplement products, in accordance with the EU General Data Protection Regulation (GDPR, Regulation 2016/679) and applicable Estonian data protection law.

2. Scope

This Policy applies to personal data collected from Site visitors, customers, newsletter subscribers, and individuals who contact us by any means. It does not govern third-party platforms (e.g. payment processors or shipping providers) whose own policies apply to data they independently control.

3. Personal Data We Collect

Category	Examples	Source
Contact data	Name, email address, phone number, postal address	Provided by you when making an enquiry or placing an order
Order data	Products ordered, quantity, delivery address, order history	Generated when you place an order
Payment data	Transaction references (we do not store full card details — these are handled by our payment processor)	Generated during checkout
Communications	Content of emails or messages you send us	When you contact us
Technical data	IP address, browser type, device, pages visited, referral source	Collected automatically via cookies and server logs
Preferences	Marketing opt-in status, cookie consent choices	Recorded when you make choices on the Site

4. Legal Basis for Processing

Contract (Art. 6(1)(b)) — processing necessary to fulfil your order and provide customer support;
Legitimate interests (Art. 6(1)(f)) — operating and improving the Site, fraud prevention, and responding to business enquiries, where our interests are not overridden by your rights;
Consent (Art. 6(1)(a)) — non-essential cookies and, where applicable, marketing communications; you may withdraw consent at any time;
Legal obligation (Art. 6(1)(c)) — tax records, accounting obligations, and compliance with EU food supplement regulations.

5. How We Use Your Data

Processing and fulfilling product orders and handling returns;
Responding to enquiries and providing customer support;
Sending transactional communications (order confirmations, dispatch notifications);
Sending marketing communications where you have opted in (you may unsubscribe at any time);
Operating, securing, and improving the Site and our products;
Complying with EU food supplement regulations, tax law, and other legal obligations;
Analysing aggregated Site usage (where analytics cookies are consented to).

We do not sell your personal data. We may share it with:

Fulfilment and logistics partners — to deliver your order;
Payment processors — to process transactions securely under their own PCI-DSS compliant systems;
IT and hosting providers — supporting our website and systems as data processors under our instructions;
Analytics providers — only where you have consented to non-essential cookies;
Professional advisers — legal, accounting, and insurance professionals where necessary;
Public authorities — where required by applicable law, including Estonian tax authority or food safety regulators.

7. International Transfers

Anitone is based in Estonia within the EEA. Where service providers operate outside the EEA, we ensure appropriate safeguards are in place under GDPR, including the European Commission's Standard Contractual Clauses or transfers to countries with an EU adequacy decision.

8. Retention

Order and customer data is retained for seven years to meet accounting and tax obligations under Estonian and EU law. Marketing consent records are retained for the duration of the relationship plus a reasonable additional period. Technical usage data from cookies is retained as specified in our Cookie Policy. Data no longer needed is securely deleted or anonymized.

9. Your GDPR Rights

You have the right to:

Access (Art. 15) — request a copy of the personal data we hold about you;
Rectification (Art. 16) — request correction of inaccurate or incomplete data;
Erasure (Art. 17) — request deletion of your data where there is no legal obligation requiring us to retain it;
Restriction (Art. 18) — request that we limit processing in certain circumstances;
Portability (Art. 20) — receive your data in a structured, machine-readable format where technically feasible;
Objection (Art. 21) — object to processing based on legitimate interests, including direct marketing;
Withdraw consent (Art. 7(3)) — withdraw any consent at any time without affecting the lawfulness of prior processing.

To exercise any right, or to opt out of non-essential data processing, email contact@anitone.online. We will respond within one month as required by GDPR. You may also lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee) or your local EU supervisory authority.

10. Cookies

The Site uses cookies. Full details are in our Cookie Policy. You can manage preferences at any time via "Cookie Preferences" in the footer or by emailing contact@anitone.online.

11. Health-Related Information

If you voluntarily share health-related information with us (for example, when asking about product suitability for a specific condition), we treat that information with particular care and use it only to respond to your query. We do not store or use health information for marketing purposes. We do not process health data as a special category under Art. 9 GDPR beyond what is strictly necessary and permitted by your explicit consent or applicable law. You are not required to share any health information with us to purchase our products.

12. Security

We implement appropriate technical and organizational measures to protect your data, including encryption in transit, access controls, and regular security reviews. No system is completely secure; please contact us immediately at contact@anitone.online if you suspect a security issue.

13. Children

Our products and Site are intended for adults aged 18 and over. We do not knowingly collect personal data from minors. If we become aware that a child has provided data, we will delete it promptly.

14. Changes

We may update this Policy as our practices evolve or the law changes. The "Last updated" date reflects the current version.

15. Contact & Complaints