Privacy Policy (including cookie information)

At Barest, your privacy is important to us, and we are committed to complying with applicable laws and regulations regarding any personal data we may collect about you when you visit our website barest.shoes.

This Privacy Policy aims to explain what data we collect, how we use it, and what rights you have to protect your information. This applies only to our website and its visitors and does not apply to data collected through other channels.

The controller of the personal data of the online shop barest.shoes (hereinafter “online shop”) is Barest Shoes OÜ (registry code 17081787), located at Pärna tn 1, Võõpsu küla, 64318 Setomaa vald, Võru maakond, Estonia. Contact information: e-mail info@barest.shoes and phone number +37256653131.

We collect and process information in accordance with the General Data Protection Regulation (GDPR) of the European Union.

1. Data collection and use

What data we collect
We collect both information you knowingly and actively provide when using our services or participating in promotions, and information your devices automatically send when accessing our products and services.

Personal data may be collected in the following ways:

When you browse the website barest.shoes.
When you purchase goods in the online shop.
When you subscribe to the newsletter.
When you share posts on social media or interact with the posts.
When you contact us via phone, email, or contact form.

2. Types of data collected

Personal Data
Personal data is used to manage the customer’s orders and to deliver goods. We only request personal information when necessary to provide a service to you. When you contact us or visit our website, you may share the following information:

first and last name;
email address;
phone number;
delivery and billing address;
cost of goods and services and data related to payments (bank account number, payment card details, or other payment-related information necessary for the purchase;
customer support data;
date of birth.

Purchase history data (date of purchase, goods, quantity, customer data) are used to put together an overview of the goods and services purchased, to analyse customer preferences and, among
other things, for the purposes of resolving consumer disputes.

The bank account number is used to reimburse payments to the customer.

Personal data such as the e-mail address, telephone number and name of the customer are processed to handle any issues relating to the provision of goods and services (customer support).

E-mail is also used in order to forward invoices and the telephone number is used to notify the
customer about their goods arriving in the parcel locker

Log Files
Our website barest.shoes stores log files about its visitors. This information may include:

type of device used;
internet Protocol (IP) address;
browser type;
internet Service Provider (ISP);
date and time of website visit;
entry and exit pages and number of clicks on the site.

Log file information is used for analyzing trends, administering the site, tracking user activity, and gathering demographic data. This information is not intended to, and cannot, identify individuals.

The IP address or other online identifiers of users of the online shop are processed for the provision of the online shop as an information society service and for web use statistics.

Cookies
Like most websites, barest.shoes uses “cookies.” A cookie is a text file stored on your device when you visit a website. Cookies allow for setting and storing preferences, regional settings, service usage options, and more.

You may refuse the use of cookies or disable them completely in your browser settings. However, disabling cookies may result in issues when using the website.

Cookies are divided into persistent and session cookies. Persistent cookies remain on your device even after you close your browser or computer. Session cookies are deleted immediately after closing the browser.

Types of cookies by purpose:

Necessary cookies – Session cookies that enable use of services offered on our website. These authenticate users and prevent malicious account usage. Without these, we cannot offer the requested services.
Consent cookies – Detect whether users have accepted cookie usage on the site.
Functionality cookies – Allow your browser to remember choices made while using the website, like login data or language preferences. They provide a more personalized experience and eliminate the need to re-enter preferences.

3. How we use data

Collected data may be used for various purposes, including:

Maintaining, managing, developing, personalizing, and expanding our website.
Identifying you via phone, message, or email.
Facilitating and speeding up interactions when you contact us.
Sending information and requesting feedback about our services.
Enabling access to conversation history to provide relevant advice.
Improving our service quality and offering better browsing solutions.
Preventing fraud and securing our website.
Contacting you via social media account.
Gathering statistics to improve services or offers and understand visitor behavior.
Developing new products, services, or enhancing features.
Analyzing data, studying trends, evaluating campaign effectiveness.

4. When we may share your data

We may share personal data with third parties such as authorized processors, accountants, transportation and courier companies, and companies providing payment services. The data controller is the main processor of personal data. For payment processing, necessary data will be transferred to the authorized processor.

We may share or transfer your personal data in the event of a business change such as ownership transfer, merger, asset sale, financing, or acquisition. You will be informed if your data becomes subject to another privacy policy.

We may share your data with partner companies, requiring them to comply with this Privacy Policy. This includes parent and subsidiary companies, joint venture partners, or affiliated companies.

We may share your data with business partners to offer specific products, services, or promotions.

We may disclose your data for other purposes with your consent.

We are obligated to disclose your personal data if required by law. In good faith, we may also disclose your data to fulfill legal obligations, protect our rights or property, prevent or detect illegal activity, and ensure the safety of our users.

5. Data retention

We retain your personal data only as long as necessary for the purposes stated in this Privacy Policy. We may retain and use your data as required to fulfill legal obligations, resolve disputes, and enforce legal agreements and policies.

Personal data are erased upon deleting the online shop’s customer account, except for the personal data (purchase history) which are necessary for accounting or to resolve consumer disputes. In the event of disputes regarding payments and consumer disputes, personal data are stored until the claim is settled or the limitation period expires.

We also retain log files for internal analysis purposes. These are usually kept for a short period, unless used to improve security, functionality, or if a longer retention period is required by law.

The personal data in original accounting documents is stored for seven years.

6. Children’s data

Our products and services are not directed to children under 13 years old, and we do not knowingly collect data from children under 13. If we suspect that we have collected data from a person under 13, we will delete it from our systems.

7. Customer rights to protect their data

If personal data are processed with the customer’s consent, the customer has the right to withdraw their consent by making relevant changes in the user account’s settings or by notifying customer support via e-mail info@barest.shoes. The customer can always opt out of communications and request their data be deleted from the databases. Requests for erasure are responded to within one month and the period of erasure is specified. The response to the request will also indicate which personal data will not be erased, on which legal basis and why.

You always have the right not to share your data with us, knowing that this may affect your experience on our website. We will never treat you unfairly for choosing not to share your data.

By providing us with personal information, you acknowledge that we collect, store, use, and disclose it in accordance with this Privacy Policy. You have the right to request details about the data we collect about you.

If we receive your personal data from a third party, we will protect it as described in this policy and in accordance with Estonian law. If you share third-party data, you confirm that you have permission to do so.

We may occasionally request information to confirm your identity. If you believe that any data we hold about you is inaccurate, outdated, incomplete, irrelevant, or misleading, please contact us via email at info@barest.shoes or phone at +372 5665 3131. We will take reasonable steps to correct any such data.

If you believe we have violated applicable data protection laws and wish to file a complaint, please contact us using the information in this document and provide details of the violation. We will promptly investigate and respond in writing, outlining the results and steps taken. You also have the right to contact a regulatory or data protection authority.

8. GDPR data protection rights

We want to ensure that you are fully aware of your data protection rights. Every user of our website is entitled to the following:

Right to access – You have the right to request copies of your personal data.
Right to rectification – You have the right to request correction of any inaccurate data, and completion of incomplete data.
Right to erasure – Under certain conditions, you have the right to request deletion of your personal data.
Right to restrict processing – Under certain conditions, you can request that we limit how your data is used.
Right to object to processing – Under certain conditions, you can object to the use of your data.
Right to data portability – Under certain conditions, you may request that we transfer collected data to another party or directly to you.

9. Data security

The security of your personal data is important to us, but please remember that no method of transmission over the Internet or method of electronic storage is 100% secure. While we do our best to protect your data, we cannot guarantee its absolute security.

Barest Shoes OÜ takes all reasonably necessary steps to ensure that your data is processed securely and in accordance with this Privacy Policy and Estonian law. Your data will not be transferred to any organization or country unless there is a legitimate reason and adequate security is guaranteed.

10. Direct marketing and processing of personal data

The e-mail address and telephone number are used to send direct marketing messages if the customer has consented to receiving such messages. If the customer does not wish to receive direct marketing messages, they should select the relevant link at the footer of the e-mail or contact customer support.

Where personal data are processed for direct marketing purposes (profiling), the customer has the right to object at any time both to the initial and further processing of their personal data, including profiling related to direct marketing, by notifying customer support thereof via e-mail (the respective information should be submitted clearly and separately from any other information).

11. Links to other websites

Our website may contain links to other websites not operated by us. If you click on a third-party link, you will be directed to that third party’s site. We strongly advise you to review the privacy policy of every website you visit.

We have no control over, and assume no responsibility for, the content, privacy policies, services, or practices of any third-party websites.

12. Resolution of disputes

Disputes concerning the processing of personal data are settled through customer support info@barest.shoes. The supervisory authority is the Estonian Data Protection Inspectorate (info@aki.ee).

13. Privacy policy updates

We may update this Privacy Policy when necessary. Upon updates, we will revise the date at the bottom of this document. If you continue to use our website after the policy has been updated, we will treat this as your acceptance of the changes.

Last modified: 29.10.2025