1. General Provisions
1.1. This privacy policy regulates the principles of collection, processing, and storage of personal data. Personal data is processed and stored by Survo OÜ (registry code 16807696, address: Suur-Patarei 20/3-10, Tallinn, 10415, Estonia; email: info(at)mypostpartum.ee; phone: +372 566 888 46), who is the controller of the personal data (hereinafter the controller).
1.2. For the purposes of this privacy policy, a data subject means the customer or another natural person whose personal data is processed by the controller.
1.3. For the purposes of this privacy policy, a customer means anyone who purchases goods or services on the controller’s website.
1.4. The controller observes the principles relating to personal data processing provided by legislation and processes personal data in a lawful, fair, and secure manner. The controller can demonstrate that personal data is processed in accordance with applicable legislation.
2. Collection, Processing, and Storage of Personal Data
2.1. Personal data collected, processed, and stored by the controller is obtained electronically via the website www.mypostpartum.ee and through email communication.
2.2. By sharing their personal data, the data subject grants the controller the right to collect, organize, use, and manage personal data for the purposes defined in this privacy policy. This applies to data shared directly or indirectly when purchasing goods or services.
2.3. The data subject is responsible for the accuracy, correctness, and completeness of the data submitted. Submitting knowingly false data constitutes a breach of this policy. The data subject must inform the controller of any changes immediately.
2.4. The controller is not liable for any damage resulting from the data subject’s submission of inaccurate or false data.
3. Processing of Customers' Personal Data
3.1. The controller may process the following personal data:
- Given name and surname
- Telephone number
- E-mail address
- Delivery address
- Payment method details (bank or card payment reference)
3.2. Additionally, the controller may collect public data about the customer from public registers.
3.3. Legal bases for processing:
- (a) Consent of the data subject
- (b) Performance of a contract
- (c) Compliance with legal obligations
- (f) Legitimate interests of the controller
3.4. Purposes and retention periods:
- Security and safety: as required by law
- Order processing: 3 years after purchase
- Operation of online store services: 3 years
- Customer management: 3 years
- Financial accounting: 7 years (as required by law)
- Marketing: 2 years from the last interaction or until consent is withdrawn
3.5. The controller may share personal data with processors, accountants, transport and courier services, and payment service providers. Payment-related data is transmitted to Maksekeskus AS.
3.6. The controller ensures the protection of personal data through technical and organizational measures, safeguarding against unauthorized access or processing.
3.7. Personal data is retained no longer than necessary for the purpose of processing, and for up to 7 years when required by law.
4. Rights of the Data Subject
4.1. The data subject has the right to access their personal data.
4.2. The data subject has the right to obtain information regarding the processing of their personal data.
4.3. The data subject has the right to rectify inaccurate or outdated personal data.
4.4. If processing is based on consent, the data subject may withdraw consent at any time.
4.5. To exercise these rights, the data subject may contact customer support at info(at)mypostpartum.ee.
4.6. Complaints regarding personal data handling can be submitted to the Data Protection Inspectorate (Andmekaitse Inspektsioon).
5. Final Provisions
5.1. This privacy policy is based on Regulation (EU) 2016/679 (GDPR), the Estonian Personal Data Protection Act, and other applicable Estonian and EU legislation.
5.2. The controller reserves the right to amend this policy. Any changes will be published on www.mypostpartum.ee and will take effect upon publication.