- Operator and seller
- ServiciosASP OÜ, trading as Urban Lab
- Estonian registry code
- 17551744
- Registered office
- Katusepapi tn 4/2, Lasnamäe linnaosa, Tallinn, Harju maakond, 11412, Estonia
- Telephone
- +372 5630 2380
- VAT number
- Not yet issued
- Website
- urbanlabshop.com
1. Who controls your data
ServiciosASP OÜ is the controller of personal data collected through Urban Lab. Privacy enquiries and requests may be sent through our contact page, by email at urbanshoplab@gmail.com, or by telephone at +372 5630 2380. No data-protection officer has been appointed because one is not currently required for the described processing.
2. Data we process
- Identity and contact details, including name, billing and delivery address, email and any telephone number entered at checkout or in the contact form.
- Contact-form messages and order, return, refund, invoice and customer-service communications.
- Account credentials in protected form and account preferences.
- Payment status, payment method identifiers and fraud signals supplied by Stripe; we do not receive full card details.
- Technical data such as IP address, browser, device, security logs and essential cookie identifiers.
- Information submitted through the online withdrawal form.
The contact form is processed by the self-hosted Contact Form 7 plugin and delivered by email. Urban Lab does not use the form to build marketing profiles.
3. Purposes and legal bases
- Contract: cart, checkout, payment, delivery, returns, accounts and customer support.
- Legal obligation: tax, accounting, product-safety, fraud and consumer-law records.
- Legitimate interests: securing the store, preventing abuse, defending legal claims and improving reliable operation, balanced against individual rights.
- Consent: only where specifically requested. Urban Lab currently uses no analytics, advertising pixels or newsletter.
4. Recipients and international transfers
Data may be shared only as needed with hosting and technical providers, Stripe and its banking/payment partners, delivery carriers, professional advisers and public authorities. Stripe may act as processor and as an independent controller for regulated payment, compliance and fraud-prevention purposes. Some providers may process data outside the EEA using an adequacy decision, the EU Standard Contractual Clauses or another lawful safeguard.
5. Retention
Order, invoice and accounting records are generally retained for seven years after the relevant financial year. Customer-service and withdrawal communications are retained for the period reasonably needed to resolve the matter and establish or defend legal claims. Account data is kept while the account remains active and is then deleted or anonymised unless law requires longer retention. Security logs and abandoned-cart data are retained only for proportionate operational periods.
6. Your rights
Subject to the GDPR and applicable exceptions, you may request access, correction, deletion, restriction, portability or object to processing based on legitimate interests. You may withdraw consent at any time without affecting earlier processing. We may need to verify identity before acting. You also have the right to complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) or your local EEA supervisory authority.
7. Automated decisions and children
Stripe and payment partners may use automated fraud checks. Urban Lab does not use personal data for advertising profiles. The store is not directed to children, and orders must be placed by an adult or with lawful guardian involvement.
8. Security and updates
We use reasonable organisational and technical measures designed to protect personal data. No online system is completely risk-free. Material changes to this notice will be published here with a revised date.
