This is a draft privacy policy under GDPR requirements. Before public launch it needs review by a lawyer and real company details.
Who processes your data
The data controller is [LEGAL ENTITY], registration number [REG. NUMBER], address [ADDRESS]. For data-related questions: hello@leolakids.ee.
What data we collect
- Contact details: name, e-mail, phone, delivery address.
- Order data: contents, amount, purchase history.
- Technical data: cookies, IP address, device information.
Why and on what basis
We process data to perform the contract (processing and delivering your order), to meet legal obligations (accounting, taxes), and on the basis of your consent (newsletter) or legitimate interest (security and service improvement).
How long we keep it
Order data is kept for the period required by accounting law. Newsletter data is kept until you withdraw consent.
Who we share it with
Data is shared only with service providers needed to fulfil your order: the payment provider and delivery services. We do not sell your data to third parties.
Your rights
You have the right to request access to your data, its correction or deletion, to restrict processing, to receive your data in a portable format, and to withdraw consent. To do so, write to hello@leolakids.ee. You may also lodge a complaint with the data protection supervisory authority.
Cookies
We use cookies to run the cart, to remember your chosen language and to store your choice on the cookie banner. Cookies are not used for analytics — see the section below. You can manage cookies in your browser settings.
Site analytics
We want to know which materials people actually read, so we keep visit statistics. They run on our own server (Burst Statistics) — the data is not sent to Google or any other external service and never leaves our infrastructure.
Statistics are collected without cookies: a visitor is represented by an anonymous hash that changes every day and cannot be traced back to you. We see the pages viewed, the referring source, the device type and an approximate location (country, sometimes city). We do not store your IP address, name or e-mail, and we do not link statistics to orders. If your browser has “Do Not Track” enabled, no statistics are collected at all.
The legal basis is legitimate interest: understanding which materials are useful to readers and keeping the site working.