Privacy policy

Last updated: September 17, 2026

This website, rollermark.com, is operated by OÜ Piar (Piar OÜ), registry code 11485360, VAT EE101221432, Sära tee 1, 75312 Peetri, Estonia (“we”, “us”). We are the data controller for the personal data described below. You can reach us at order@rollermark.com or +372 644 3012.

When you choose a language or shipping country, we store your preferences in first-party cookies for up to one year. These preferences let us display the appropriate language and prices and send your selected country to checkout.

What we collect and why

• Order data. When you buy, checkout is processed by Shopify. We receive your name, email, shipping address and the items ordered so we can produce and ship your order. Payment card details go to the payment processor only — we never see or store them.
• Your designs. Cliché designs you create in the configurator — including any logo files you upload — are stored on our infrastructure so we can manufacture your cliché and send you a production proof. Designs added to the cart are stored even if you don’t complete the purchase; we use them to understand what customers want to make.
• Emails. If you subscribe to launch news, we store your email with our email provider (Resend) until you unsubscribe. Transactional emails (order proofs) are sent to the email from your order.
• Business enquiries and outreach. We may record a business contact’s name, role, company, public business contact details and professional profile link from company websites, public professional profiles or information you give us. We use this to assess whether RollerMark is relevant to a business, manage relevant business conversations and respond to requests. We also record replies and requests not to be contacted. We do not collect private profile content or use sensitive personal information for prospect selection.
• Campaign source. When you add an item from one of our campaign links, we attach the campaign, channel and creative labels to that cart item in Shopify so we can understand which campaigns lead to orders. We do not store your browsing history, click identifiers or the full referral URL for this purpose, and do not use cookies or browser storage for these labels.
• Technical data. Our hosting provider (Vercel) processes IP addresses and request logs to serve and secure the site. We use your country (derived from IP) to show prices in your currency. We do not currently load advertising pixels on this storefront.

Cookies and your choices

We use browser storage to keep your basket available. Shopify provides the cookie settings for our storefront and checkout. Use “Cookie settings” at the bottom of this page to review or change your choices for optional preferences, analytics and marketing cookies. Your choice is separate from subscribing to emails. Essential checkout and security functions remain available if you decline optional cookies.

Store analytics

When your cookie choices allow analytics, we send Shopify page and product views, cart views and successful additions to the cart. Shopify links these with checkout activity using visitor and session identifiers to help us understand visits, referring channels, devices, countries and where a purchase stops. Shopify also receives technical information such as your IP address and browser information. We use Shopify’s own analytics service; this does not subscribe you to marketing emails.

Storefront analytics excludes your uploaded artwork, design text, contact details and private design-link identifiers. We remove arbitrary URL parameters and keep only our approved campaign labels. Declining analytics stops these storefront events; you can change your choice in Cookie settings. This means our reports do not include every visit. Checkout orders remain available for fulfilling purchases even when optional analytics is declined.

Advertising measurement with Meta

We use Shopify’s Facebook & Instagram integration with Enhanced data sharing to measure advertising and improve relevant ads on Facebook and Instagram. Depending on the page and your consent choices, Meta may receive page and product views, searches, cart and checkout activity, purchase value and currency, and technical identifiers such as IP address, browser information and advertising click or cookie identifiers. Shopify can send purchase events from its servers using the Conversions API.

Advanced matching may also share your name, email, phone number if supplied, and address or location information with Meta to match activity to an account. We do not send your payment card number or uploaded logo artwork to Meta for advertising. Meta processes information under its Privacy Policy, including processing outside the EEA subject to applicable transfer safeguards.

Where consent is required, this advertising processing depends on your marketing consent. You can decline or withdraw optional consent using “Cookie settings” below or “Cookie preferences” at checkout and still shop. Withdrawal does not undo processing that already took place. You can also use our data sharing opt-out page or contact order@rollermark.com to exercise your rights.

Legal bases

Performance of a contract (producing and shipping your order), legitimate interest (site security, understanding product demand from saved designs and measuring the performance of our campaign links), and consent (optional store analytics, advertising tracking where required, and newsletters). You can withdraw analytics and advertising consent through Cookie settings and newsletter consent through the unsubscribe link.

We rely on legitimate interests for proportionate business-contact research and managing business enquiries. Where consent is required for a marketing message, we obtain it before sending. A publicly listed profile or accepting a connection request does not by itself give consent to marketing. You can object to direct marketing at any time by replying to our message or emailing order@rollermark.com.

Who processes data for us

Shopify (store analytics, checkout and orders), Vercel (hosting and file storage), Neon (database), Resend (email). Each acts as a processor under contract; some are located outside the EEA, in which case transfers rely on standard contractual clauses.

We use HeyReach to organise LinkedIn outreach and Smartlead to manage business email conversations. These services receive the contact and conversation data needed for the relevant channel. LinkedIn also processes activity on its platform under its own privacy terms. We do not add business prospects to our newsletter without their consent.

Shopify also describes its processing for checkout and its enhanced services in the Shopify Consumer Privacy Policy. You can exercise rights relating to Shopify’s own processing through its privacy portal.

Retention

Order data is kept as long as required by Estonian accounting law (7 years). Designs and uploaded logos are kept while your order is active so we can remake replacement clichés; ask us and we delete them. Newsletter data is kept until you unsubscribe.

We review inactive prospect records within 90 days and remove records that are no longer needed. If you opt out, we keep only the minimum contact identifier and opt-out record needed to prevent further marketing. Order and active enquiry records follow their respective retention purposes above.

Your rights

Under the GDPR you may request access, correction, deletion, restriction, portability, or object to processing — email order@rollermark.com. You may also complain to the Estonian Data Protection Inspectorate (aki.ee) or your local supervisory authority.