Privacy policy

Last updated: 19 September 2026

Data controller

The controller of personal data for the online store duovida.ee is LAL OÜ (registry code 17469439, Luha 28, 10131 Tallinn, Estonia, email info@duovida.ee). The store runs on the Shopify platform, which processes data as our processor.

This privacy policy describes what personal data we collect, why we use it, who we share it with and what your rights are. We process data in accordance with the General Data Protection Regulation (GDPR) and the Estonian Personal Data Protection Act.

1. What data we collect

Order data: name, email, phone, delivery address or parcel locker, products purchased, order history.
Payment data: payment method and transaction confirmation. Card details are processed by the payment service provider; we do not see or store them.
Account data (if you create an account): email, password (encrypted), saved addresses.
Subscription data: subscription status, billing dates, payment method token held by the payment provider.
Communication: emails and messages sent via the contact form.
Technical data: IP address, device and browser type, pages visited, cookies (see section 6).

2. Why and on what basis we use data

Fulfilling orders (performance of a contract): payment processing, shipping, order notifications, returns, subscription management.
Customer support (contract and legitimate interest): responding to questions and claims.
Accounting and legal obligations (legal obligation): retaining invoices and transaction records.
Newsletter and offers (consent): only if you have subscribed. You can unsubscribe at any time via the link at the bottom of each email.
Site operation, security and statistics (legitimate interest, and consent for cookies): fraud prevention, improving the site.
Marketing on social media and search engines (consent): Meta and Google advertising tools, only if you have accepted cookies.

3. Who we share data with

We share data only to the extent needed to fulfil orders and run the service:

Shopify (store platform and hosting),
payment service providers,
carriers (Smartpost, DPD, Venipak), to the extent needed for delivery,
accounting service,
email and marketing tool providers (newsletter, Meta, Google), based on consent,
public authorities where required by law.

We do not sell personal data to third parties.

4. Transfers outside the EU

Some service providers (e.g. Shopify, Meta, Google) may process data outside the European Economic Area. In such cases we rely on European Commission adequacy decisions or standard contractual clauses.

5. How long we keep data

Order and invoice data: 7 years from the end of the financial year (Estonian Accounting Act).
Account data: until the account is deleted or 3 years after last activity.
Newsletter consent: until you unsubscribe.
Customer support correspondence: up to 3 years.
Technical logs and cookies: as per the cookie table, generally up to 13 months.

6. Cookies

We use necessary cookies for the store to work (cart, login, language) and, with your consent, analytics and marketing cookies (Shopify analytics, Meta Pixel, Google). You can give and withdraw consent via the cookie banner or the “Cookie preferences” link in the footer.

7. Your rights

You have the right to:

know what data we process about you and receive a copy;
have inaccurate data corrected;
have data erased where there is no longer a legal basis to keep it;
restrict processing or object to processing based on legitimate interest;
receive your data in a machine-readable format (portability);
withdraw consent at any time, without affecting the lawfulness of earlier processing.

To exercise your rights, write to info@duovida.ee. We reply within one month at the latest. If you believe your rights have been infringed, you may lodge a complaint with the Estonian Data Protection Inspectorate.

8. Children

The store is intended for adults. We do not knowingly collect data from anyone under 18.

9. Security

We use an encrypted connection (HTTPS), Shopify’s secure infrastructure and limit access to data to those who need it for their work.

10. Changes

We may update this privacy policy. The current version, with its date, is always on this page.

11. Contact

LAL OÜ
Registry code 17469439
Luha 28, 10131 Tallinn, Estonia
info@duovida.ee

Language