Last updated: July 2026

TYPA’s online shop is committed to protecting your privacy and handling your personal data responsibly. This Privacy Policy explains what information we collect, why we collect it, how we use it, and what rights you have under the General Data Protection Regulation (GDPR).

1. Data Controller

The data controller responsible for processing personal data through this online shop is:

TYPA MTÜ
Registry code: 80305446
Address: Kastani 48f, Tartu, Estonia
Email: typa@typa.ee
Website: https://typa.ee/en

Our online shop is available at https://shop.typa.ee.

2. What Personal Data We Collect

When you place an order

To process and deliver your order, we collect:

• First and Last name
• Billing address
• Shipping address
• Email address
• Phone number (if provided)
• Products ordered
• Order value and payment status
• Delivery information
• Order history

We do not store your full payment card details or online banking credentials.

When you create an account

If you choose to create a customer account, we store:

• Your first and last name
• Email address
• Password (stored in encrypted form)
• Saved billing and shipping addresses
• Order history

You may update or delete your account at any time, subject to our legal obligations to retain certain records.

Customer enquiries

If you contact us by email or through our website, we collect the information you provide in order to respond to your enquiry.

Comments

When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

3. Why We Process Your Personal Data

Purpose	Legal basis
Processing orders and deliveries	Performance of a contract
Processing payments	Performance of a contract
Customer support	Performance of a contract and legitimate interest
Maintaining customer accounts	Performance of a contract
Accounting and tax records	Legal obligation
Preventing fraud and protecting the website	Legitimate interest
Responding to enquiries	Legitimate interest
Marketing communications (if subscribed)	Consent

4. Payments

Payments are processed securely by LHV Bank (or the payment service provider used by the shop).

Payment information is transmitted directly to the payment provider using secure encrypted connections. We never receive or store your full payment card details.

5. Shipping

To deliver your order, we share the information necessary for delivery with our shipping partners, such as:

• Your name
• Shipping address
• Phone number (where required)
• Email address (where required for delivery notifications)

Currently, deliveries are handled through providers such as Omniva.

6. Who We Share Your Data With

We only share personal data where necessary to operate our online shop or where required by law.

Recipients may include:

• payment service providers
• delivery service providers
• website hosting providers
• IT service providers
• accounting service providers
• public authorities where required by law

All service providers process personal data only under appropriate contractual safeguards and only for the purposes instructed by us.

We never sell your personal data.

7.Cookies

Our website uses cookies to ensure that the online shop functions correctly.

Necessary cookies are used to:

• keep products in your shopping cart
• remember your session while browsing
• enable customer login
• maintain website security

These cookies are necessary for the operation of the website and do not require consent under applicable legislation.

If additional analytics or marketing cookies are introduced in the future, we will request your consent where required.

8.Embedded Content and Third-Party Services

Some pages may include embedded content, such as videos or social media content.

Embedded content behaves as though you visited the third-party website directly. Those providers may collect personal data, use cookies, and monitor your interaction according to their own privacy policies.

9. Data Retention

We retain personal data only for as long as necessary.

Typical retention periods are:

• Order and accounting records: 7 years, as required by Estonian accounting legislation.
• Customer accounts: until deleted by the user or upon request, unless legal obligations require longer retention.
• Customer service correspondence: up to 3 years.
• Technical logs: retained only for as long as necessary for security and system maintenance.
• Comments: retained until removed.

10. International Data Transfers

Personal data is primarily processed within the European Economic Area (EEA).

If a third-party service transfers personal data outside the EEA, appropriate safeguards required by the GDPR, such as the European Commission’s Standard Contractual Clauses, are applied where necessary.

11. Your Rights

Under the GDPR, you have the right to:

• request access to your personal data;
• request correction of inaccurate personal data;
• request deletion of your personal data where legally possible;
• request restriction of processing;
• object to certain types of processing based on legitimate interests;
• receive your personal data in a portable format where applicable;
• withdraw consent at any time where processing is based on consent.

Some rights may be limited where we are legally required to retain information, for example under accounting or tax legislation.

To exercise your rights, please contact us at typa@typa.ee.

12. Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure.

Although no method of internet transmission is completely secure, we continuously work to maintain an appropriate level of security for the information we process.

13. Complaints

If you believe your personal data has been processed unlawfully, we encourage you to contact us first so that we can try to resolve the issue.

You also have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon).

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legislation or our services.

The latest version will always be available at https://shop.typa.ee.