Privacy policy

1. Who We Are (Data Controller)

Bionobo® is operated by Follow The Plants OÜ, which acts as the data controller for personal data collected through this website and online shop.

Company: Follow The Plants OÜ
Trading name: Bionobo®
Country of registration: Estonia
Contact: hola@bionobo.com

2. What This Policy Covers

This Privacy Policy explains what personal data we collect, why we collect it, the legal basis for processing it, how long we keep it, who we may share it with and the rights you have under the General Data Protection Regulation (GDPR) and other applicable data protection laws.

3. What Data We Collect

Depending on how you use our website and services, we may collect:

Identity and contact data: name, email address, postal address and telephone number.
Account and profile data: information associated with your customer account and any optional information you choose to provide.
Order data: products purchased, order history, delivery information, returns and related transaction information.
Payment data: payments are processed through secure payment providers. We do not store complete payment card details ourselves.
Technical data: IP address, browser, device information and information about how you interact with our website.
Cookie and tracking data: information collected through cookies and similar technologies, including where applicable referral and affiliate attribution. See our Cookie Policy.
Communications: emails, customer service enquiries and other communications you send us.
Marketing preferences: information about whether you have chosen to receive marketing communications from us.

4. Why We Process Your Data and the Legal Basis

Purpose	Legal basis under GDPR
Creating and managing your account	Performance of a contract
Processing, fulfilling and delivering orders	Performance of a contract
Managing payments, returns and refunds	Performance of a contract
Invoicing, accounting and tax compliance	Legal obligation
Responding to customer enquiries	Performance of a contract and/or legitimate interests
Sending newsletters and promotional communications	Consent, where required
Website analytics and performance	Consent where required and/or legitimate interests where legally permitted
Managing referral and affiliate attribution	Legitimate interests and/or consent where required
Preventing fraud and protecting our website	Legitimate interests and/or legal obligation
Complying with applicable laws and regulatory requirements	Legal obligation

Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

5. How Long We Keep Your Data

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected.

Certain information may need to be retained for longer periods to comply with legal, accounting, tax or regulatory obligations, or where necessary to establish, exercise or defend legal claims.

When personal data is no longer required, we will delete or anonymise it in accordance with applicable law.

6. Who We Share Your Data With

We do not sell your personal data.

We may share personal data with trusted service providers where necessary to operate Bionobo and provide our services, including:

E-commerce, website hosting and IT providers.
Warehousing, fulfilment, logistics and delivery partners.
Payment processors and financial service providers.
Customer service and communications providers.
Analytics providers, where permitted and where required consent has been obtained.
Marketing, advertising, referral and affiliate technology providers, where permitted.
Professional advisers such as accountants, auditors and legal advisers.
Public authorities, regulators or law enforcement bodies where disclosure is legally required.

These providers are permitted to process personal data only for the purposes for which it has been provided and subject to applicable data protection requirements.

7. International Data Transfers

Some of our service providers may process personal data outside Estonia or the European Economic Area (EEA).

Where personal data is transferred outside the EEA, we use appropriate safeguards as required by GDPR. These may include an adequacy decision adopted by the European Commission, Standard Contractual Clauses or another legally recognised transfer mechanism.

8. How We Protect Your Data

We use appropriate technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure, loss or misuse.

These measures may include encrypted connections, access controls, secure payment processing and appropriate security measures used by our technology and service providers.

No online system can be guaranteed to be completely secure, but we take reasonable measures appropriate to the nature of the information we process.

9. Your Rights

Under the GDPR, depending on the circumstances, you may have the right to:

Access the personal data we hold about you.
Correct inaccurate or incomplete information.
Request deletion of your personal data.
Restrict the processing of your personal data.
Object to certain processing.
Receive certain personal data in a portable format.
Withdraw your consent at any time where processing is based on consent.
Lodge a complaint with a competent data protection supervisory authority.

To exercise your rights, contact us at hola@bionobo.com.

We will respond within the timeframe required by applicable data protection law, normally within one month of receiving a valid request. In certain circumstances, we may need to verify your identity before completing your request.

As our data controller is established in Estonia, you may lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon). If you live elsewhere in the European Union or EEA, you may also have the right to contact the competent supervisory authority in your country of residence.

10. Marketing Communications

If you have chosen to receive marketing communications from Bionobo, we may send you information about our products, offers, content and news.

You can unsubscribe at any time by using the unsubscribe link included in our marketing emails or by contacting hola@bionobo.com.

Unsubscribing from marketing does not prevent us from sending service communications necessary to manage your account or orders.

11. Cookies, Analytics and Referral Tracking

We use cookies and similar technologies to operate our website, understand how it is used and, with your consent where required, support analytics and marketing activities.

We may also use these technologies to remember referral or affiliate codes and correctly attribute orders to the partner, practitioner or affiliate who referred a customer.

For more information and to manage your preferences, see our Cookie Policy.