Privacy Policy
Last updated: 12 September 2026
Sana Egbe respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store and protect your personal information when you visit our website, place an order, submit an enquiry, subscribe to our communications or otherwise interact with Sana Egbe.
This Privacy Policy applies to the website sanaegbe.eu and the services offered through it.
1. Who We Are
Sana Egbe is operated by:
Art Dress OÜ
Trading as Sana Egbe
Lastekodu tn 48
10113 Tallinn
Estonia
Email: info@sanaegbe.eu
Art Dress OÜ is the data controller responsible for the processing of personal data described in this Privacy Policy, except where a third-party service provider acts as an independent controller under applicable law.
2. Personal Data We Collect
The personal data we collect depends on how you interact with us.
When you place an order, submit an enquiry, subscribe to our communications or use our website, we may collect:
your first and last name;
email address;
telephone number;
billing and shipping addresses;
country or region;
order and purchase information;
products, sizes, colours, variations and other selections associated with your order;
payment method and transaction-related information;
communications, enquiries and correspondence with us;
newsletter subscription and marketing preferences;
IP address, browser type, device information and other technical information;
information about your interaction with our website, where permitted by applicable law and your cookie preferences; and
information reasonably necessary to prevent fraud, maintain website security and process transactions.
We aim to collect only personal data that is reasonably necessary for the relevant purpose.
3. How We Use Your Personal Data
We may use your personal data to:
process, manage and fulfil your orders and pre-orders;
arrange delivery of your purchases;
process payments, refunds and other transaction-related matters;
communicate with you about your order, pre-order, payment or delivery;
respond to enquiries and provide customer service;
manage returns, refunds, complaints or other after-sales matters;
send marketing communications where you have chosen to receive them;
maintain and improve the operation and security of our website;
detect and prevent fraud or misuse;
maintain appropriate accounting, tax and transaction records; and
comply with applicable legal and regulatory obligations.
4. Legal Bases for Processing
Where the General Data Protection Regulation (GDPR) applies, we process your personal data on one or more of the following legal bases:
Performance of a contract — where processing is necessary to enter into or fulfil a contract with you. This includes processing your order, accepting payment, arranging delivery and providing customer service connected with your purchase.
Legal obligation — where we need to process or retain information to comply with applicable accounting, taxation, consumer-protection or other legal requirements.
Legitimate interests — where processing is reasonably necessary for the operation, administration, improvement or security of our business and our interests are not overridden by your rights and interests.
Consent — where you have given us permission to process your data for a particular purpose, including certain marketing communications and non-essential cookies. Where processing is based on consent, you may withdraw that consent at any time.
5. Orders and WooCommerce
Our online store uses WooCommerce to manage purchases.
When you place an order, information necessary to process the transaction may be stored within our website’s order-management system. This may include your name, email address, telephone number, billing and shipping addresses, products ordered, order value, payment method and information relating to the status of your order.
We use this information to fulfil your purchase, provide customer service, maintain transaction records and comply with our legal obligations.
Customers may currently complete purchases using guest checkout without creating a customer account.
6. Payments
Payments made through our website are processed by third-party payment service providers, including Stripe.
When you make a payment, information necessary to process the transaction may be transmitted directly to the relevant payment provider. Payment providers may process information for purposes including payment authorisation, fraud prevention, security and compliance with financial or regulatory obligations.
Sana Egbe does not receive or store your complete payment-card details.
Payment providers process personal data in accordance with their own privacy policies and legal obligations.
7. Email Marketing and MailPoet
If you choose to subscribe to Sana Egbe marketing communications, we may use information such as your name, email address, subscription status and relevant communication information to send you news about:
new releases;
collections;
private launches;
products;
events; and
other Sana Egbe news and communications.
We currently use MailPoet to manage email subscriptions and marketing communications.
Subscription to marketing communications is voluntary.
You may unsubscribe at any time by using the unsubscribe link contained in our marketing emails or by contacting info@sanaegbe.eu.
Withdrawing from marketing communications will not prevent us from sending transactional or service communications that are necessary to process or fulfil an order, respond to an enquiry or otherwise perform a contract with you.
8. Cookies and Similar Technologies
Our website uses cookies and similar technologies.
Some cookies are necessary for essential functions such as website operation, security, shopping-cart functionality and checkout.
Where required by applicable law, non-essential cookies or similar technologies used for purposes such as analytics, functionality or marketing will be used in accordance with your consent choices.
You can manage applicable cookie preferences through the cookie-consent controls available on our website. You may also be able to control cookies through your browser settings.
Disabling certain necessary cookies may affect the functionality of the website, including shopping-cart or checkout functions.
9. Who We May Share Personal Data With
We do not sell your personal data.
We may disclose or make personal data available to service providers where reasonably necessary to operate our business and provide our services.
These may include:
website, e-commerce and hosting service providers;
payment processors;
email and communication service providers;
delivery, courier and logistics providers;
IT, security and technical service providers;
accounting and professional advisers;
legal advisers; and
government, regulatory, judicial or law-enforcement authorities where disclosure is required or permitted by law.
We seek to provide service providers only with personal data reasonably necessary for the service they perform.
10. International Transfers of Personal Data
Some of the service providers we use may process or store personal data outside Estonia or the European Economic Area (EEA).
Where personal data is transferred outside the EEA and applicable data-protection law requires safeguards, such transfers will be made using an appropriate lawful transfer mechanism.
Depending on the service provider and destination, these safeguards may include:
an adequacy decision adopted by the European Commission;
Standard Contractual Clauses approved by the European Commission;
participation in an applicable recognised data-transfer framework; or
another transfer mechanism permitted under applicable data-protection law.
11. How Long We Keep Your Personal Data
We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including the fulfilment of our contractual obligations and compliance with applicable accounting, taxation, consumer-protection and other legal requirements.
Our current WooCommerce retention configuration generally provides for:
Pending orders: up to 30 days after they are no longer required for processing.
Failed orders: up to 30 days after they are no longer required for processing.
Cancelled orders: up to 30 days after they are no longer required for processing.
Refunded orders: up to 96 months where necessary to maintain appropriate transaction and accounting records.
Completed orders: up to 96 months where necessary to maintain appropriate transaction and accounting records.
Certain transaction, accounting or tax information may need to be retained for a different or longer period where required by applicable law or where necessary for the establishment, exercise or defence of legal claims.
Under Estonian accounting requirements, relevant accounting source documents and records may be required to be retained for seven years, calculated in accordance with applicable law.
Marketing information may generally be retained until you unsubscribe, withdraw your consent or the information is otherwise no longer required. We may retain limited information necessary to ensure that an unsubscribe or objection to marketing continues to be respected.
12. Your Data Protection Rights
Subject to the conditions and limitations provided by applicable data-protection law, you may have the right to:
obtain confirmation as to whether we process your personal data and request access to it;
request correction of inaccurate or incomplete personal data;
request deletion of your personal data;
request restriction of processing;
object to certain processing based on legitimate interests;
object to direct marketing;
receive certain personal data in a portable format;
withdraw consent at any time where processing is based on consent; and
lodge a complaint with a competent data-protection supervisory authority.
Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
Some rights are not absolute. For example, we may be legally required to retain transaction or accounting information even after receiving a request for deletion.
To exercise your data-protection rights, contact:
We may need to request sufficient information to verify your identity before responding to certain requests.
13. Complaints
If you have concerns about how we process your personal data, we encourage you to contact us first at info@sanaegbe.eu so that we can address your concern.
You also have the right to lodge a complaint with the competent supervisory authority.
In Estonia, the supervisory authority is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon).
14. Security
We use appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.
We also use third-party providers for functions such as payment processing and website services that maintain their own security measures.
However, no electronic transmission or storage system can be guaranteed to be completely secure.
15. Children’s Privacy
Our online store is not intended for children to make purchases independently where they do not have the legal capacity to enter into the relevant transaction.
Where appropriate, purchases on behalf of minors should be made or authorised by a parent or legal guardian.
We do not knowingly use children’s personal data for direct marketing without an appropriate lawful basis.
16. Third-Party Websites and Services
Our website may contain links to websites, social-media platforms or services operated by third parties.
When you leave our website or interact directly with an independent third-party service, that third party may process your information according to its own privacy practices.
Sana Egbe is not responsible for the privacy practices of independent third-party websites or services.
17. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our website, services, technologies, business practices or legal requirements.
When we make changes, the updated version will be published on this page and the Last updated date at the beginning of the policy will be revised where appropriate.
We encourage you to review this Privacy Policy periodically.
18. Contact Us
For questions about this Privacy Policy, the personal data we hold about you or the exercise of your data-protection rights, please contact:
Art Dress OÜ
Trading as Sana Egbe
Lastekodu tn 48
10113 Tallinn
Estonia
Email: info@sanaegbe.eu