FREE EU SHIPPING OVER €100 · FREE RETURNS
Privacy policy
Last updated: 27 September 2026
Who we are
The controller of your personal data is Q Equestrian OÜ (brand Mon Arc), registry code 17122977, Narva mnt 2-21, Tallinn, Estonia. Email: hello@monarceq.com. We have not appointed a data protection officer; write to the email above with any privacy question.
What we collect and why
| Purpose | Data | Legal basis (GDPR) | How long we keep it |
|---|---|---|---|
| Processing and delivering your order, returns and withdrawals, customer service | Name, email, phone, delivery and billing address, order details, messages you send us | Contract, Art. 6(1)(b) | Up to 3 years after the order (claims period) |
| Accounting and tax | Invoices and order records | Legal obligation, Art. 6(1)(c) (Estonian Accounting Act) | 7 years |
| Payment | Payment details are entered directly with Shopify Payments; we never see or store full card numbers | Contract, Art. 6(1)(b) | As required by the payment provider |
| Customer account (optional) | Email, name, addresses, order history | Contract, Art. 6(1)(b) | Until you delete the account |
| Newsletter | Email, and whether you open and click our emails | Consent, Art. 6(1)(a) | Until you unsubscribe |
| Security, fraud prevention and running the website | IP address, device and browser data, strictly necessary cookies | Legitimate interest, Art. 6(1)(f) | Short term, as set by the service |
| Statistics and marketing | Pages viewed, products viewed or added to cart, analytics and marketing cookies | Consent, Art. 6(1)(a) | Until you withdraw consent, at most 13 months |
You need to give us the data marked for orders, otherwise we cannot fulfil your order. Everything else is voluntary. We do not make decisions about you based solely on automated processing.
Who we share it with
We only share what each provider needs to do its job:
- Shopify (Shopify International Ltd, Ireland): shop platform, checkout, payments (Shopify Payments, with Stripe), customer accounts. Shopify may also use data from its merchants' stores, as an independent controller, to improve its services and for fraud prevention and advertising across its network; see the Shopify Consumer Privacy Policy.
- SmartPosti and its partner carriers: delivery of your parcel (name, address, phone, email).
- Klaviyo (USA): newsletter emails and, only with your consent, on-site behaviour.
- Adobe Fonts (Adobe, USA): delivers the fonts used on the site; your browser connects to Adobe's servers, which receive your IP address.
- Google (Gmail): our email inbox, if you write to us.
- Our accountant, and public authorities when the law requires it.
Some of these providers process data outside the EU/EEA (mainly in the USA). Such transfers rely on the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses; a copy of these safeguards is available on request.
Cookies
We use strictly necessary cookies that make the shop work (cart, checkout, security, remembering your cookie choice). They do not require consent.
With your consent we also use analytics and marketing cookies from Shopify and Klaviyo, which help us see how the shop is used and personalise our emails. These are only set if you click "Accept" in the cookie banner.
You can change or withdraw your choice at any time via Cookie settings (also in the footer of every page).
Your rights
You have the right to access your data, have it corrected or deleted, restrict or object to its processing, receive it in a portable format, and withdraw consent at any time (this does not affect processing that happened before). To unsubscribe from the newsletter, use the link in any email. To exercise your other rights, email us; we reply within one month.
You can also complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee, info@aki.ee) or the supervisory authority in your own EU country.
Changes
If we change this policy, we will publish the new version here with a new date.
