This page is not legal advice. It is an honest, specific description of what this shop actually does — we recommend having it reviewed by a lawyer or data protection officer (DPO) before relying on it fully for compliance.
What data we collect
- Order and billing data — name, address, email, phone number and ordered products, collected via WooCommerce to fulfil your order.
- Cart and session cookies — WooCommerce uses cookies to remember what’s in your cart and keep you logged in. These are technically necessary and do not require consent.
- Language preference cookie — Polylang stores whether you prefer the Estonian- or English-language shop.
- Analytics data (e.g. Google Analytics) — only if you separately consent. No analytics tool is active in the shop today. If one is ever added, it will only run once you have chosen “Accept all” on the cookie banner, or enabled the analytics category individually.
Why we collect this data
- To fulfil your order and communicate with you about it.
- To meet accounting and tax record-keeping obligations.
- To keep the shop’s core functionality (cart, login, language choice) working.
- If an analytics tool is added: to understand and improve how the shop is used, based on consent only.
Legal basis
- Performance of a contract — for processing order and billing data, since this is necessary to fulfil your order.
- Legal obligation — for retaining accounting records for the period required by law.
- Consent — for analytics (and any future marketing) cookies, which you can give or withdraw at any time via the cookie banner.
How long data is kept
We keep order and billing data for as long as required under Estonian accounting and tax law (generally 7 years from the end of the financial year in which the accounting record was created). Cart and session cookies expire automatically at the end of the session or shortly after. The language-preference cookie and your cookie-consent record are stored in your browser until you delete them or change your choice.
Who data is shared with
Payments are processed by LHV for WooCommerce (LHV’s official payment plugin, built on EveryPay) — card details go directly to the payment processor and never pass through our servers. No other third parties currently receive your personal data. If an analytics tool (e.g. Google Analytics) is ever added, this page will be updated before it goes live.
Your rights
You have the right to access, correct or delete your data, restrict its processing, and object to processing, as well as the right to withdraw any consent you’ve given (e.g. for analytics cookies) as easily as you gave it — via the “Cookie settings” link in the footer. If you believe your data has been processed unlawfully, you have the right to contact the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, AKI).
Contact
For questions about data processing, please get in touch via the contact details on our website.