Privacy Policy

This policy applies to cyclesarc.shop. For the Cycles Arc app privacy policy, please visit cyclesarc.com.

Who we are

Kairoi Co. OÜ, registry code 17410529, Sakala tn 7-2, Kesklinna linnaosa, Tallinn, Harju maakond, 10141, Estonia, is the controller for the processing described here. Cycles Arc is a brand of Kairoi Co. OÜ.

The shop is not yet taking orders

It is worth being exact about this, because it decides most of what follows. This shop shows no prices and has no checkout. There is no basket, no account and no payment page, so no order, no shipping address and no payment detail has ever reached us through it. Card details in particular: we do not see them, do not process them and do not store them, because there is nothing here to pay with.

Where a page lets you keep a design you liked, that is held by your own browser on your own device. It never travels to us.

What we do collect

One thing: an email address, if you join the Cycles Arc sky letter or a waiting list — together with the page you joined from. Confirmation is double opt-in, so you receive one email asking you to confirm and nothing further is sent unless you do. The lawful basis is your consent and you may withdraw it at any time. The list is never shared, rented or sold, every message carries an unsubscribe link, and you may also simply ask us to remove you.

If you unsubscribe we keep your address on a suppression list and nothing else, indefinitely, because that is the only way to be sure we do not write to you again.

Anything else we hold about you is an email you chose to send us, and whatever you put in it.

Cookies

This shop sets no cookies. There is no analytics, no advertising, no tracking pixel and no third-party script on these pages — the fonts are served from our own server, so your browser talks to us and to nobody else. Nothing about your visit reaches a company we have not named here, and no profile of any kind is built.

If your browser remembers a preference for you — such as the day or night theme — it is held in your browser's own local storage, it never leaves your device, and it is not sent to us.

Where your data is held

Our mailboxes, our mailing list and our business records are held inside the European Economic Area. We make no transfer to a third country. Data is shared only with the providers that run the service, each acting on our instructions alone under a data processing agreement. We do not sell your data. We disclose it where the law requires — for example to a tax authority or a court.

How long we keep it

• Sky letter and waiting lists: until you unsubscribe.
• Suppression list: indefinitely, so that your refusal holds.
• Enquiry correspondence that does not become an order: 12 months.
• Accounting records: 7 years, as Estonian law requires.

Your rights

Under the GDPR you may ask for access to the personal data we hold about you and for its correction or erasure, withdraw a consent you gave, object to processing, ask us to restrict it, and ask for a copy of what you gave us in a portable form. Write to customersupport@kairoico.com and we answer within one month. You may also complain to a supervisory authority — in Estonia, where we are established, that is the Data Protection Inspectorate (Andmekaitse Inspektsioon).

When the shop opens

Everything Cycles Arc sells is a download or a subscription, so there will be no delivery address to hold and no parcel to track. What an order does need is an email address to deliver the file or the access to, and a record that the order happened.

Checkout will be operated by a merchant of record — a company that becomes the seller for your purchase, takes the payment, issues your invoice and accounts for the tax. That makes it a data controller in its own right rather than a processor acting for us: it holds your billing details under its own privacy policy, which is linked at checkout, and we never see or hold your card number. What reaches us from a sale is the order record and the address to deliver to.

Checkout will also set the cookies it needs to function — to hold your basket and complete a payment. Those are strictly necessary and are not analytics or advertising, and what is written above about these pages does not change: we do not track you, profile you or advertise to you.

This page is updated to say exactly what all of that involves, and to name the merchant of record, before the first order is taken rather than after, and the date below changes with it.

Last updated: 28 September 2026. Kairoi Co. OÜ — Sakala tn 7-2, Kesklinna linnaosa, Tallinn, Harju maakond, 10141, Estonia. Reg. No. 17410529.