Valid from 12.09.2026.
1. Data Controller
The data controller is Tarbekaubad OÜ, registration code 14204031, VAT number EE101999625. Customer service and returns address: Vee tn 2, Pärnu. Contact: jlind61@gmail.com, +372 5845 5584.
2. Data Processed
We may process name, email, phone number, billing and shipping address, order and payment data, customer account data, correspondence, and technical web usage data such as IP address, device and browser data, and cookie identifiers. Full credit card data is processed by the payment service provider and is not stored by Tarbekaubad OÜ.
3. Purposes and Legal Bases
- Performance of a contract: orders, payments, delivery, returns, customer account, and service.
- Legal obligation: accounting, tax accounting, consumer complaints, and requirements from authorities.
- Legitimate interest: fraud prevention, security, claim defense, and service operation analysis.
- Consent: marketing and non-essential analytical and marketing cookies.
4. Recipients of Data
Data may be transferred to the necessary extent to Shopify and its service providers, payment service providers, transport and parcel locker companies, IT and hosting service providers, accountants, and utilized marketing or analytics services. In cases required by law, data will be transferred to authorities.
When processing data outside the European Economic Area, protective measures permitted by applicable law will be used, such as an adequacy decision or standard data protection clauses.
5. Retention
Data is retained for the time necessary to fulfill the purpose or legal obligation. Accounting source documents and related data are generally retained for seven years. Customer service and contractual claim data are retained until the expiration of potential claims. Marketing data is retained until consent is withdrawn or unsubscribed.
6. Cookies
Essential cookies are used for the operation of the store, shopping cart, security, payment, and selections. Non-essential analytical, preference, and marketing cookies are used based on consent. Choices can be changed in the store's cookie settings and in the browser.
7. Marketing
Marketing communications are based on consent. You can unsubscribe via the link in the email or by writing to us. Service messages necessary for order fulfillment are not marketing.
8. Your Rights
Under applicable terms, you have the right to receive information and access your data, request rectification, erasure, or restriction, object to processing, receive your provided data in a portable format, and withdraw consent. Please write to jlind61@gmail.com. We will verify your identity if necessary.
A complaint can be submitted to the Estonian Data Protection Inspectorate.
9. Security and Changes
We implement appropriate technical and organizational measures. We may update the policy due to changes in services, technology, or legislation. The current version will be published on the e-shop.