Privacy policy

Privacy policy

Updated 30 October 2026.

Who is responsible for your data?

Thin King is operated by Gordito Works OÜ, Lai 9-15, 10133 Tallinn, Estonia, the controller of personal data used to operate this store. Contact us at contact@thinkingcardcase.com about privacy or your rights.

Information we use

We receive information you provide when ordering, contacting us or subscribing: your name, contact details, billing and delivery addresses, order and payment status, preferences and messages. Payment details are processed by the payment provider you choose. Our store and service providers also receive technical information such as IP address, browser and device information, pages visited, referral information and cookie identifiers.

Purposes and legal bases

We use information to process orders, arrange payment and delivery, handle returns and answer enquiries as necessary to perform a contract or take steps you request before purchase. We keep records to meet accounting, tax and other legal obligations. We rely on legitimate interests to secure and operate the store, prevent fraud and manage customer support, while considering your rights. Where consent is required, we obtain it for optional cookies, analytics, advertising and marketing messages.

Cookies and marketing choices

Essential cookies support functions such as the cart, checkout and security. Optional technologies may support analytics, personalisation, advertising and affiliate attribution. Where shown, use the cookie banner to accept, decline or manage optional purposes. You can also manage cookies in your browser; disabling essential cookies may affect store functions. Unsubscribe from marketing emails using their unsubscribe link, or contact us. Withdrawing consent does not affect earlier lawful processing.

Service providers and Shopify

We share relevant information with providers supporting hosting, payments, DHL delivery, invoicing, tax, customer support, translations, email and affiliate services, and with authorities where legally required. Shopify powers this store. Shopify Network Intelligence is enabled: Shopify may combine information from interactions with this and other stores to improve services, advertising and personalisation, subject to applicable privacy choices. See Shopify’s privacy policy for its processing and privacy options.

International transfers and retention

Providers may process information outside the European Economic Area, including in Canada and the United States. Where required, transfers must use appropriate safeguards, such as adequacy decisions or standard contractual clauses. Contact us for details relevant to your information. We retain data only as long as needed for the purposes described, including applicable accounting, tax, warranty and legal-claim requirements. A deletion request may not override mandatory recordkeeping.

Your rights

Depending on applicable law, you may request access, correction, deletion, restriction or portability, object to processing, and withdraw consent. Contact us using the details above; we may need to verify your identity. You can complain to the Estonian Data Protection Inspectorate or your local data protection authority. Where available, use the store’s data-sharing opt-out options for applicable advertising or sharing choices.

Changes

We may update this policy when our practices or requirements change. The date above identifies the current version.