Privacy policy

This document explains what personal data we collect, what we use it for and how long we keep it.

Data controller

The controller is the company named below. Registry code: [TO CONFIRM: registry code].

What we collect

• Contact form: name, e-mail address, phone number (if you enter one), the chosen topic and product, and your message.
• Newsletter: e-mail address.
• Reviews: the rating, an optional name, an optional e-mail address and a comment. The e-mail is never published; we use it only to confirm a purchase.
• Technical data: with a review we store a hash derived from your IP address so the same product cannot be rated repeatedly. The IP address cannot be recovered from the hash.
• When placing an order or issuing an invoice: name or company name, address, e-mail and, for companies, the registry and VAT numbers.

Why we use it

• To answer your enquiry and prepare a quote.
• To fulfil an order, issue an invoice and keep our books.
• To send the newsletter if you subscribed. You can unsubscribe at any time.
• To publish reviews after moderation.

Legal basis

Answering enquiries and fulfilling an order rests on entering into and performing a contract. The newsletter rests on your consent. Keeping accounting documents rests on a statutory obligation.

Retention

• Enquiries and reviews are kept while they serve a business purpose and are deleted on request.
• Accounting source documents (invoices) are kept for the statutory period: [TO CONFIRM: in Estonia the Accounting Act requires 7 years — confirm with your accountant].
• Newsletter addresses are kept until you unsubscribe.

Who we share it with

We do not sell data. We use processors acting on our behalf: web hosting and database, e-mail delivery, and [TO CONFIRM: accounting, courier, payment provider — list the partners you use].

Cookies

The site uses no advertising or analytics cookies. Your browser stores only your chosen colour theme (light/dark) and a note that you have already rated a product. The admin panel uses a session cookie required to sign in. If analytics or marketing scripts are added later, visitor consent must be collected first.

Your rights

• Ask what data we hold about you.
• Have inaccurate data corrected.
• Have data deleted where no statutory basis requires us to keep it.
• Withdraw consent (for example unsubscribe from the newsletter).
• Lodge a complaint with the Estonian Data Protection Inspectorate (aki.ee).

The simplest route is to write to the address below — we reply within a reasonable time.