Privacy Policy

1. The data we collect

Depending on how you use the site, we may collect:

• Account and contact details — your name, email address, phone number and password (stored only in hashed form).
• Order and delivery details — the items you buy, and your billing and shipping addresses.
• Payment information — processed by our payment providers; we receive confirmation of payment but never your full card number.
• Technical and usage data — such as your device, browser, IP address and how you interact with the site, collected in part through cookies.

2. How and why we use your data

We use your personal data to:

• fulfil your orders, take payment and provide customer support (to perform our contract with you);
• manage your account and keep the site secure (in our legitimate interests and to meet our obligations);
• send you service messages such as order confirmations and delivery updates;
• send marketing where you have asked us to, and improve the site through analytics (on the basis of your consent);
• meet legal and accounting obligations, such as keeping records of sales.

3. Cookies

We use cookies and similar technologies to run the site and, with your consent, for functional, analytical and advertising purposes. Our Cookie Policy explains these in detail and how to manage your choices.

4. Who we share it with

We share personal data only as needed to run our business, including with:

• payment providers who process your payment securely;
• delivery partners who fulfil your order;
• the email provider that sends our transactional and marketing messages;
• professional advisers and authorities where the law requires it.

5. We do not sell your data

We do not sell your personal data, and we do not share it for others to use for their own marketing without your consent.

6. International transfers

Some of our providers may process data outside your country. Where that happens, we take steps to ensure your data receives an equivalent level of protection through appropriate safeguards.

7. How long we keep it

We keep personal data only for as long as we need it for the purposes above — for example, to manage your account while it is open, and to keep order and tax records for the period required by law — after which it is deleted or anonymised.

8. Your rights

Subject to local law, you have the right to:

• access the personal data we hold about you and receive a copy;
• have inaccurate data corrected and incomplete data completed;
• ask us to erase your data or restrict how we use it;
• object to processing based on our legitimate interests, and to direct marketing at any time;
• receive certain data in a portable format;
• withdraw consent at any time, and to complain to your data protection authority.

9. Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit and access controls. No method of transmission is completely secure, but we work to keep your data safe.

10. Children

The site is intended for adults. We do not knowingly collect data from children.

11. Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last revised.

12. Contact us

If you have any questions about this policy or want to exercise your rights, contact us at info@hemma.design, or by post at Nortexis OÜ, Tartu mnt 82, Kesklinna linnaosa, 10112 Tallinn, Harju maakond, Estonia.