PRIVACY POLICY

Airsoft Companion (operating the Airsoft Companion brand) is committed to protecting the privacy of its users and customers. This policy describes the personal data we collect, how we use it and the measures we take to protect it, in accordance with the General Data Protection Regulation (GDPR — EU Regulation 2016/679).

The data controller is:
Airsoft Companion
Registry: 17301579
Registered office: Harju maakond, Tallinn, Kesklinna linnaosa, Tornimäe tn 5, 10145, Estonia
Email: contact@airsoft-companion.com

We collect the following categories of data:

• Identity: first and last name
• Contact details: email address, postal address (delivery/billing), phone number (optional)
• User account: identifier, hashed password, preferences (language, newsletter)
• Orders: purchase history, amounts, statuses
• Technical data: IP address, browser type, cookies, connection logs

Your personal data is collected and processed in order to:

• Create and manage your customer account
• Process, ship and track your orders
• Provide customer support and after-sales service
• Send marketing communications (newsletter) with your explicit consent
• Improve our site, products and services
• Comply with our legal obligations (invoicing, accounting, fraud prevention)

The processing of your data is based on:

• Performance of the sales contract (Article 6.1.b GDPR)
• Your consent for newsletter and marketing communications (Article 6.1.a GDPR)
• Legitimate interest of Airsoft Companion for service improvement and security (Article 6.1.f GDPR)
• Compliance with accounting and tax legal obligations (Article 6.1.c GDPR)

Your data may be shared with the following processors, acting on instructions from Airsoft Companion:

• Shopify International Limited (Ireland, EU) — catalog, orders, payment
• Supabase — database, authentication, EU hosting
• Brevo (France, EU) — transactional emails and newsletter
• Carriers and logistics operators — order shipping
• Website host (Lovable)

No data is sold, rented or transferred for commercial purposes to third parties.

Your data is hosted within the European Union by default. If a transfer outside the EU is necessary, it is governed by the European Commission's Standard Contractual Clauses (SCCs) or any other mechanism compliant with the GDPR.

Your personal data is kept for the duration necessary for the stated purposes:

• Account data: as long as the account is active, then 3 years after the last contact
• Order data and invoices: 10 years (accounting obligation)
• Newsletter data: until you withdraw your consent
• Technical logs: 12 months maximum

Under the GDPR, you have the following rights:

• Right of access to your personal data
• Right of rectification
• Right to erasure (right to be forgotten)
• Right to restriction of processing
• Right to data portability
• Right to object
• Right to withdraw your consent at any time
• Right to give post-mortem directives regarding your data

To exercise these rights: contact@airsoft-companion.com (proof of identity may be requested).

You may also lodge a complaint with the competent supervisory authority — in Estonia, the Andmekaitse Inspektsioon (AKI — aki.ee), or with the authority of your country of residence.

Our site uses cookies — small text files stored on your device — to operate and improve your experience.

Types of cookies used:

• Essential cookies: required for the site to function (session, cart, language preference, authentication)
• Analytics cookies: anonymised audience measurement and site improvement

You can configure your browser to refuse non-essential cookies; some features may then be limited.

Airsoft Companion implements appropriate technical and organisational measures to protect your data: TLS encryption of connections, secure password hashing, role-based access control (RBAC), database-level security policies (RLS), manual authentication token validation.

For any question regarding this privacy policy or the processing of your personal data:
Email: contact@airsoft-companion.com

This privacy policy may be updated at any time to reflect legal or service changes. The date of the last update is indicated below.