Data controller and contact

motli OÜ (FRAME), registry code 14735030, Paepargi tn 50/1, 11417 Tallinn, Estonia, is responsible for personal data processed through www.plateframes.eu. Contact info@plateframes.eu or +372 5503381 about privacy and data rights.

 

Data we use and why

Orders, delivery, returns and pre-contract enquiries: your name, email, telephone number, billing/delivery address, chosen parcel locker, ordered products, artwork or personalisation instructions, order number and payment status. The legal basis is performing a contract or taking steps you request before a contract (GDPR Article 6(1)(b)). Essential checkout details are needed to fulfil an order; optional design notes are voluntary. Do not upload unnecessary sensitive information or other people’s personal data.

Accounting, taxes and consumer complaints: invoices, transaction records and information needed to meet statutory duties, based on legal obligations (Article 6(1)(c)). Where a refund needs bank details, we request only what is necessary. We do not store full payment-card details.

Security and fraud prevention: IP address, browser/device information, access and error logs, and information necessary to investigate misuse, based on our legitimate interests in protecting the shop and customers (Article 6(1)(f)). We limit this processing to what is necessary and balance it against your rights.

Newsletters, optional analytics and advertising: contact details, consent choices and the events described below, based on consent (Article 6(1)(a)). Buying a product or reading this notice is not marketing consent. Refusing optional tracking does not prevent an order.

 

Service providers and recipients

Wix provides the shop platform, hosting, forms, checkout and related infrastructure. Its processing and international providers are explained at support.wix.com/en/article/list-of-wixs-sub-processors. Payment data is shared with the payment provider identified when you select a method at checkout; that provider has its own privacy notice and may also act as an independent controller.

Omniva (AS Eesti Post) and the relevant local delivery partner receive the name, address or locker, telephone number and other details necessary for delivery. Accounting, IT and legal advisers receive only the information required for their service. Authorities receive information where law requires it. We do not sell customer data.

 

Cookies and Meta advertising

Essential cookies support security, the cart, checkout and your privacy choices. Optional analytics and advertising technologies require your prior consent where the law requires it. Use the website’s cookie settings to accept or reject optional categories and change your choice later. Cookie lifetimes and categories are displayed in those settings where available. You can also delete cookies using your browser; doing so may remove your saved choices or cart.

The shop’s Meta Pixel and Conversions API integration is intended to measure advertising and shopping events, such as product views, cart additions, checkout and purchases, and to support relevant advertising on Facebook and Instagram. Subject to your advertising consent, event information may include page/product identifiers, event time, purchase value/currency, IP address, browser/device information and advertising identifiers. If advanced matching is enabled, contact details may be transmitted in hashed form to match events. Hashing is not anonymisation. Advertising measurement is optional and is separate from processing payment or delivering an order.

The recipient is Meta Platforms Ireland Limited and its service providers. Meta may associate events with your Meta account and use them under its own policy at facebook.com/privacy/policy. This can support advertising profiles. Server-side delivery through Conversions API is also subject to the relevant consent rules. You may withdraw advertising consent through cookie settings without affecting prior lawful processing.

 

International transfers

Wix, payment and advertising providers may process data outside the European Economic Area, including Israel and the United States. Transfers must use a valid GDPR mechanism, such as an applicable European Commission adequacy decision or Standard Contractual Clauses with any necessary supplementary safeguards. You can ask us for information or a copy of the relevant safeguards. Provider policies and Wix’s sub-processor list explain their destinations and mechanisms.

 

Retention

Accounting source documents and records required by Estonian accounting law are kept for seven years from the end of the relevant financial year. This does not mean every browsing event or delivery detail is retained for seven years. Order and claim information is kept as necessary to fulfil the order, handle consumer rights and establish or defend legal claims.

Routine customer-service correspondence is normally retained for up to 24 months after resolution. Security logs are normally retained for up to 12 months; incident-related information may be kept longer where necessary for investigation or claims. Marketing contact data is used until you unsubscribe; limited consent evidence and suppression information may be retained to demonstrate compliance and respect your opt-out. Cookie retention follows the relevant cookie settings and provider notices. Data is deleted or anonymised when no longer needed, subject to legal duties.

 

Your rights

Subject to GDPR conditions, you may request access, correction, deletion, restriction or portability and object to processing based on legitimate interests. You may withdraw consent at any time without affecting processing that was lawful before withdrawal. Unsubscribe from marketing emails using their unsubscribe link or email us. We may retain records that a legal obligation requires even after a deletion request.

Contact info@plateframes.eu. We may request proportionate verification of identity, without collecting unnecessary information. We normally respond within one month; a permitted extension of up to two additional months is explained within the first month. Requests are normally free, subject to the exceptions in GDPR.

You may complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), aki.ee, or the authority in your country of habitual residence, work or the alleged infringement.

 

Security and policy updates

We use appropriate technical and organisational safeguards and limit access to people and providers who need it. No online service can guarantee absolute security. Updates are published here with a new date; a policy update alone does not replace a required consent or change your existing rights.

Last updated: 10 October 2026.

​Logo uploads: Product File Upload by PURPLE processes uploaded artwork and associated product/order references so we can fulfil your personalised order. Upload only artwork you are entitled to use. Access is limited to fulfilling and supporting the order, and files are retained only as necessary for those purposes and any applicable claims.