Privacy policy
This Privacy Policy describes how your personal information is collected, used, and shared when you visit or make a purchase from naturalchaga.eu (the “Site”).
Privacy Policy
Last updated: 17 August 2026
Natural Chaga OÜ respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains what personal data we collect when you visit or purchase from naturalchaga.eu, why we use it, who we may share it with, how long we retain it and the rights available to you.
1. Who We Are
The data controller responsible for naturalchaga.eu is:
Natural Chaga OÜ
Kõrve, Pillapalu, Estonia, 74502
Registry code: 14486621
VAT number: EE102081273
Email: business@musheez.eu
Telephone: +372 55929479
2. Personal Data We Collect
Depending on how you use our website, we may collect:
-
your name;
-
billing and delivery address;
-
email address and telephone number;
-
order and purchase information;
-
limited payment and transaction information;
-
communications you send to us, including through website chat;
-
marketing preferences;
-
IP address, browser, device and technical information;
-
information about how you interact with our website, products and advertising; and
-
information used to help identify fraudulent or suspicious transactions.
We collect information directly from you when you place an order, create an account, contact us, subscribe to marketing or otherwise interact with us.
Some technical and usage information is collected automatically through Shopify and, where you have given the required consent, through analytics and advertising technologies.
3. How and Why We Use Your Personal Data
We process personal data only where we have a lawful basis to do so.
To process and deliver your order
We use your information to:
-
process purchases and payments;
-
confirm and manage orders;
-
arrange delivery;
-
communicate with you about your order;
-
process returns and refunds; and
-
provide customer service.
Our legal basis is normally that processing is necessary to perform our contract with you or to take steps at your request before entering into a contract.
To meet legal obligations
We may process and retain information where necessary to comply with obligations relating to accounting, taxation, consumer protection and other applicable laws.
Our legal basis is compliance with a legal obligation.
Customer service and communications
If you contact us by email, telephone or website chat, we use the information you provide to answer your enquiry and provide assistance.
Depending on the nature of the enquiry, our legal basis may be performance of a contract, steps taken at your request before entering into a contract, or our legitimate interest in providing effective customer service.
Our website may use Shopify's automated chat functionality to provide routine responses. We do not make decisions producing legal or similarly significant effects on you solely through automated decision-making.
Security and fraud prevention
We may use transaction, device and account information to identify possible fraud, misuse, security threats or suspicious transactions.
Orders identified as potentially suspicious are reviewed by a person before we make a decision to cancel or reject them.
Our legal basis is our legitimate interest in protecting our customers, our business and our website from fraud and misuse and, where applicable, compliance with legal obligations.
Marketing
If you choose to subscribe to our marketing communications, we may use your name and email address to send information about our products, news and offers.
Our marketing emails are currently sent using Shopify Email.
Where consent is required, our legal basis is your consent.
You can unsubscribe at any time by using the unsubscribe link in a marketing email or by contacting us.
Withdrawing marketing consent does not affect transactional messages that we need to send about an order you have placed.
4. Payments
Payments on naturalchaga.eu are processed using Stripe.
Stripe processes payment and transaction information required to complete your payment and may also process information for purposes including authentication, security, fraud detection and loss prevention.
Natural Chaga OÜ does not generally receive or store your complete payment-card number. We may receive limited information relating to the transaction, such as payment status, card type and limited card details.
Stripe processes personal data in accordance with its own privacy terms and applicable data-protection law.
5. Shopify
Our online store is hosted by Shopify.
Shopify processes personal data when you visit our store, interact with it or make a purchase in order to provide the ecommerce platform and related services to us.
We currently have Shopify Network Intelligence enabled.
When this functionality is enabled, Shopify may process information about interactions with our store together with information from interactions with Shopify and other Shopify merchants in order to provide enhanced services. These may include improved security, store performance, personalisation and advertising-related services.
No other Shopify merchant is given access to our customer data.
Some Shopify processing or service providers may be located outside your country or outside the European Economic Area. Where required, appropriate legal safeguards are used for international transfers.
Further information about how Shopify processes personal information and the rights available to you is provided in the Shopify Consumer Privacy Policy and the Shopify Privacy Portal.
6. Analytics and Advertising
Subject to your cookie and privacy choices, our website currently uses services including:
-
Google Analytics;
-
Google & YouTube services; and
-
Meta/Facebook & Instagram services.
These technologies may collect information about your device, browser and interaction with our website, such as pages viewed, products viewed or purchased and interactions with advertising.
We use this information to understand how our website is used, measure performance and, where applicable, measure or improve advertising.
Where these technologies require access to or storage of information on your device for analytics, advertising or personalisation, we rely on your consent.
You can manage your choices using the cookie/privacy controls available on our website.
Declining non-essential cookies does not prevent you from placing an order.
7. Cookies and Similar Technologies
Our website uses cookies and similar technologies.
Some are strictly necessary for the website, checkout, security and other essential functions to operate.
Other technologies may be used for:
-
analytics;
-
website performance;
-
personalisation; and
-
advertising and marketing.
Where required by law, non-essential technologies are not used until you have provided the necessary consent.
You can use our cookie banner or privacy-preference controls to choose whether to allow non-essential technologies and to change or withdraw your choices later.
Your browser may also allow you to block or delete cookies, although blocking essential cookies may affect website functionality.
8. Who We Share Personal Data With
We share personal data only where reasonably necessary to operate our business, fulfil your order or comply with law.
Recipients may include:
-
Shopify, which hosts and operates our ecommerce store and associated services;
-
Stripe, which processes payments;
-
DPD, FedEx or another delivery provider, where necessary to deliver your order;
-
Google, in connection with analytics and Google/YouTube services where applicable and permitted by your privacy choices;
-
Meta, in connection with Facebook and Instagram services where applicable and permitted by your privacy choices;
-
professional advisers, accountants and service providers who assist us in operating the business; and
-
public authorities or other persons where disclosure is required by law.
We do not sell customer lists or personal data to unrelated third parties.
9. International Data Transfers
Some of the service providers used to operate our store are international organisations and may process personal data in countries outside Estonia or the European Economic Area.
Where personal data is transferred internationally, we and our service providers use applicable lawful transfer mechanisms and safeguards as required by data-protection law. These may include European Commission adequacy decisions, Standard Contractual Clauses, Binding Corporate Rules or other recognised safeguards, depending on the recipient and destination.
10. How Long We Keep Your Data
We keep personal data only for as long as reasonably necessary for the purpose for which it was collected and to comply with our legal obligations.
In particular:
-
order, invoice and accounting information may need to be retained for at least seven years in accordance with Estonian accounting requirements;
-
customer-service correspondence is retained for as long as reasonably necessary to deal with the enquiry and any related legal or business requirements;
-
marketing information is normally retained until you unsubscribe or withdraw consent, subject to retaining limited information where necessary to record and respect your opt-out; and
-
technical, analytics and advertising information is retained according to the applicable service settings and consent choices.
A request to delete personal data therefore does not always mean that we can immediately delete every record relating to you. We may retain information where required by law or where another lawful basis for retention applies.
11. Your Data-Protection Rights
Subject to the conditions and exceptions provided by law, you may have the right to:
-
request access to personal data we hold about you;
-
ask us to correct inaccurate or incomplete data;
-
ask us to erase personal data;
-
ask us to restrict certain processing;
-
receive certain personal data in a portable format;
-
object to processing based on legitimate interests;
-
withdraw consent at any time where processing is based on consent; and
-
object to or obtain safeguards concerning certain forms of automated decision-making.
Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
To exercise your rights in relation to information controlled by Natural Chaga OÜ, contact:
We may need to verify your identity before fulfilling a request.
Where information is processed independently by Shopify, you may also be able to exercise relevant rights through the Shopify Privacy Portal.
12. Right to Complain
If you believe that your personal data has been processed unlawfully, you have the right to lodge a complaint with a data-protection supervisory authority.
Our supervisory authority in Estonia is the:
Estonian Data Protection Inspectorate
(Andmekaitse Inspektsioon)
You may also have the right to contact the supervisory authority in the EU/EEA country where you live or work.
We encourage you to contact us first at business@musheez.eu so that we have an opportunity to resolve your concern.
13. Children's Privacy
Naturalchaga.eu is not directed at children and our products are not marketed to children.
We do not knowingly seek to collect personal data directly from children through this website.
14. Security
We use reasonable technical and organisational measures, together with the security features provided by Shopify and our other service providers, to protect personal data against unauthorised access, loss, misuse or alteration.
No internet transmission or electronic storage system can, however, be guaranteed to be completely secure.
15. Changes to This Privacy Policy
We may update this Privacy Policy when our services, technology or legal obligations change.
The latest version will always be published on naturalchaga.eu and the date at the top of the policy will show when it was last updated.
16. Contact Us
For questions about this Privacy Policy or how we process your personal data, or to exercise a data-protection right, contact:
Natural Chaga OÜ
Kõrve, Pillapalu, Estonia, 74502
Email: business@musheez.eu
Telephone: +372 55929479