Privacy policy

Privacy policy

Last updated: 5 October 2026

Who is responsible?

We Are Pop Culture is operated by SNR Society OÜ, registration number 17333898, Sepapaja tn 6, 15551 Tallinn, Estonia. We are responsible for the personal data we process for this store. Contact wearepopculture.club@gmail.com about privacy or your rights.

Data we use and why

We process contact and delivery details, order contents, payment status, customer-service correspondence and information you choose to provide. Technical information can include IP address, device/browser information, pages visited and cookie preferences. Payment providers process card details; we do not hold your complete card number.

  • Orders, delivery, returns and support: necessary to perform our contract with you.
  • Invoices, accounting and compliance: necessary to meet legal obligations.
  • Store security, fraud prevention and handling legal claims: our legitimate interests, balanced against your rights.
  • Optional newsletters and, where required, analytics or advertising tracking: your consent. You may withdraw it without affecting earlier lawful processing.

Who receives data?

Shopify provides the store platform and related infrastructure. Gelato and its production/logistics partners receive the data needed to print and deliver your order, such as the items, recipient and delivery/contact details. Payment providers selected at checkout receive the information needed for payment. Carriers, technical service providers and professional advisers receive information when necessary for their services or legal obligations. If we use optional analytics, advertising or email tools, the relevant data is shared only subject to applicable legal requirements and your consent where required. We do not assume that all orders are fulfilled from France.

International processing

Our service providers may process data outside your country or the European Economic Area. Where data-protection law requires a transfer safeguard, we rely on an applicable adequacy decision or appropriate contractual safeguards, such as European Commission standard contractual clauses. Contact us for information about the relevant safeguards.

Retention and security

We retain data only as long as needed for the stated purpose, applicable accounting/tax retention duties, limitation periods and dispute handling. Marketing information is kept while your subscription remains active or until you object or withdraw consent, subject to records needed to honour that choice. Cookie duration depends on the cookie and consent settings; it is not identical for every cookie. We apply appropriate organisational and technical safeguards and restrict access to people and providers who need it.

Your choices and rights

Depending on the applicable law, you may request access, correction, deletion, restriction, portability or object to processing. You may object to direct marketing at any time, use the unsubscribe link in emails, and change cookie choices through the site's cookie preferences. We may need proportionate information to verify your identity. Under the GDPR, we normally respond within one month; a permitted extension will be explained. You may complain to your local supervisory authority, including the Estonian Data Protection Inspectorate (AKI), CNIL in France or the ICO in the United Kingdom where applicable.

Cookies

Essential cookies support functions such as the basket, checkout and security. Optional analytics or marketing cookies are subject to the choices and consent required in your region. You can revisit the cookie settings link on the site and also manage cookies in your browser. Blocking essential cookies may affect checkout.

Updates

We may update this policy when the store's practices or legal requirements change. The update date appears above. Contact us if you have questions about a specific provider or processing activity.