Valid from 27.10.2026.
This privacy policy explains how we process the personal data of users and customers of the nutikodulahendused.ee e-shop in accordance with the General Data Protection Regulation (GDPR) and the Estonian Personal Data Protection Act.
Data controller
- Indome OÜ, registry code 12260215
- Address: Aiandi tn 13/2, 12918 Tallinn, Estonia
- Phone: +372 6173381
- E-mail: liisu@nutikodulahendused.ee
What data we process
- Contact details: name, e-mail address, phone number.
- Delivery details: address or chosen parcel terminal.
- Order details: products purchased, prices, order and delivery history.
- Payment details: payment status and amount (we do not see card or bank details).
- Company details if you buy on behalf of a company: company name, registry code, VAT number.
- Customer account details if you create an account: username and encrypted password.
- Communication: messages, complaints and withdrawal notices.
- Technical data: IP address, browser type, cookies (see below).
Purposes and legal bases
- Accepting and fulfilling orders and customer communication – performance of a contract (GDPR Art. 6(1)(b)).
- Arranging delivery – performance of a contract.
- Processing payments and refunds – performance of a contract.
- Accounting and keeping invoices – legal obligation (GDPR Art. 6(1)(c), Estonian Accounting Act).
- Handling complaints and withdrawal notices – legal obligation and performance of a contract.
- Security and operation of the e-shop – legitimate interest (GDPR Art. 6(1)(f)).
Sharing data
We share data only to the extent necessary for the purposes above:
- delivery and courier service providers;
- payment service providers, including ESTO AS and banks;
- hosting and IT service provider: Veebimajutus;
- our accountant;
- suppliers, where necessary to handle a warranty claim;
- public authorities, where required by law.
We generally process data within the European Economic Area. If a service provider transfers data outside the EEA, we ensure there is a valid legal basis under the GDPR (e.g. European Commission standard contractual clauses or an adequacy decision).
Retention periods
- Order and accounting data (orders, invoices, payments): 7 years from the end of the financial year, as required by the Accounting Act.
- Other data (e.g. customer communication): as long as necessary for the purpose for which it was collected or to handle possible claims.
- Customer account: until the account is deleted.
- Cookies: according to each cookie’s lifetime (see below).
Your rights
- Access your data and receive a copy of it.
- Have inaccurate data corrected.
- Have your data erased unless the law requires us to keep it.
- Restrict processing.
- Object to processing based on legitimate interest.
- Receive your data in a machine-readable format (data portability).
- Withdraw consent at any time; this does not affect the lawfulness of earlier processing.
- Lodge a complaint with the Estonian Data Protection Inspectorate (Tatari 39, 10134 Tallinn, www.aki.ee).
To exercise your rights, write to liisu@nutikodulahendused.ee. We will reply within one month at the latest.
Cookies
Cookies are small text files stored on your device. We use:
- strictly necessary cookies required for the cart, login and security (e.g. WooCommerce session and cart cookies) – these do not require consent;
We currently do not use any analytics or marketing cookies. If this changes, we will update this privacy policy beforehand.
You can delete cookies at any time in your browser settings; if strictly necessary cookies are blocked, the cart and checkout may not work.
Security
We protect data with appropriate technical and organisational measures, including an encrypted connection (HTTPS) and restricted access.
Changes
We may update this privacy policy. The current version is always published on this page.