Privacy policy
What personal data the Pengu KIDS shop processes, and why.
1. Controller
- Brand:
- Pengu KIDS
- Shop operator:
- Penguin OÜ
- Registry code:
- 12836146
- Address:
- Lehe tn 29-18, Tallinn, Harjumaa 11311, Estonia
- Email:
- shop@pengukids.com
- Phone:
- +372 5227 900
- Website:
- pengukids.com
2. Data we process
- Contact details: first and last name, email, phone (optional).
- Delivery details: chosen parcel locker or delivery address (street, city, postcode, country).
- Order details: products, sizes, quantities, amounts, discount code, notes.
- Payment status and payment reference. We never see or store card or bank details.
- Technical data: IP address, briefly, to prevent abuse.
- Only with your marketing consent: Meta cookie identifiers (_fbp, _fbc), the pages and products you view, products added to the cart, checkout start and completed purchases (product and size ids, quantities, prices, order amount in EUR, order-based event id), plus your IP address and browser information.
3. Purposes and legal bases
- Fulfilling your order, delivery and customer contact — performance of a contract.
- Accounting and tax — legal obligation.
- Shop security and fraud prevention — legitimate interest.
- Measuring and improving our Facebook and Instagram ads (Meta Pixel and Meta Conversions API) — your consent.
4. Processors and recipients
- Montonio Finance UAB — payment processing and shipping services.
- The parcel carrier you choose — delivering your parcel.
- Hosting and database provider — running the shop and storing data.
- Only with consent: Meta Platforms Ireland Ltd (Facebook, Instagram) — ad measurement. Meta may also process data in the United States under its own safeguards.
5. Meta Pixel and Conversions API
Meta tracking stays off until you press “Accept” in the cookie notice. If you reject, no Meta code loads and nothing is sent to Meta from your browser or from our server.
With consent, the Meta Pixel in your browser reports page views, product views, add to cart, checkout start and completed purchases. A purchase is also confirmed by our server to Meta (Conversions API) only after the payment is confirmed by Montonio, using the same event id so it is counted once. We never send Meta your name, email, phone, address, payment details or order access link.
You can withdraw consent at any time under in the footer. Tracking stops immediately, including server-side purchase reports not yet sent.
6. Retention
- Order and accounting data: 7 years, as required by the Accounting Act.
- Meta identifiers, IP address and browser information stored with an order: deleted once the purchase is reported to Meta or the order is not paid, at the latest after 7 days.
- Record of your cookie choice (random id, choice, time, notice version): up to 2 years.
- Meta cookie _fbp: up to 90 days in your browser. Meta keeps received data under its own policy.
7. Your rights
You may access your data, request correction or deletion, restrict processing, object, withdraw consent and receive your data in a portable form. You can complain to the Estonian Data Protection Inspectorate (www.aki.ee).
8. Security
Data is transferred over an encrypted connection (HTTPS). Only authorised people can access order data.
9. Cookies and browser storage
Essential (always on):
- Language preference cookie (pk_lang), 1 year.
- Cart contents and your cookie choice, stored in your browser’s local storage.
Marketing (only with consent): Meta Pixel cookies _fbp and _fbc.
We do not use analytics cookies. Change your choice: .
10. Contact
For privacy questions write to shop@pengukids.com or call +372 5227 900.
