1. Data controller
This privacy policy describes how Kalamaja Kaktus OÜ collects, uses, and protects your personal data when you use kaktus.flowersub.app or otherwise interact with us.
Kalamaja Kaktus OÜ Registry code: 11020566 Sõpruse pst 251-27, 13412 Tallinn, Estonia Email: info@kalamajakaktus.ee Phone: +372 5331 3378
2. Data we collect
We process the following personal data about you:
- Through the contact form: name, email address, message content.
- By phone or email: name, contact details, the substance of your enquiry.
- When placing an order: name, contact details, delivery address, order content, payment information (via the bank).
- When visiting the site: technical data (IP address, browser type, pages visited) in anonymised form.
3. Lawful basis for processing
We process personal data under the following GDPR bases:
- Contract performance and order fulfilment (Art. 6(1)(b)).
- Legitimate interest in customer communication and responding to enquiries (Art. 6(1)(f)).
- Compliance with legal obligations, in particular bookkeeping (Art. 6(1)(c)).
- Your consent in specific cases (Art. 6(1)(a)), which you may withdraw at any time.
4. Data retention
- Enquiries and contact information are retained for up to 2 years from last contact.
- Accounting documents are retained for 7 years under § 12 of the Estonian Accounting Act.
- Data is deleted or anonymised once the retention basis ends.
5. Sharing with third parties
Kalamaja Kaktus does not sell or rent your data for marketing purposes. Data is shared only where necessary to provide the service or as required by law:
- Courier and logistics providers — delivery data when orders are couriered.
- Banks and payment service providers (Montonio) — to process payments.
- Accounting service provider — for invoicing and bookkeeping.
- Authorities — to meet legal obligations.
6. Cookies and tracking
The site uses technical cookies necessary for it to function (including login and session). Third-party services (Vercel, Supabase, Montonio) may set their own cookies in accordance with their privacy notices.
You can limit cookie use in your browser settings.
7. Your rights
You have the following rights regarding your personal data:
- Right of access to your data.
- Right to rectification.
- Right to erasure (the right to be forgotten).
- Right to restriction of processing.
- Right to data portability.
- Right to object to processing.
- Right to withdraw consent at any time.
8. Data security
We apply reasonable technical and organisational measures to protect your data from unauthorised access, alteration, disclosure, or destruction. Access is restricted to people with a legitimate need.
To exercise your rights, contact us at info@kalamajakaktus.ee. We respond within one month.
Right to lodge a complaint: if you believe we have violated your rights when processing your data, you may contact the Estonian Data Protection Inspectorate — www.aki.ee.
9. Changes
Kalamaja Kaktus reserves the right to amend this privacy policy from time to time. The current version is always published on this page with the date of the most recent update.
10. Contact
For privacy and personal data questions, contact us:
Kalamaja Kaktus OÜ info@kalamajakaktus.ee +372 5331 3378