Privacy policy

The controller is Tradiora OÜ, registration number 17552761, trading as Biolabica. Privacy enquiries can be sent to the published operator contact at [email protected].

Depending on how you use the website, we may process account and contact details, billing and delivery details, order and payment-status data, support correspondence, wholesale-enquiry data, consent records and technical security logs.

We do not need your full payment-card details. Payment information entered into a payment provider's interface is handled under that provider's own security and privacy controls.

We process data to operate accounts and orders, confirm eligibility and delivery, provide customer support, meet legal and accounting duties, prevent abuse, secure the website, manage consent and improve services where a valid legal basis applies.

The applicable basis may include performance of a contract, steps requested before a contract, legal obligation, legitimate interests in secure and effective operations, or consent where required.

Data may be shared with providers that support hosting, ecommerce, payment, delivery, email, customer support, security, accounting and legal compliance. Each provider receives only the information needed for its role, subject to applicable contractual and legal safeguards.

If a provider processes data outside the European Economic Area, the controller will use an applicable transfer mechanism and safeguards required by data-protection law.

Data is retained only for as long as needed for the relevant purpose, legal obligations, security, dispute handling and the establishment or defence of claims. Different categories may have different retention periods.

Subject to applicable law, you may have rights to access, correct, erase or restrict personal data, object to certain processing, receive portable data, withdraw consent and complain to the competent supervisory authority. Withdrawing consent does not affect processing that was lawful before withdrawal.

We use proportionate technical and organisational measures intended to protect personal data. No internet service can guarantee absolute security, so customers should use secure devices and keep account access links confidential.

See the Cookie Policy for information about website storage, essential functions and consent choices.

The policy may be updated when services, providers or legal requirements change. The current version and effective date are published on this page.

Effective date

Oct 1, 2026