Privacy Policy
This privacy policy describes how SADU OÜ (registry code 17239627, Jaama 26a, Tartu, Estonia; "we") processes personal data on www.saduband.ee and in its web shop. The data controller is SADU OÜ, email info@saduband.ee.
1. What data we collect
We only collect data you provide yourself or that arises from using the site:
- Order data — name, email address, phone number, delivery method and address or parcel-machine choice, and the contents of your order.
- Newsletter signup — email address and language preference.
- Restock notifications — email address and the product you want to be notified about.
- Contact form — name, email address, topic and message.
- Cookies and usage data — see section 5.
We never see or store card or banking details — payment happens in the secure environment of our payment provider Montonio.
2. What we use data for
- Fulfilling and delivering your order — performance of a contract.
- Order-related messages (confirmation, tracking code) — performance of a contract.
- Accounting — legal obligation.
- Newsletter and restock notifications — your consent, which you can withdraw at any time.
- Answering enquiries — our legitimate interest.
- Site usage statistics — your consent (analytics cookies).
3. Who we share data with
We never sell or rent your data. We share it only with service providers needed to fulfil your order:
- Montonio Finance OÜ — payment processing.
- Delivery partners (e.g. Itella Smartpost, Omniva, DPD) — parcel delivery; we pass on your name, contact details and delivery destination.
- Email delivery service (Resend) — order confirmations and notifications.
- Hosting and analytics providers — running the site and usage statistics (the latter only with consent).
Where a provider is located outside the European Economic Area, appropriate safeguards are applied (e.g. the European Commission's standard contractual clauses).
4. Cookies
The site uses necessary cookies without which it does not work (e.g. shopping cart, language choice, cookie preference). Analytics and marketing cookies (e.g. Google Analytics) are loaded only with your consent. You can change your choice at any time via the "Cookie settings" link in the footer.
5. How long we keep data
- Order data — 7 years, as required by the Estonian Accounting Act.
- Newsletter data — until you unsubscribe; every email contains an unsubscribe link.
- Restock notifications — until the notification is sent, or until you ask us to delete it.
- Contact form messages — until the enquiry is resolved, as a rule no longer than 2 years.
6. Your rights
You have the right at any time to:
- access the data we hold about you;
- have inaccurate data corrected;
- have data erased where we have no legal obligation to keep it;
- withdraw consent (e.g. newsletter, cookies);
- restrict or object to processing;
- receive the data you provided in a machine-readable form.
To exercise these rights, write to info@saduband.ee. We reply within 30 days.
7. Complaints
If you believe we have violated your rights when processing personal data, you may lodge a complaint with the Estonian Data Protection Inspectorate (www.aki.ee, info@aki.ee).
8. Changes to this policy
We may update this policy from time to time. The current version is always published on this page.
