Privacy policy

 

Last updated: 24 June 2026

Inspired to Flow OÜ operates the Inspired to Flow online store and website at inspiredtoflow.com, together with the related content, features, products and services referred to in this Privacy Policy as the “Services.”

This Privacy Policy explains how we collect, use, disclose, retain and protect personal information when you visit or use the Services, place an order, contact us, subscribe to marketing communications or otherwise interact with Inspired to Flow.

Inspired to Flow OÜ is the controller of the personal information described in this Privacy Policy, except where a service provider acts as an independent or joint controller as explained below.

Our online store is hosted by Shopify. Our products are produced and fulfilled through Printful and delivered with the assistance of shipping and logistics providers.

1. Personal Information We Collect

“Personal information” means information relating to an identified or identifiable person. It does not include information that has been anonymized so that it can no longer reasonably be linked to an individual.

Depending on how you interact with the Services, we may collect the following information.

Contact and delivery information

This may include:

  • your name;

  • email address;

  • billing and shipping addresses;

  • country or region;

  • telephone number, where provided or required for delivery; and

  • delivery instructions or other information you choose to provide.

Order and transaction information

This may include:

  • products and product options viewed, added to your cart or purchased;

  • order numbers and order history;

  • transaction dates and values;

  • billing information;

  • payment method, payment status and payment confirmation;

  • shipping and tracking information;

  • cancellations, refunds, replacements or complaints; and

  • communications relating to an order.

We do not directly receive or store your complete payment card number. Full payment card information is processed by Shopify and the applicable payment service provider. We may receive limited information such as the payment method, transaction identifier, payment confirmation or payment status.

Customer account information

Where customer account features are available and you choose to use them, we may collect:

  • your account identifier;

  • contact details;

  • saved addresses;

  • order history; and

  • account preferences.

Account authentication and related security functions may be managed by Shopify.

Communications

When you contact us, we may collect your contact details, the content of your message, information about your order or request, attachments you choose to provide and our subsequent correspondence with you.

Please do not send sensitive or confidential personal information unless it is necessary for us to assist you.

Marketing information

If you subscribe to marketing communications, we may collect your email address, subscription date and method, consent status, communication preferences, email delivery or engagement information and unsubscribe request.

Device, usage, analytics and advertising information

When you visit or use the Services, we and our service providers may collect information such as:

  • your IP address;

  • browser and device type;

  • operating system;

  • language and regional settings;

  • approximate location derived from your IP address;

  • cookie, device and online identifiers;

  • referring website or source;

  • pages and products viewed;

  • cart, checkout and purchase activity;

  • interactions with the Services or advertisements;

  • dates, times and duration of visits;

  • session information; and

  • technical, security and performance information.

This information may be processed through Shopify, Shopify Analytics, Shopify Network Intelligence, Google Analytics and Meta advertising and measurement technologies.

Sensitive personal information

We do not intentionally request or collect special categories of personal information, such as information concerning health, racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, biometric data or sexual orientation.

Please do not provide such information through the Services.

2. How We Collect Personal Information

We may collect personal information:

  • directly from you, when you place an order, create or use an account, contact us, subscribe to communications, manage your privacy preferences or otherwise provide information;

  • automatically, through cookies, pixels, tags, local storage, server logs, analytics tools and similar technologies;

  • from service providers, including Shopify, Printful, payment providers, shipping providers, analytics providers, advertising platforms and security providers; and

  • from advertising or business partners, where permitted by law, in relation to your interactions with our advertising or Services.

3. How and Why We Use Personal Information

We process personal information only where we have a valid legal basis.

To provide and fulfil the Services

We use personal information to:

  • accept and process orders;

  • process and confirm payments;

  • produce, package and fulfil products;

  • arrange shipping, tracking and delivery;

  • provide customer account features;

  • communicate with you about an order;

  • handle cancellations, refunds, replacements, complaints or delivery issues; and

  • otherwise perform our obligations to you.

The legal basis is the performance of our contract with you or taking steps at your request before entering into a contract.

Certain information, including your name, delivery address and payment information, is required to process and deliver an order. If you do not provide the necessary information, we may be unable to accept or fulfil your order.

To provide customer service

We use personal information to respond to questions, provide support, investigate and resolve product or delivery issues and maintain appropriate records of our communications.

Where the communication relates to an order, the legal basis is generally the performance of our contract with you. For general inquiries, we rely on our legitimate interest in communicating with customers and operating our business effectively.

To comply with legal obligations and protect our rights

We may process and retain information to:

  • comply with accounting, tax and consumer-protection requirements;

  • maintain legally required transaction records;

  • respond to lawful requests from authorities;

  • prevent or investigate unlawful activity;

  • enforce our terms and policies; and

  • establish, exercise or defend legal claims.

The legal basis is compliance with a legal obligation or our legitimate interest in protecting our business and legal rights.

To maintain security and prevent fraud

We use information to protect the security and integrity of the Services, authenticate transactions or accounts, prevent unauthorized access and detect or investigate suspected fraud or misuse.

The legal basis is our legitimate interest in maintaining secure Services, preventing fraud and protecting our rights and the rights of others. Some processing may also be necessary to perform our contract with you or comply with legal obligations.

To operate, analyse and improve the Services

We may use information to understand how the Services are used, identify technical problems, assess website and product performance and improve usability and customer experience.

For strictly necessary operation, maintenance and security, we rely on our legitimate interests.

We use non-essential analytics technologies in accordance with applicable consent requirements and the choices made through our cookie banner.

To send marketing communications

If you subscribe to marketing communications, we may use your email address to send occasional newsletters, product updates, collection announcements or other Inspired to Flow marketing communications.

The legal basis is your consent. You may withdraw consent at any time by using the unsubscribe option in an email or contacting us.

Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal. You may continue to receive non-promotional communications concerning an order, payment, delivery, account, security matter or customer-service request.

Where we use an email service provider, it may process your email address, consent status, communication preferences and delivery or engagement information on our behalf.

4. Cookies, Analytics and Advertising

We and our service providers use cookies and similar technologies, including pixels, tags, local storage and server-to-server measurement technologies.

Strictly necessary technologies

Some technologies are necessary to:

  • operate and secure the website;

  • maintain sessions;

  • remember basic selections;

  • enable the shopping cart and checkout;

  • authenticate users;

  • prevent fraud; and

  • provide features you request.

Where permitted by law, these technologies may be used without consent because the Services cannot function properly without them.

Analytics technologies

We use analytics to understand how visitors find and use the Services, assess website performance and identify areas that may be improved.

Google Analytics may process device, browser, session, page-view, interaction, approximate-location and similar analytics information.

Advertising technologies

Advertising technologies may be used to measure advertising performance, attribute visits or purchases to advertising campaigns, create advertising audiences and show advertising that may be more relevant to its audience.

We use non-essential analytics and advertising technologies in accordance with applicable consent requirements and the choices made through our cookie banner.

For visitors in the European Economic Area, the United Kingdom and Switzerland, our legal basis for using non-essential analytics and advertising technologies is consent.

You can accept, decline or manage non-essential technologies through the cookie banner and Cookie Preferences controls available through the Services. You may change or withdraw your choices at any time.

You may also control cookies through your browser settings. Blocking certain technologies may affect the functionality of the Services. Your choices generally apply to the browser and device on which they were made.

5. Shopify and Shopify Network Intelligence

Our store is hosted by Shopify, which processes personal information to provide services such as website hosting, ecommerce functionality, checkout, payments, customer accounts, analytics, security, fraud prevention and privacy-management tools.

Depending on the processing activity, Shopify may act as our processor or as an independent controller.

Information submitted through the Services is transmitted to Shopify and may be processed by Shopify and its service providers in countries other than your country of residence.

You can learn more in the Shopify Consumer Privacy Policy.

Shopify Network Intelligence

Shopify Network Intelligence is enabled for our store.

Shopify may use information about your interactions with our store, together with information from your interactions with Shopify and other Shopify merchants, to provide and improve enhanced services such as personalization, product search and recommendations, analytics, fraud prevention, advertising measurement and more relevant advertising.

For these enhanced services, Shopify may act as an independent controller and is responsible for its own processing.

Shopify’s use of information for non-essential enhanced services is subject to applicable privacy requirements and the choices made through our cookie banner and privacy controls.

You can learn more about Shopify’s processing and exercise applicable rights through the Shopify Privacy Portal.


Where available in your region, you may also opt out of processing that may be considered the sale or sharing of personal information or targeted advertising through our Data Sharing Opt-Out page.

6. Meta Advertising and Measurement

We use the Facebook and Instagram by Meta integration, including the Meta Pixel and Conversions API.

Subject to applicable law and your privacy choices, information may be transmitted to Meta for advertising, advertising measurement, conversion attribution, audience matching and related purposes.

Depending on the information you provide and your interactions with the Services, this may include:

  • your name;

  • email address;

  • telephone number;

  • general location or address information;

  • device, browser and online identifiers;

  • pages and products viewed;

  • search, cart and checkout activity;

  • purchase information; and

  • interactions with advertisements.

The Conversions API allows certain events to be transmitted between Shopify and Meta through server-to-server connections.

For certain processing involving Meta Business Tools, Inspired to Flow OÜ and Meta Platforms Ireland Limited may act as joint controllers. Information about the allocation of responsibilities is available in Meta’s Controller Addendum.

Meta may also process personal information for its own purposes under its own privacy policy.

7. How We Disclose Personal Information

We disclose personal information only where reasonably necessary for the purposes described in this Privacy Policy or where required or permitted by law.

We may disclose information to:

  • Shopify, to host and operate the Services, provide ecommerce and payment functionality, maintain security and provide enhanced services;

  • Printful and fulfilment partners, to produce, package, label, ship, track and deliver products and address production or delivery issues;

  • payment providers, to authorize and complete payments, authenticate transactions, prevent fraud and process refunds;

  • postal, courier and logistics providers, to deliver and track orders, including your name, delivery address, telephone number, email address, order reference and any necessary delivery instructions;

  • analytics and advertising providers, including Google and Meta, subject to applicable law and your privacy choices;

  • communication service providers, where needed to send messages, manage subscriptions or maintain consent and unsubscribe records;

  • technical and professional providers, including IT, hosting, security, accounting and legal-service providers; and

  • courts, regulators, tax authorities, law-enforcement bodies or other public authorities, where disclosure is legally required or reasonably necessary to protect legal rights.

Where providers act on our behalf, they may process information only for the relevant service and in accordance with applicable contractual and legal obligations. Some providers may act as independent or joint controllers for specified activities under their own privacy notices.

If Inspired to Flow OÜ is involved in a merger, acquisition, restructuring, insolvency, sale of assets or similar transaction, personal information may be disclosed or transferred as part of that transaction, subject to applicable legal safeguards.

8. Sale, Sharing and Targeted Advertising

We do not sell personal information in exchange for money.

However, some privacy laws define “sale,” “sharing” or “targeted advertising” broadly. Under those definitions, certain uses of advertising technologies, Shopify enhanced services or disclosures to advertising partners may fall within those terms.

Depending on where you live, you may have the right to opt out of:

  • the sale of personal information;

  • the sharing of personal information for cross-context behavioural advertising; or

  • the use of personal information for targeted advertising.

Where these rights apply, you can exercise them through the cookie banner, Cookie Preferences or the Shopify Privacy Portal.


You may also exercise applicable rights through our Data Sharing Opt-Out page.

A browser- or device-specific choice may need to be repeated if you use a different browser or device or delete your browser data.

9. International Transfers

Inspired to Flow OÜ is established in Estonia, but some of our service providers and their infrastructure are located in other countries.

As a result, personal information may be transferred to, stored in or processed outside Estonia, the European Economic Area, the United Kingdom or the country where you live.

Where required, appropriate transfer safeguards are used, such as:

  • an adequacy decision adopted by the European Commission or the relevant UK authority;

  • the European Commission’s Standard Contractual Clauses;

  • an applicable UK international data-transfer mechanism; or

  • another safeguard recognized under applicable law.

The privacy and data-protection laws of the destination country may differ from those in your country.

You may contact us at info@inspiredtoflow.com to request further information about the safeguards used for international transfers and, where available, a copy of the relevant safeguards.

10. Retention of Personal Information

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the Services, comply with legal obligations, maintain security, resolve disputes and establish, exercise or defend legal claims.

In particular:

  • order, invoice, payment and accounting records are generally retained for seven years from the end of the financial year in which the relevant transaction was recorded;

  • customer-service and order-related communications are retained for as long as reasonably necessary to resolve the matter, document the outcome and protect the rights of the parties;

  • customer-account information is generally retained while the account remains active, after which limited information may be retained where required for legal, accounting, security or dispute-resolution purposes;

  • marketing subscription information is retained until you unsubscribe or withdraw consent, after which limited information may be retained to ensure that your choice continues to be respected;

  • the Google Analytics property is configured with a 14-month data-retention setting for user-level and event-level data; this setting does not apply in the same way to standard aggregated reports; and

  • cookie and advertising information is retained according to the duration and settings of the relevant technology and service.

Information may be retained longer where required by law or necessary in connection with an ongoing complaint, investigation, dispute or legal claim.

When personal information is no longer required, we will delete it, anonymize it or restrict its use unless continued retention is required or permitted by law.

11. Security and Children’s Privacy

We use reasonable technical, organizational and administrative measures designed to protect personal information against unauthorized access, accidental loss, misuse, alteration, unauthorized disclosure and destruction.

However, no method of online transmission or electronic storage can be guaranteed to be completely secure. We cannot guarantee absolute security.

Please do not send unnecessary sensitive or confidential information through unsecured channels. If you use customer-account features, you are responsible for protecting access to your email account, device and authentication information.

The Services are intended for adults and are not directed to children. We do not knowingly solicit personal information from children.

If you believe that a child has provided personal information to us, please contact us so that we can review the matter and, where required, delete the information.

12. Automated Decision-Making

Inspired to Flow OÜ does not itself use solely automated decision-making to make decisions that produce legal effects or similarly significant effects concerning you.

Automated tools may assist with payment authentication, security, fraud-risk assessment, website functionality, recommendations, analytics and advertising measurement.

Payment, security and fraud-prevention providers may use automated systems under their own responsibility, including to authorize, review, delay or decline transactions. Their processing is governed by their applicable terms and privacy notices.

13. Your Privacy Rights

Depending on where you live and subject to applicable legal conditions and exceptions, you may have the right to:

  • request access to the personal information we hold about you;

  • request correction of inaccurate or incomplete information;

  • request deletion of personal information;

  • request restriction of processing;

  • receive certain information in a structured, commonly used and machine-readable format and request its transfer where applicable;

  • object to processing based on legitimate interests;

  • object at any time to direct marketing;

  • withdraw consent at any time where processing is based on consent; and

  • opt out of the sale or sharing of personal information or its use for targeted advertising where applicable.

Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

These rights are not absolute. We may retain or continue processing information where required or permitted by law, including for accounting, tax, fraud-prevention, transaction-record or legal-claim purposes.

You may exercise your rights by contacting us at info@inspiredtoflow.com or by using the applicable privacy controls available through the Services.

Where Shopify acts as an independent controller, you may exercise applicable rights through the Shopify Privacy Portal.

We may request information reasonably necessary to verify your identity and protect personal information against unauthorized disclosure. Where permitted by law, an authorized representative may submit a request on your behalf, subject to appropriate proof of authority.

We will respond within the period required by applicable law. We may decline or limit a request where permitted or required by law, including where we cannot reasonably verify identity, the request is manifestly unfounded or excessive, information must be retained under a legal obligation, or fulfilling the request would adversely affect the rights of another person.

You have the right to lodge a complaint with a competent data-protection authority. As Inspired to Flow OÜ is established in Estonia, our supervisory authority is the Estonian Data Protection Inspectorate.

If you live or work elsewhere in the European Economic Area, you may also contact the supervisory authority in your country of residence or work.

14. Third-Party Websites

The Services may contain links to websites, social-media services or other platforms operated by third parties.

When you follow a third-party link or interact with a third-party service, that party may collect and process information under its own privacy policy and terms.

We do not control and are not responsible for the privacy, security, availability, accuracy or practices of third-party websites or services. We encourage you to review their privacy information before providing personal information.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to the Services, service providers, technologies, processing practices or legal requirements.

The revised version will be published through the Services with an updated “Last updated” date. Where required by law, we will provide additional notice or request renewed consent.

16. Contact

For questions about this Privacy Policy, our privacy practices or the exercise of your privacy rights, please contact:

Inspired to Flow OÜ
Registry code: 17233524

Registered office address:
Pärnu maakond, Saarde vald, Kilingi-Nõmme linn, Pärnu tn 82-1, 86304, Estonia

Email: info@inspiredtoflow.com

Website: inspiredtoflow.com

Inspired to Flow OÜ is the controller of the personal information described in this Privacy Policy, except where another provider acts as an independent or joint controller as explained above.