Last updated: 22 August 2026.
This Privacy Policy explains how Decords and AnOL OÜ collect, use, disclose, store and protect personal information when you visit www.decords.com, place an order, create an account, contact us, submit artwork or otherwise use our online store and related services.
1. Data controller and contact details
The controller of personal information processed for Decords is:
AnOL OÜ
Registered office: Paldiski mnt 167-6, 13518 Tallinn, Estonia
Production location: Laki 4, Box 1, 10621 Tallinn, Estonia
Registry code: 12315625
VAT number: EE101842662
Email: info@decords.com
Decords is the trade name used for the online store and production activities operated by AnOL OÜ.
2. Scope of this policy
This policy applies to personal information processed through the Decords website, checkout, customer accounts, contact forms, customer support, order fulfilment, custom-design workflow, marketing communications and related services. Third-party websites and platforms have their own privacy notices.
3. Personal information we may process
The categories depend on how you use the store and can include:
- identity and contact information, such as name, email address, telephone number, billing address and delivery address;
- order and transaction information, including products, options, personalization details, prices, payment status, delivery method, tracking, returns, refunds and customer-service history;
- account information, preferences, saved items and authentication-related information;
- communications, photographs, videos, artwork, logos, text, measurements and other files submitted for a custom order, proof, complaint, warranty request or support case;
- device and usage information, such as IP address, browser, device type, operating system, approximate location, referral source, page interactions, cookie identifiers and similar technical data;
- marketing preferences and records of consent, withdrawal, cookie choices or data-sharing opt-out requests;
- fraud-prevention and security signals used to protect customers, payments, orders and the store.
Complete payment-card details are processed by Shopify and the payment provider selected at checkout. Decords does not ask customers to send complete card details through email or contact forms and does not normally receive the complete card number.
4. Sources of personal information
We may receive personal information:
- directly from you when you browse, order, create an account, contact us, submit a file, request a quotation, register a warranty or start a return;
- automatically from your browser or device through cookies, pixels, logs and similar technologies;
- from Shopify and service providers that support checkout, payments, fraud prevention, hosting, analytics, customer communication, shipping and fulfilment;
- from carriers, marketplaces, payment providers or other partners when they provide an order, delivery, payment, dispute or support update;
- from public sources where reasonably necessary to verify a business customer, submitted brand asset or legal claim.
5. Purposes and legal bases
Depending on the circumstances, we process personal information for the following purposes and legal bases:
- to prepare quotations, process orders, take payment, produce custom items, deliver goods, manage returns, warranties and support, and otherwise perform a contract or take requested pre-contractual steps;
- to meet accounting, tax, consumer-protection, product-safety, customs and other legal obligations;
- to protect the store, customers and business against fraud, misuse, security incidents, payment disputes and unlawful activity, based on legitimate interests and legal obligations;
- to improve products, instructions, website performance, customer support and production processes, based on legitimate interests where those interests are not overridden by individual rights;
- to send marketing communications or use non-essential analytics and advertising technologies where consent is required, or otherwise as permitted by applicable law;
- to establish, exercise or defend legal claims and resolve complaints or disputes.
Where processing is based on consent, you can withdraw consent at any time. Withdrawal does not affect processing that was lawful before the withdrawal.
6. Shopify and the online store platform
The Decords store is hosted by Shopify. Shopify processes information needed to provide the storefront, checkout, customer accounts, payments, security and related services. Information submitted through the store is transmitted to Shopify and relevant service providers, which can be located outside your country.
Read the Shopify Consumer Privacy Policy and use the Shopify Privacy Portal for information and choices relating to data processed by Shopify.
7. Service providers and recipients
We disclose personal information only when reasonably required for the purposes described in this policy. Recipients can include:
- Shopify and associated infrastructure, checkout, security and customer-account services;
- payment providers and financial institutions;
- postal operators, couriers, fulfilment partners, customs representatives and return-processing locations;
- email, contact-form, chat, customer-support and file-storage providers;
- analytics, advertising and social-media providers, depending on your consent and the current store configuration, such as Google, Meta, TikTok and Microsoft Clarity;
- IT, cybersecurity, accounting, legal, insurance and professional advisers;
- public authorities or other parties where disclosure is required by law, valid legal process, protection of rights or prevention of fraud;
- a buyer, adviser or successor in connection with a genuine corporate transaction, subject to appropriate confidentiality and legal requirements.
We do not sell personal information for monetary payment. Certain advertising or cross-context data disclosures can nevertheless be defined as a “sale”, “sharing” or targeted advertising under some privacy laws. Eligible visitors can use the Do Not Sell or Share My Personal Information page.
8. Cookies, analytics and advertising
Essential cookies and similar technologies support functions such as navigation, security, cart, checkout, account access and fraud prevention. Non-essential technologies can be used for analytics, performance measurement, personalization and advertising.
Where applicable, the Shopify cookie banner or another consent mechanism lets you accept, reject or change choices for non-essential technologies. Marketing and analytics data can be reduced when consent is declined. You can also use cookie controls in your browser, although blocking essential technologies can prevent parts of the store from working correctly.
For regions where data-sharing opt-out rights apply, the store can also recognize eligible opt-out methods, including the store opt-out page and Global Privacy Control where supported.
9. Custom artwork and support materials
Files submitted for a custom project can contain personal information or information about other people. Submit only information necessary for the order and only content you are authorized to provide. We use submitted files to assess, proof, manufacture, deliver and support the requested product. Files may be retained for quality control, reorders, dispute resolution or legal requirements and are deleted or anonymized when they are no longer reasonably needed.
10. International transfers
Decords serves customers internationally and uses providers operating in multiple countries. Personal information can therefore be processed outside the country where you live. Where required, transfers from the European Economic Area or United Kingdom rely on an adequacy decision, standard contractual clauses or another legally recognized safeguard.
11. Retention
We retain information only for as long as reasonably needed for the purpose for which it was collected, including order fulfilment, customer support, warranty handling, fraud prevention, accounting, tax, dispute resolution and legal compliance.
Retention periods vary by data type. Order, payment, tax and accounting records can be retained for the periods required by applicable law. Marketing information is retained until consent is withdrawn, the communication becomes unnecessary or another applicable retention limit is reached. When information is no longer needed, it is deleted, anonymized or securely restricted unless continued retention is required by law.
12. Security
We use organizational and technical measures intended to protect personal information against unauthorized access, loss, alteration or disclosure. No transmission or storage system can be guaranteed completely secure. Do not send passwords, complete payment-card details or other highly sensitive information through ordinary email or public contact forms.
13. Your privacy rights
Depending on your location and the circumstances, you may have rights to:
- request access to personal information and information about its processing;
- correct inaccurate or incomplete information;
- request deletion of information;
- restrict or object to certain processing;
- receive information in a portable format where applicable;
- withdraw consent;
- opt out of certain marketing, targeted advertising, sale or sharing;
- submit a complaint to a competent data-protection authority.
Rights are not absolute and can be limited by applicable law, legal obligations, another person’s rights or the need to establish or defend claims. We may request reasonable information to verify identity and authority before responding.
Send a request to info@decords.com. You can unsubscribe from promotional email using the link in the message. Service and order communications can still be sent when needed to fulfil a purchase or legal obligation.
In Estonia, the supervisory authority is the Estonian Data Protection Inspectorate.
14. Children
The store is not directed to children who are not legally able to enter into a purchase contract in their jurisdiction. We do not knowingly collect personal information from a child in a manner prohibited by law. A parent or guardian can contact us to request review or deletion of information submitted by a child.
15. Third-party links and platforms
The store can link to social networks, payment services, carriers and other third-party websites. Those services are controlled by their operators and their privacy notices apply when you use them.
16. Changes to this policy
We may update this policy to reflect changes in the store, providers, legal requirements or processing practices. The revised version will be published with a new update date, and additional notice will be provided where required.
17. Contact
Questions and privacy requests can be sent to:
AnOL OÜ / Decords
Registered office: Paldiski mnt 167-6, 13518 Tallinn, Estonia
Production location: Laki 4, Box 1, 10621 Tallinn, Estonia
Email: info@decords.com
