Privacy Policy

1. Introduction

Shopping Elegia respects the privacy of its users and is committed to protecting personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable legislation.

Shopping Elegia provides a digital platform bringing together independent stores, allowing consumers to browse products and purchase directly from identified merchants.

This Privacy Policy explains how personal data is collected, used, protected and retained in connection with the operation of the platform.

2. Data controller

The entity responsible for processing personal data relating to the management and operation of Shopping Elegia is:

Legal entity: Xolo Go OÜ - José Augusto Mendes Correia

Address: Paju tn 1a, 50603 Tartu, Tartu Maakond, Estonia

Privacy contact: comercial@elegia.studio

Each independent store is responsible for the personal data processing it carries out as part of its commercial activities, without prejudice to situations involving joint controllership or processing on behalf of another entity, depending on the actual roles performed.

3. Personal data collected

Depending on how the platform is used, the following personal data may be processed:

• Name and contact details.
• Billing and delivery addresses.
• Account registration and authentication information.
• Order details and purchase history.
• Communications submitted through the platform.
• Technical information required for operation, security and maintenance.
• User preferences and recorded consent choices.

Payment information is processed by the payment service providers used by the stores. Shopping Elegia does not need to store customers' complete bank card details.

4. Purposes and legal bases

Personal data is processed, according to the relevant purpose and legal basis, to:

• Create and manage user accounts and provide requested services, including contractual obligations.
• Enable order processing and the sharing of necessary information with selling stores to fulfil purchases.
• Maintain security, prevent misuse and ensure platform operation, based on applicable legitimate interests.
• Comply with legal and regulatory obligations.
• Send marketing communications where consent or another valid legal basis applies.

5. Sharing data with independent stores

When a customer makes a purchase, the information necessary to process the order is made available to the store responsible for the sale.

This may include identification, contact details, addresses, purchased products and information required for order management.

Each store must process the personal data it receives in accordance with applicable data protection legislation, using it only for legitimate purposes properly communicated to the customer.

Shopping Elegia does not sell users' personal data to merchants or third parties.

6. Service providers

To operate the platform, certain personal data may be processed by technology, hosting, security, communications and other service providers necessary for its operation.

Access to personal data is limited to what is necessary for each purpose, subject to applicable contractual and legal safeguards.

7. Data retention

Personal data is retained only for as long as necessary for the purposes for which it was collected, taking into account contractual relationships, statutory retention periods and the protection of legal rights.

The specific retention periods or criteria applicable to different categories of personal data will be made available by the relevant data controller.

8. Data security

Shopping Elegia implements appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration or improper disclosure.

Access to information is restricted to users, merchants and service providers who require the data to perform their respective functions.

9. Cookies

The platform may use cookies necessary for its operation, including authentication, session management and shopping cart functionality.

Non-essential cookies, including those used for advertising or analytics, are subject to user consent where legally required.

Specific information about the cookies used and the available management options should be consulted in the platform's Cookie Policy.

10. Your data protection rights

Under applicable law, users may exercise their rights of access, rectification, erasure, restriction of processing, data portability and objection, and may withdraw consent where processing is based on consent.

Requests concerning personal data processed by Shopping Elegia should be addressed to the privacy contact identified in this policy.

Requests concerning processing carried out independently by individual stores may be submitted directly to the relevant merchants.

Users also have the right to lodge a complaint with the competent data protection supervisory authority.

11. International data transfers

Where services involve transfers of personal data outside the European Economic Area, these transfers must comply with the mechanisms and safeguards established under the GDPR.

Information about international transfers actually carried out and the applicable safeguards will be made available to data subjects.

12. Changes to this policy

Shopping Elegia may update this Privacy Policy to reflect legal, technical or operational changes.

The updated version will be published on this page, together with the date of the latest revision.

13. Contact

For questions regarding privacy or personal data protection, please contact:

Shopping Elegia
Email: comercial@elegia.studio

Last updated: 2 November 2026