Privacy & Data Protection Policy

1. Data Controller Specification

1.1. The Data Controller responsible for your personal information is Liliakona OÜ, registered at Rotermanni tn 6, Kesklinna linnaosa, Tallinn, 10111, Harju maakond, Estonia.

1.2. Email contact for data protection inquiries: liliakonaou@gmail.com.

2. Categories of Personal Data Collected

2.1. When you place an order or contact our atelier, we collect: full name, shipping and billing address, email address, telephone number, and payment transaction references.

2.2. Technical usage data (IP address, browser type, cookies) is processed automatically for store functionality and security.

3. Purpose and Legal Basis of Processing

• Order Fulfillment: Data is processed to complete transactions, arrange parcel delivery, and send order notifications (GDPR Art. 6(1)(b)).
• Legal Compliance: Accounting and tax records are retained in compliance with Estonian financial laws (GDPR Art. 6(1)(c)).
• Consent: VIP newsletter notifications are sent exclusively upon voluntary user subscription (GDPR Art. 6(1)(a)).

4. Data Storage & Retention Period

4.1. Accounting documentation containing personal data is stored for 7 years in accordance with the Estonian Accounting Act (Raamatupidamise seadus).

4.2. Customer account and inquiry data is retained strictly as long as necessary to provide service or until consent is revoked.

5. Third-Party Data Transfer

5.1. Personal data is shared only with trusted service partners essential for order processing (logistics couriers, bank payment processors, and IT infrastructure hosting).

5.2. All third-party processors operate within the European Economic Area (EEA) and are bound by strict GDPR data processing agreements.

6. Your Rights Under GDPR

6.1. Under GDPR, you have the right to access, rectify, erase ("Right to be forgotten"), restrict, or export your personal data.

6.2. To exercise any of your rights, send a written request to liliakonaou@gmail.com. Requests are processed within 30 days free of charge.

7. Data Protection Officer Contact