Privacy

Privacy and Data Protection Terms

The data controller of personal data processed in the JahiKala online store (jahikala.ee) is JahiKala OÜ (registry code 17058908), address: Turu tn 41a, 50106, Tartu, Estonia, e-mail: info@jahikala.ee, phone: +372 5885 7020.

1. Personal data processed

The online store processes the following types of personal data:

• Name
• Phone number
• E-mail address
• Delivery address
• Bank account number (only required for refunds)
• Purchase and payment information (order history)
• Customer support information
• IP address and other network identifiers (e.g. browser and device information)
• Any additional information voluntarily provided by the user (e.g. order notes, survey responses)

When visiting the JahiKala website, data may also be collected automatically via cookies, device information, browser data or network connection metadata.

2. Purposes of processing personal data

Personal data is processed for the following purposes:

• Managing customer orders and delivering goods
• Analysing purchase history and customer preferences
• Processing invoices and payments, issuing refunds if necessary
• Providing customer support (order-related inquiries, dispute resolution)
• Sending newsletters and marketing offers with the customer’s prior consent
• Improving the website’s functionality and user experience (incl. statistics and analytics)
• Fulfilling legal obligations (e.g. accounting, consumer dispute resolution)
• Complying with lawful requests from authorities and fulfilling legal requirements

3. Legal basis for processing

Personal data is processed on the following legal bases:

• Performance of contract – order management, payments, customer support
• Legal obligation – accounting, resolving consumer disputes
• Legitimate interest – analysis of purchase behaviour, improving user experience, dispute handling
• Consent – sending newsletters and marketing communications

4. Transfer of personal data

Personal data may be transferred to the following service providers, only to the extent necessary:

• Transport service providers (Omniva, Itella, DPD, Smartpost): name, contact details, delivery address
• Payment service providers (Swedbank, SEB, LHV, Maksekeskus, PayPal): payment-related data
• Accounting service provider (data required for bookkeeping)
• Web hosting and IT service providers (technical functioning of the site)
• Customer support partners, if applicable

All processors are contractually obliged to ensure data security and confidentiality in accordance with GDPR.

5. Data retention

Upon closing a customer account, personal data is deleted unless required for accounting or consumer dispute resolution.

• Purchase and payment information is stored for 7 years (legal requirement).
• Customer support data is stored up to 3 years (limitation period).
• Marketing consent data is stored until consent is withdrawn.

6. Data security

Personal data is stored on servers hosted by Zone Media OÜ within the EU/EEA. Data may be transferred outside the EU only if an adequate level of protection is ensured (European Commission adequacy decisions or approved data transfer mechanisms).

JahiKala applies appropriate physical, organisational and technical measures to protect personal data from loss, alteration, unauthorised access or disclosure. Data is processed only by authorised persons in accordance with legal requirements.

JahiKala does not knowingly collect data from minors. If you discover that your child has created an account, please contact us at info@jahikala.ee and we will delete the data immediately.

7. Access, rectification and deletion of personal data

Customers can access and correct their data through their account or by contacting support (info@jahikala.ee).

• Consent-based processing (e.g. newsletters) can be withdrawn at any time.
• Customers have the right to request deletion, restriction, data portability, or object to processing.
• All deletion requests are answered within 1 month.

8. Direct marketing and newsletters

Marketing emails are sent only with prior consent. Every email includes an unsubscribe link, or removal can be requested at info@jahikala.ee.

9. Use of cookies

The online store uses cookies to ensure the best user experience, analyse traffic and show relevant advertising. Cookie settings can be adjusted in the browser.

Read more at: jahikala.ee/cookie-policy

10. Third-party services and links

The website may include third-party integrations (e.g. social media, analytics, payment providers). Use of these services is subject to the respective provider’s privacy policy.

11. Transfers outside the EU

Data is transferred outside the EU only under approved data protection mechanisms (adequacy decision, Standard Contractual Clauses, etc.).

12. Dispute resolution and supervision

Disputes related to data processing will be resolved via customer support: info@jahikala.ee.

Supervisory authority: Estonian Data Protection Inspectorate (info@aki.ee, www.aki.ee)

13. Shopify platform specifics

The JahiKala online store operates on the Shopify platform, which may process data outside the EU (e.g. Canada, USA) under approved mechanisms (Standard Contractual Clauses). Shopify may process device data, payment information, order data and analytics.

Shopify privacy policy: https://privacy.shopify.com/en
International transfers: https://www.shopify.com/legal/privacy/customers
To exercise rights related to Shopify-processed data: privacy@shopify.com