This Privacy Policy explains how CGI GROUP collects, uses and protects your personal data when you visit cgicorporate.com or place an order, in line with the EU General Data Protection Regulation (GDPR).
Data controller
The data controller responsible for your personal data is CGI GROUP OÜ (“CGI GROUP”, “we”, “us”), registered in Tallinn, Estonia. For any privacy question or to exercise your rights, contact us at contact@cgicorporate.com.
Information we collect
- Account information — if you create an account: your name, email address and password (stored securely).
- Order information — your name, billing and delivery address, email, phone (if provided) and order details.
- Payment information — processed securely by our payment providers. We do not store full card numbers on our servers.
- Technical information — IP address, browser type, device and usage data collected through cookies and similar technologies.
- Customer support — the content of messages you send us so we can help you.
Purpose & legal basis for processing
- To process and deliver your orders and manage your account — performance of a contract.
- To provide customer support and handle returns — performance of a contract / legitimate interests.
- To meet legal and accounting obligations — legal obligation.
- To send marketing or our newsletter — your consent, which you can withdraw at any time.
- To secure and improve our website — legitimate interests.
Service providers we work with
We share personal data only as needed to run our store, with providers acting on our behalf:
- Payment providers — to process your payments securely.
- Logistics & delivery providers — to deliver your order.
- Hosting provider — to host our website and store data securely.
We do not sell your personal data. A current list of the specific providers we use is available on request.
Analytics & marketing
Where we use analytics or advertising cookies, they are only activated with your consent through our cookie banner, and you can change your choice at any time. See our Cookie Policy for details.
Data retention
We keep personal data only as long as necessary for the purposes described here, including to meet legal, tax and accounting requirements. Order and invoice records are retained for the period required by applicable law.
International transfers
Your data is primarily processed within the European Economic Area (EEA). Where a provider processes data outside the EEA, we ensure appropriate safeguards are in place, such as the European Commission’s Standard Contractual Clauses.
Your GDPR rights
You have the right to: access your data; request correction; request deletion; request restriction of processing; data portability; object to processing; and withdraw consent at any time. To exercise any right, email contact@cgicorporate.com. You also have the right to lodge a complaint with your local data protection authority — in Estonia, the Data Protection Inspectorate (Andmekaitse Inspektsioon).
Security
We use appropriate technical and organisational measures to protect your data, including encryption in transit (HTTPS) and secure, access-controlled systems.
Children
Our store is intended for adults. We do not knowingly collect personal data from children under 16.
Updates to this policy
We may update this policy from time to time. The latest version will always be available on this page with its effective date.
CGI GROUP OÜ · Tallinn, Estonia · contact@cgicorporate.com