Privacy Policy

Effective from: 19 July 2026

This privacy policy explains how Intcenta OÜ (registry code [reg. no.], address Lepatriinu tee 4-7, Jälgimäe, Saku vald, 76404, Harju County, Estonia; email myintcenta@intcenta.com) processes personal data in connection with the use of the www.intcenta.com webshop, inquiries and orders. We process personal data in accordance with the EU General Data Protection Regulation (EU) 2016/679 (GDPR) and the Estonian Personal Data Protection Act.

1. Important: we currently sell to business customers only (B2B)

Intcenta OÜ currently sells products only to business customers (legal entities). As a result, most of the personal data we process belongs to the contact persons of those companies (e.g. the name, work email, phone number and job title of the employee placing an order), rather than consumer purchase data. GDPR applies in full to contact-person data as well, since it relates to an identifiable natural person.

2. What information we collect

Inquiry / contact form data: name, company name, email address, phone number, message content, and an optional note about wanting to open a B2B account.
Customer account data: company name and registry code, VAT number, contact person's name, email, phone, and delivery/billing address.
Order data: ordered products, quantities, prices, delivery and payment status, billing information.
Technical data: IP address, browser type, device information and browsing behaviour via cookies and similar technologies (see section 7).

3. Purposes of processing and legal basis

Purpose	Legal basis (GDPR Art. 6)
Responding to inquiries and preparing quotes	Pre-contractual steps — Art. 6(1)(b)
Processing orders, delivery and invoicing	Performance of a contract — Art. 6(1)(b)
Retaining accounting records (invoices)	Compliance with a legal obligation (Estonian Accounting Act) — Art. 6(1)(c)
Managing the customer relationship, fraud prevention, webshop security	Legitimate interest — Art. 6(1)(f)
Marketing communications (only if you have given consent)	Consent — Art. 6(1)(a)

4. Who we share data with

We do not sell your data to third parties. Data may be shared, only to the extent necessary to provide the service, with the following processors:

Erply — stock, pricing and order management (ERP) software;
courier services (e.g. Omniva, DPD, Venipak) for order delivery;
accounting and audit service providers, to meet statutory obligations;
IT hosting and email service providers;
public authorities, where there is a legal basis or obligation to do so.

Data processing agreements are in place with all processors, ensuring a level of personal data protection at least equivalent to GDPR requirements.

5. Data retention periods

Invoices and accounting source documents — 7 years, per the Estonian Accounting Act.
Customer account and order history — for the life of the account, and up to 3 years after account closure to handle any claims.
Inquiries submitted via the contact form that do not lead to a contract — up to 12 months.
Data based on marketing consent — until the consent is withdrawn.

6. Your rights

Under the GDPR, you have the right to:

find out what personal data we process about you, and obtain a copy (right of access);
request correction of inaccurate data;
request erasure of data where there is no legal basis to retain it;
request restriction of processing, or object to processing;
receive your data in a structured, machine-readable format (data portability);
withdraw consent at any time, where processing is based on consent;
lodge a complaint with the Estonian Data Protection Inspectorate (www.aki.ee) or take the matter to court, if you believe your rights have been violated.

To exercise these rights, please contact us at myintcenta@intcenta.com.

7. Cookies

We use cookies that are strictly necessary for the webshop to function, and, with your consent, statistics/analytics cookies to understand and improve the shopping experience. You can withdraw cookie consent at any time in your browser settings; essential cookies are required for login and cart functionality and do not require separate consent.

8. Data security

We apply appropriate technical and organisational measures (access restrictions, encrypted data transmission, regular backups) to protect personal data against unauthorised access, loss or misuse.

9. Changes to this policy

We may update this privacy policy from time to time, for example due to changes in legislation or the development of our services. The effective date of each version is stated at the top of this page.

10. Contact

For questions about how we process personal data, please contact:
Intcenta OÜ
Lepatriinu tee 4-7, Jälgimäe, Saku vald, 76404, Harju County, Estonia
Email: myintcenta@intcenta.com
Phone: +372 656 1 600