Last updated: 17 September 2026
This policy explains what personal data we collect when you use seifdesign.eu, why we collect it, how long we keep it, and what rights you have. We keep it short and specific on purpose.
Who is responsible for your data
The data controller is:
SEIF DESIGN OÜ
Registry code: 16484129
Koru põik 14, Laagri alevik, Saue vald, Harju maakond 76401, Estonia
Email: info@seifdesign.eu
For any question about your data, or to exercise any of the rights below, email us at that address.
What we collect and why
When you place an order
We collect your name, email address, delivery address, phone number where you provide one, your order contents, and the delivery method you choose. We need this to fulfil the contract between us — without it we cannot send you anything.
Legal basis: performance of a contract (GDPR Article 6(1)(b)).
We keep order records for seven years to meet Estonian accounting and tax law.
Legal basis for retention: compliance with a legal obligation (Article 6(1)(c)).
When you pay
Payments are handled by our payment provider. Your card number and security details are entered on their systems, not ours — we never see or store them. We receive only confirmation that payment succeeded, along with a reference.
When you contact us
If you email us or use a form on the site, we keep your message and contact details so we can reply and follow up. We keep correspondence for up to two years, or longer where it relates to an order, a warranty claim or a dispute.
Legal basis: our legitimate interest in answering enquiries (Article 6(1)(f)), or performance of a contract where it concerns an order.
When you simply browse
Our web server keeps standard access logs — IP address, time of request, page requested and browser type — which are used to keep the site running and secure, and are retained for a short period. Security software on the site processes the same kind of data to block malicious traffic.
Legal basis: our legitimate interest in the security and availability of the site (Article 6(1)(f)).
Cookies
We use only the cookies needed for the shop to function: remembering the contents of your basket, keeping you logged in if you have an account, and carrying your session through checkout. These are strictly necessary and do not require consent.
We do not currently run analytics, advertising or tracking cookies. If we introduce them, we will ask for your consent first, through a banner that lets you accept or refuse each category and change your mind later. Non-essential cookies will not be set before you agree.
Who we share data with
We do not sell your data, and we do not share it for anyone else’s marketing. We pass it only to the suppliers needed to complete your order, and only what each of them needs:
- Montonio Finance UAB (Lithuania) — payment processing and delivery method selection
- Delivery carriers — Omniva, DPD, SmartPosti and Unisend, depending on the method you choose, receive your name, address and phone number so they can deliver your parcel
- Elkdata OÜ (Estonia) — hosting; your data is stored on their servers
- Our accountant — order and invoice records, for statutory bookkeeping
All of these are located within the European Union or the European Economic Area, so your data is not transferred outside the EEA. Where we ever need to use a supplier outside the EEA, we will only do so with appropriate safeguards in place, such as the European Commission’s standard contractual clauses.
We may also disclose data where the law requires it.
Your rights
Under the GDPR you have the right to:
- Access — ask for a copy of the personal data we hold about you
- Rectification — have inaccurate data corrected
- Erasure — ask us to delete your data, where we are not legally required to keep it
- Restriction — ask us to pause processing while a question is resolved
- Portability — receive the data you gave us in a machine-readable format
- Objection — object to processing based on our legitimate interests
- Withdraw consent — where processing is based on consent, withdraw it at any time, without affecting what was lawful beforehand
Email info@seifdesign.eu to exercise any of these. We will respond within one month. There is no charge.
Note that we cannot delete order records we are legally required to retain for accounting purposes until that period has passed.
Complaints
If you think we have handled your data incorrectly, please tell us first so we can put it right. You also have the right to complain to a supervisory authority — in Estonia this is the Data Protection Inspectorate (Andmekaitse Inspektsioon), Tatari 39, 10134 Tallinn, aki.ee. You may also complain to the authority in your own country of residence.
Changes to this policy
If we change how we handle personal data, we will update this page and change the date at the top.