Privacy policy

Last updated: 26 October 2026

1. Who we are

Falconclaw OÜ (registry code 14656081), Saarma tee 18, Uuesalu, Harjumaa 75331, Estonia, runs falconclaw.eu and is the controller of the personal data described here. Our store runs on Shopify. For anything about your data, email contact@falconclaw.eu.

2. What we collect

Orders. Name, email, phone, billing and shipping address, what you buy, your order history and, if you have an account, its settings. Cards go through Shopify Payments: we see the card type, last four digits, expiry and billing name, never the full number or security code. For a bank transfer we see the payer's name, account and bank.

Export licences. If you buy dual-use equipment, such as a night vision device, for shipping outside the European Union, we must apply for an export licence. We then share your name, address, the goods and the stated end use with the Strategic Goods Commission at the Estonian Ministry of Foreign Affairs. For this we may ask how you intend to use the device.

Support. What you write to us by email, chat or contact form, and our answers.

Security. Your IP address and device data at checkout and on our forms, to stop fraud and abuse.

Browsing, only with your consent. If you accept analytics and marketing in our cookie banner, we record under a random visitor ID the pages and products you view, your searches and cart, the link that brought you here, your device, language and time zone, and your approximate location from a shortened IP address. Nothing is recorded on checkout or account pages. If you later give us your email (signup, checkout, a back-in-stock or cable request, a click in our email) and you accepted marketing, we link that history to it.

Microsoft Clarity, only with your consent. With analytics consent, Clarity shows us clicks, scrolls, heatmaps and session recordings. Text you type in forms is masked.

The Falconclaw Briefing. At signup: your email, country, date and time, the form and consent text you saw, and when you confirmed. With your consent, our emails carry a small image and tracked links that show whether you opened an email and what you clicked, so we stop mailing people who never read us.

From your consented browsing and your purchases we work out simple interest counts (products and categories you view most, your cart, country, time zone). They decide which products the Briefing shows you and when we send it. Nobody is refused anything and prices do not change. Object any time by unsubscribing or emailing us; we stop and delete the history and counts.

The monthly draw. Every confirmed subscriber is in it. We use your email, signup dates and country. A winner also gives name, shipping address, phone for the courier, confirmation of being 18 or older and (in Canada) the skill-testing answer. We publish a winner's first name and country only with consent, and keep the entry list, random seed and result to prove fairness. Rules: falconclaw.eu/pages/briefing-draw.

3. Why we use it, and on what legal basis

What we do	Legal basis (GDPR)
Orders, shipping, warranty, your account, service emails, back-in-stock notices, answers to your questions	Contract or your request (art. 6(1)(b))
Apply for export licences	Legal duty under the EU dual-use export rules (art. 6(1)(c))
Keep accounting records for orders and prizes	Legal duty under the Estonian Accounting Act (art. 6(1)(c))
Stop fraud and abuse of checkout and forms	Our legitimate interest in a safe store (art. 6(1)(f))
Measure store use (visitor ID, Clarity, signup panel test), link browsing to your email, tailor the Briefing	Your consent (art. 6(1)(a))
Send the Briefing and other marketing emails, measure opens and clicks	Your consent (art. 6(1)(a)); for existing customers and similar products, where the law allows, our legitimate interest in direct marketing (art. 6(1)(f)), which you can object to any time
Run the monthly draw	The draw rules (art. 6(1)(b))
Keep proof of your consent, and a do-not-email list after you unsubscribe	Legal duty to prove consent (art. 7(1), 6(1)(c)) and our legitimate interest in not emailing you again (art. 6(1)(f))
Answer authorities	Legal duty (art. 6(1)(c))

4. Who receives it

We share personal data only with providers that work for us, each getting only what its task needs: our store and checkout platform (Shopify), our email delivery service, our website analytics service (Microsoft Clarity), our accounting and inventory software, the AI service that drafts answers in our site chat, an IP-to-country lookup service, couriers, payment providers, and our own servers in Estonia. Some of these providers are in the United States; section 5 covers that. We also share data with the Strategic Goods Commission at the Estonian Ministry of Foreign Affairs for export licences (section 2), and with police, courts, tax and other authorities when the law requires it and on a valid legal request. We do not sell your personal data.

Shopify's own processing. The store is hosted by Shopify, which collects and processes personal information about your access to and use of the store to provide and improve its services. To help protect, grow and improve our business, we use certain Shopify enhanced features that use information about your interactions with our store, with other merchants and with Shopify. In these cases Shopify is responsible for that processing, including for answering your requests about it. See the Shopify Consumer Privacy Policy (https://www.shopify.com/legal/privacy/app-users) and use the Shopify Privacy Portal (https://privacy.shopify.com/en) to exercise your rights there.

Shopify can also support personalised advertising with third-party services based on your activity across merchants and websites. Depending on where you live, you can tell us not to share your data for this here: https://www.falconclaw.eu/pages/data-sharing-opt-out.

5. Transfers outside the EEA

Where data leaves the European Economic Area, we rely on an adequacy decision, the EU-US Data Privacy Framework where the provider is certified, or the European Commission's standard contractual clauses.

6. How long we keep it

Data	How long
Orders, invoices, payment records, export licence files, prize shipping documents	7 years from the end of the financial year (Estonian Accounting Act)
Customer account	Until you ask us to close it (the order records above stay)
Support messages	With the order they concern; other messages 3 years after the last one
Browsing data not linked to an email	30 days after your last visit
Browsing linked to your email	180 days, then only product counts
Product counts	While subscribed, at most 25 months after the last visit that fed them
Clarity recordings and heatmaps	recordings 30 days, aggregated statistics 13 months, at Microsoft
Signup email on our signup server	Up to 7 days, until our database collects it
Signups never confirmed	30 days after the 14-day confirmation link expires
Marketing contact data	Until you unsubscribe, or 3 years after your last order, click or reply, whichever comes first
Consent records	While you are subscribed, plus 3 years
Do-not-email list	For as long as we send email; if you ask us to forget you, only a scrambled (hashed) form of your address
Draw records	3 years after the draw

Unsubscribing deletes your linked browsing history and product counts at once.

7. Your rights and how to use them

You can ask us to show your data, give you a machine-readable copy, correct, delete or restrict it, or stop using it. You can object to direct marketing and the profiling behind it any time, without a reason, and we stop at once. Withdrawing consent does not affect what we did before. For Shopify's own processing, use the Shopify Privacy Portal (section 4).

Email contact@falconclaw.eu. We answer within one month, or tell you why a complex request needs up to two more. First we check it is you: write from the email address the data belongs to, or confirm a code we send there.

Records the law makes us keep (accounting, export licences) stay until their period ends. After deletion we may not find your purchase for a warranty claim.

You can complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee, info@aki.ee) or to the data protection authority where you live (list: https://edpb.europa.eu/about-edpb/about-edpb/members).

8. Visitors in the United States, Canada and Australia

United States. We do not sell personal data for money. We honour Global Privacy Control (GPC) as an opt-out of sale, sharing and targeted advertising for that browser, and our visitor tracking does not run. You can also opt out with the link in section 4 or by email, or through an authorised agent with your proof of authorisation. Using these rights never changes how we treat you.

Canada. Under Canada's Anti-Spam Legislation (CASL) we email marketing only with your express consent, or consent implied by a purchase (2 years) or an inquiry (6 months). Every email names us and has an unsubscribe link we act on within 10 business days. Sender: Falconclaw OÜ, Saarma tee 18, Uuesalu, Harjumaa 75331, Estonia, contact@falconclaw.eu, falconclaw.eu.

Quebec: our visitor ID and interest counts are profiling technology. They stay off until you switch them on in the cookie banner (Cookie preferences link at the bottom of every page).

Australia. If you think we mishandled your information, email contact@falconclaw.eu; we reply within 30 days. If not satisfied, complain to the Office of the Australian Information Commissioner (oaic.gov.au). Under the Spam Act 2003 our emails identify us and carry an unsubscribe link with no login or fee, acted on within 5 working days.

9. Children

Our store, the Briefing and the draw are for people aged 18 or older. We do not knowingly collect data from children. If you think a child gave us data, email contact@falconclaw.eu and we delete it.

10. Cookies

Cookies the store needs to work (cart, checkout, login, security) always run. Analytics and marketing cookies, including our visitor ID and Clarity, run only after you accept them in the cookie banner. Change your choice any time with the Cookie preferences link at the bottom of every page.

11. Changes

We date every change at the top of this page. If a change affects how we use data you already gave us, we tell Briefing subscribers before it applies.

12. Contact

Falconclaw OÜ, registry code 14656081, Saarma tee 18, Uuesalu, Harjumaa 75331, Estonia. Email: contact@falconclaw.eu.