Privacy Policy

Last updated: 22 July 2026

1. Data controller

The controller responsible for personal data processed through zewer-tools.com is:

Zewer Tools Sales EU OY
Ansiotie 4, 21500 Piikkiö, Finland
Business ID / VAT number: FI32487634
Email: office@zewer-tools.com
Telephone: +358 44 230 6224

Zewer-tools.com serves customers within the European Union. Customers outside the European Union should use plumber-tools.com.

2. Personal data we collect

Depending on how you interact with us, we may collect:

• your name, company name and contact details;

• billing and delivery addresses;

• order, payment-status, delivery, return and purchase-history information;

• account information;

• customer-service enquiries and relevant correspondence;

• information and attachments you choose to provide;

• IP address, browser, device and website-usage information;

• cookie, analytics and advertising identifiers; and

• marketing preferences and consent records.

Payments are processed by payment-service providers. We do not ordinarily receive or store complete payment-card details.

Please do not send passwords, complete payment-card information, medical information, government-identification documents or other sensitive information unless specifically requested for a lawful and necessary purpose.

3. Purposes and legal bases

We process personal data for the following purposes and legal bases:

• Orders and enquiries: to provide product information and process, deliver and support orders under Article 6(1)(b) GDPR.

• Legal compliance: to meet accounting, taxation and other legal obligations under Article 6(1)(c) GDPR.

• Customer service and security: to respond to customers, protect transactions, prevent misuse and operate a secure service under Article 6(1)(b) and Article 6(1)(f) GDPR.

• Analytics: to understand and improve website use, based on consent under Article 6(1)(a) GDPR where non-essential cookies or tracking technologies are involved.

• Advertising: to measure advertising performance and conversions, based on consent under Article 6(1)(a) GDPR where required.

• Marketing: to provide consent-based marketing under Article 6(1)(a) GDPR or as otherwise expressly permitted by applicable law.

Our legitimate interests include providing effective customer support and maintaining a secure and reliable ecommerce service.

You may withdraw consent at any time. Withdrawal does not affect processing that was lawful before withdrawal.

4. AI-assisted customer support

We use an AI service to assist our staff in preparing replies to customer enquiries.

Relevant parts of an enquiry and previous correspondence may be processed for this purpose. We minimise the information submitted and exclude unnecessary personal information wherever reasonably possible.

The AI service prepares proposed text for staff review. It does not independently send emails or make decisions concerning orders, payments, refunds, warranties or customer rights. A member of staff remains responsible for the response and any resulting action.

Information submitted through the AI service is not used to train the provider’s models by default. Under the provider’s standard API controls, submitted information may be retained for safety and abuse monitoring for up to 30 days, unless longer retention is legally required.

The legal basis is Article 6(1)(b) GDPR where the enquiry concerns a purchase or proposed purchase and Article 6(1)(f) GDPR, our legitimate interest in providing efficient and consistent customer support, in other cases.

The service does not make solely automated decisions producing legal or similarly significant effects within Article 22 GDPR.

5. Recipients

We disclose personal data only where necessary to:

• payment providers;

• website, ecommerce, hosting, email and security providers;

• customer-support and operational service providers;

• AI technology providers;

• • analytics, advertising and server-side tagging providers, including Google Analytics, Meta and Stape.io, subject to your consent;

  • couriers and delivery providers;

• accountants, professional advisers and insurers; and

• public authorities where disclosure is legally required.

Processors may use personal data only for the relevant service and subject to applicable confidentiality and data-protection obligations.

6. International transfers

Some service providers process personal data outside the European Economic Area.

Where a receiving country is not covered by an adequacy decision under Article 45 GDPR, we use an appropriate safeguard under Article 46 GDPR, such as the European Commission’s Standard Contractual Clauses, together with additional safeguards where required.

You may contact us for information about the safeguards applicable to your personal data.

7. Cookies, analytics and advertising

We use essential cookies required for website security, shopping-cart operation, account functions and checkout.

Subject to your consent, we also use:

• Google Analytics to measure website use and performance;

• Meta Business Tools, including the Meta Pixel and Conversions API, to measure advertising performance and conversions; and

• Stape.io to operate server-side tagging that routes authorised analytics and conversion events to services such as Google Analytics and Meta.

Depending on your consent choices and the configuration of these services, they may process online identifiers, cookie identifiers, IP-derived information, browser and device information, pages viewed, referral information, order or conversion events and interactions with the website.

Stape’s server-side processing does not override your cookie choices. Analytics and advertising events requiring consent are not intended to be collected or forwarded unless the required consent has been obtained.

You can accept, reject or customise non-essential cookies through the cookie banner and change or withdraw your choices through the website’s cookie-preference controls.

Withdrawal does not affect processing that was lawful before withdrawal.

8. Retention

We retain personal data only for as long as necessary for the relevant purpose or legal requirement.

Generally:

• order, invoice and accounting records are retained for seven years or as otherwise legally required;

• customer accounts and customer-service correspondence are retained while needed to provide the service and ordinarily for up to two years afterwards;

• marketing information and consent records are retained until you unsubscribe, withdraw consent or the information is no longer required;

• analytics and advertising information is retained according to the settings and retention periods applied within the relevant service;

• security records are retained for a proportionate period; and

• information processed through the AI service may be retained by that provider for safety and abuse monitoring for up to 30 days.

Information may be retained longer where required for a legal claim, investigation or mandatory legal obligation.

When a retention period expires, information is deleted or anonymised unless continued retention is legally required.

9. Your rights

Subject to applicable conditions, you have the right to:

• • access your personal data;

  • correct inaccurate or incomplete information;

  • request erasure;

  • request restriction of processing;

• object to processing based on legitimate interests;

• receive applicable data in a portable format;

• withdraw consent at any time;

• object to direct marketing; and

• complain to a competent supervisory authority.

Legal obligations may require us to retain certain order, accounting or transaction records despite a deletion request.

To exercise a right, email office@zewer-tools.com with the subject Data Protection Request. We may need to verify your identity.

We will respond without undue delay and ordinarily within one month. This period may be extended where permitted by Article 12 GDPR.

10. Security

We use proportionate technical and organisational measures intended to protect personal data against unauthorised access, alteration, disclosure, loss or destruction.

No internet-based system can guarantee absolute security.

11. Children

Our products and services are intended for professional and business users and are not directed to children.

If you believe a child has provided personal data improperly, please contact us.

12. Complaints

You may contact us at office@zewer-tools.com.

You also have the right to complain to:

Office of the Data Protection Ombudsman, Finland
https://tietosuoja.fi/en/

You may alternatively contact the supervisory authority where you ordinarily live or work or where you believe an infringement occurred.

13. Changes to this Policy

We may update this Policy when our processing, service providers or legal obligations change.

The current version and update date will be published on this page.