Privacy policy

Privacy & Data Protection Policy

JahiKala OÜ – Privacy & Data Protection Policy
Updated: 4 September 2026

1. Data Controller

The controller of personal data processed in the JahiKala.ee online store is:

JahiKala OÜ
Registration code: 17058908
Address: Turu tn 41a, Tartu, Tartumaa 50106, Estonia
Email: info@jahikala.ee
Phone: +372 5885 7020

2. Personal Data We Process

When you use our online store, we may process the following personal data:

• name;
• phone number;
• email address;
• delivery address;
• bank account number (only where needed for refunds);
• purchase and payment details, including order history;
• customer support information, including messages, requests and claims;
• IP address and other network identifiers, such as browser and device information; and
• any additional information you provide voluntarily, such as order notes, special requests or survey responses.

We may also collect certain information automatically through your device, browser, network connection and cookies when you visit our website.

3. Purposes of Processing

We process personal data for the following purposes:

• managing customer orders and delivering goods;
• analysing order history and customer preferences;
• processing invoices and payments, and issuing refunds where applicable;
• providing customer support, including order-related questions and dispute handling;
• sending newsletters and marketing offers where you have provided consent;
• improving website performance and user experience, including analytics and statistics;
• complying with legal obligations, including accounting and consumer dispute procedures; and
• responding to lawful requests from authorities or protecting legal rights in disputes.

4. Legal Basis for Processing

• Performance of a contract – for order fulfilment, payments and customer service;
• Legal obligation – for accounting and consumer dispute resolution requirements;
• Legitimate interests – for improving customer experience, analysing purchases and handling disputes; and
• Consent – for newsletters and marketing communications.

5. Sharing and Disclosure of Personal Data

We may share personal data with service providers only to the extent necessary to provide the service, including:

• delivery and logistics providers (e.g. Omniva, Itella, DPD, SmartPost): name, contact details and delivery address;
• payment service providers: payment-related data;
• accounting service providers, where necessary: accounting-related information;
• web hosting and IT service providers: technical data required to operate the website; and
• customer support service providers, where support is provided by a third party.

Processors are contractually required to ensure confidentiality and security in accordance with the General Data Protection Regulation (GDPR).

6. Data Retention

• customer account data is deleted after account closure, except where retention is required for accounting or disputes;
• purchase history and payment data is retained for the legally required period of 7 years;
• customer service communications are retained until claim limitation periods expire, up to 3 years; and
• marketing consent data is retained until consent is withdrawn.

7. Data Security

We apply appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised access or disclosure. Data is processed only by authorised persons.

8. Your Rights

• access your personal data;
• correct inaccurate data;
• request deletion where applicable;
• restrict processing;
• object to processing based on legitimate interests;
• request data portability; and
• withdraw consent at any time for consent-based processing.

Submit requests to info@jahikala.ee. We respond no later than within 1 month.

9. Direct Marketing and Newsletters

We send newsletters and marketing offers only with consent. Each message contains an unsubscribe option; you may also contact info@jahikala.ee.

10. Cookies

We use cookies to provide website functionality, analyse usage and, with consent, provide relevant advertising. More information and controls are in our Cookie Policy.

11. Third-Party Services and Links

Our website may contain links to or embedded third-party services. The relevant provider’s privacy policy may apply when you use them.

12. International Data Transfers

Personal data may be transferred outside the EU/EEA only where appropriate safeguards are in place, such as European Commission Standard Contractual Clauses or another lawful GDPR mechanism.

13. Shopify Platform

JahiKala operates on Shopify. Shopify and integrated providers may process device, payment, order and analytics data to provide checkout, fulfilment, website and analytics services. See Shopify Privacy and Shopify Customer Privacy.

14. Complaints and Supervisory Authority

Contact info@jahikala.ee. You may also contact the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), info@aki.ee.