Privacy policy
Data controller
Elu Hea OÜ (registry code 16051407), trading as Findlark, is the controller of the personal data described in this policy. Contact for privacy matters: info@findlark.com
What we collect
- Order data: name, delivery and billing address, email address, phone number, order contents and order history.
- Payment data: payment is handled by our payment providers. We receive confirmation of payment and the last digits and type of card. We never see or store your full card number.
- Technical data: IP address, device and browser type, pages viewed and referring site, collected through cookies and similar technologies.
- Marketing data: your email address and consent status, if you subscribe.
Why we use it and on what legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Processing and delivering your order | Performance of a contract (Art. 6(1)(b)) |
| Customer support and handling returns | Performance of a contract |
| Accounting and tax records | Legal obligation (Art. 6(1)(c)) |
| Fraud prevention and store security | Legitimate interests (Art. 6(1)(f)) |
| Analytics to improve the store | Consent, via the cookie banner (Art. 6(1)(a)) |
| Marketing emails | Consent (Art. 6(1)(a)) — withdrawable at any time |
Who we share it with
We share data only with processors who help us run the store:
- Shopify Inc. — e-commerce platform and hosting
- Payment providers — to process payments
- Shipping carriers and our fulfilment partner — to deliver your order
- Email and analytics providers — where you have consented
Some of these providers process data outside the European Economic Area. Where that happens, transfers are protected by the European Commission's Standard Contractual Clauses or an adequacy decision.
How long we keep it
Order and accounting records are kept for 7 years, as required by Estonian accounting law. Marketing data is kept until you unsubscribe. Analytics data is kept for up to 26 months.
Your rights
Under the GDPR you have the right to access your data, to have it corrected or erased, to restrict or object to processing, to data portability, and to withdraw consent at any time. To exercise any of these, email info@findlark.com. You also have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee).
Cookies
We use cookies that are strictly necessary to operate the store, and — only with your consent — analytics and marketing cookies. You can change your choice at any time through the cookie settings link on our site.
Children
Our store is not directed at children under 16 and we do not knowingly collect their personal data.