Privacy Policy

1. Data Controller

The data controller is:

  • Sparkhouse OÜ
  • Registry code: 17362807
  • Address: Tartu mnt 74, Tallinn, Estonia
  • Email: [email protected]

2. Collection of Personal Data

Sparkhouse OÜ processes the Buyer's personal data only for order fulfillment and customer service purposes.

2.1 Data Provided by the Buyer

  • Account data: name, email address, phone number
  • Order data: shipping address, billing address, payment information
  • Communications: inquiries and correspondence with customer support

2.2 Automatically Collected Data

  • Device information: IP address, browser type, operating system
  • Usage data: pages viewed, clicks, website usage patterns
  • Cookies: see our cookie policy

3. Purposes of Using Personal Data

We use your personal data for the following purposes:

  • Receiving and fulfilling orders
  • Delivering goods
  • Providing customer service
  • Preparing invoices and accounting
  • Fulfilling legal obligations
  • Developing the e-shop and improving user experience

4. Legal Basis

Processing of personal data is based on the following legal bases:

  • Contract performance: order processing and delivery
  • Legitimate interest: e-shop development, fraud prevention
  • Consent: sending marketing communications (only with Buyer's consent)
  • Legal obligation: obligations arising from accounting and tax laws

5. Disclosure of Personal Data to Third Parties

Personal data is not disclosed to third parties, except when necessary for order fulfillment (e.g., to the transport service provider).

Data may be disclosed to:

  • Transport companies: for delivery of goods
  • Payment service providers: for secure payment processing
  • By law: when required by applicable legislation

For payment processing, we use the service provider Montonio Finance OÜ (registry code 16553190), which processes personal data necessary for payment (name, payment amount, bank details) in accordance with their own privacy policy.

Sparkhouse OÜ does not sell or disclose personal data to third parties for marketing purposes.

6. Data Retention

  • Account data: until account deletion
  • Order data: according to accounting law requirements (7 years)
  • Marketing data: until consent is withdrawn

7. Your Rights

You have the right to:

  • Access: request information about your personal data
  • Rectification: request correction of inaccurate data
  • Erasure: request deletion of data
  • Restriction: request restriction of data processing
  • Portability: receive your data in a machine-readable format
  • Objection: object to data processing
  • Withdraw consent: withdraw given consent at any time

To exercise your rights, send a request to [email protected].

8. Data Security

Sparkhouse OÜ implements appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction.

9. Changes to Privacy Policy

Sparkhouse OÜ reserves the right to amend the privacy policy as needed and in accordance with applicable legislation. Changes are published on the e-shop website.

10. Contact and Complaints

For privacy-related questions, please contact us:

If you believe your rights have been violated, you have the right to file a complaint with the Estonian Data Protection Inspectorate ([email protected]).