Privacy Policy

XISTORE.EU has committed itself to protecting the privacy of customers and users. With this in mind, we have compiled these Privacy Policy principles that govern the collection, use, publication, transfer and storage of customer data. Our activities on the Internet comply with all applicable practices and the provisions of the relevant legislation of the European Union and the Republic of Estonia. Please take a few minutes and read our privacy policy.

Collection and use of personal data

Personal data is data that can be directly or indirectly referred to you as a private person, which XISTORE.EU collects in order to fulfill the terms of the contract concluded with a private person, or in order to contact him in the future, as well as to fulfill obligations arising from the law. XISTORE.EU forwards the personal data necessary for making payments to the authorized partner Maksekeskus AS.

We collect personal data of regular customers:

when you provide your contact details (including name, personal code, postal address, telephone number, e-mail address, preferred method of communication) on our website, or elsewhere (e.g. in a store);
when you use our website, from customer account information or using cookies;
when making a purchase or placing an order in our store or online store in the course of providing personal contact information or when saving data on consumer preferences (in some sections of the XISTORE.EU website, you may ask you to voluntarily submit personal data and personal information. The required personal data may include Your name, address, zip code, email address, telephone number and other data);
when applying for an installment plan.

Collection of other data

We also collect anonymized data, i.e. data that cannot be attributed to a specific person (gender, age, language preference, location).

In addition, we may collect aggregate data about the activities of customers in our stores and on the website. This data is collected and used so that we can provide customers with information that is more suitable for them, as well as to obtain information about which products, services and sections are of the greatest interest. In this Privacy Policy, aggregated data are considered anonymized data.

Use of collected personal data

We use the collected personal data to inform XISTORE.EU customers about new products, campaigns, and upcoming events. Customers who do not want to receive our newsletter or information about potentially interested in their products can at any time remove themselves from the address list of the target group.

In addition, we use the collected personal data to deliver goods and to fulfill our obligations to customers.

By agreeing to the terms of the Privacy Policy, the client grants XISTORE.EU the right to automated processing of his data. You can revoke your consent at any time, either on our website or by sending us a statement in a reproducible form in writing. The declaration or withdrawal of consent is not retroactive.

In order to better serve customers, XISTORE.EU has the right to provide information about individual users to third parties providing services to XISTORE.EU and bound by a non-disclosure agreement. Third parties, for example, are our business partners whose responsibilities include the delivery of goods purchased in the online store or the provision of installment services.

XISTORE.EU retains the personal data of the client until the termination of the loyal client agreement. The data that XISTORE.EU is obliged to retain by law (eg accounting data) is stored in accordance with the requirements established by law.

Changes to the collected personal data

The personal data collected for identification of the client and communication with him can be viewed, changed and supplemented on our website in the “My Information” section.

If your e-mail address changes (used as the username of the XISTORE.EU website), then please notify us about it, since the client himself cannot change this information.

Security of personal data

XISTORE.EU takes all precautions (incl. administrative, technical, and physical measures) to protect customers’ personal data. Only authorized persons have access to personal data for making alterations and processing the same.
If you suspect that your personal data are treated contrary to what is described in this Privacy Policy, or if there is any risk that your data have leaked to unauthorized parties, please notify us immediately. This is the only way that allows us to minimize any potential damages.

Customers have the right to demand termination of the processing of their data, ask about how their data are used, request that their data be transmitted in a commonly used format either to themselves or to a third party. In order to avoid misuse of customer data and rights, such requests may only be submitted in a format that makes it possible to identify the person submitting that request (signed digitally or personally at the company’s office). We have the right to respond to such requests within 30 days.
We regard a request to terminate processing of data as a request to terminate the loyal customer contract.


Any personal data that you provide while visiting and shopping in XISTORE.EU e-shop are considered confidential information.
The use of encrypted data transmission channel with banks guarantees that personal data and bank particulars of buyers are protected.

Terms and conditions of, and amendments to Privacy Policy
By starting to use our website or completing the loyal customer application you confirm that you have read these principles, terms and conditions, and agree with them. We reserve the right to amend the general terms and conditions of this Privacy Policy, if necessary, by notifying all loyal customers thereof, but we make our best effort to ensure that our Privacy Policy is kept updated and available for you on our website.
If you have any questions or concerns about the privacy policy or data processing, you are kindly asked to contact us at

You may always contact the Data Protection Inspectorate or a court to protect your personal data. The Data Protection Inspectorate is a national authority that may also be contacted for advice or assistance in matters concerning protection of personal data.