Privacy Policy

Privacy Policy

PUHU OÜ considers the security and privacy of your personal data to be important.
We want you to have a clear understanding of how we collect, use, store, and protect your data. Our goal is to ensure that you have full control over your personal data and the confidence that it is kept securely.

In this privacy policy, we explain how we process your personal data when you visit our physical store or website www.puhu.ee, make a purchase, or contact us.

  1. General Information and Contact

Data controller:
PUHU OÜ
Registry code: 17014526
Address: Raua 4, Viljandi, 71020
Email: eilisoon@gmail.com
Phone: +372 56668127
Website: www.puhu.ee

Physical store: Raua 4, Viljandi

If you have any questions regarding the processing of personal data, please contact us by email or phone.

  1. What personal data we collect

Depending on how you interact with us (e.g., when placing an order in the online store, filling out a contact form, or making a purchase in the store), we may collect the following data:

  • Name and contact details: first and last name, phone number, email address, postal address.
  • Order details: order date, content, cost, delivery method, parcel terminal or delivery address.
  • Payment details: bank payment info (we do not store card details).
  • Communication data: your inquiries to us (email, contact form, by phone, etc.).
  • Online store usage data: IP address, device type, browsing statistics, and cookies.

Providing personal data is voluntary, but in certain cases necessary (e.g., for fulfilling an order or preparing an invoice).

  1. How and for what purpose we process your data

Data

Purpose of processing

Legal basis

Name, contact details

Order fulfillment and delivery

Performance of a contract (GDPR Art. 6 (1)(b))

Email, phone

Customer communication, order confirmations, answering questions

Performance of a contract or legitimate interest (GDPR Art. 6 (1)(b), (f))

Payment data

Processing payments for purchases, fulfilling accounting requirements

Performance of a contract and legal obligation (GDPR Art. 6 (1)(b), (c))

Delivery address

Delivery of goods

Performance of a contract (GDPR Art. 6 (1)(b))

Cookies and web usage

Ensuring website functionality, statistics, and improving user experience

Legitimate interest or consent (GDPR Art. 6 (1)(a), (f))

Email address (newsletter)

Marketing messages and campaign offers

Consent (GDPR Art. 6 (1)(a))

  1. To whom data is transferred

Your data may be transferred only to the extent necessary for fulfilling the order or complying with legal obligations:

  • To courier service providers (e.g., Omniva, Itella SmartPOST, DPD) – for the delivery of orders.
  • To payment system service providers – for processing payments.
  • To IT and server service providers – to ensure the functioning of the puhu.ee website.
  • To the accounting service provider – to fulfill statutory accounting obligations.

We do not transfer your data outside the European Economic Area.

  1. Data retention
  • We retain order data for 7 years, in accordance with the Accounting Act.
  • We retain newsletter subscriber data until the withdrawal of consent.
  • We retain inquiries sent by email for up to 2 years to document customer communication.
  • Cookie data is stored according to the specific cookie used (see the cookie policy on the website).

  1. Your rights

You have the right to:

  1. receive information about which personal data we process about you;
  2. request the correction or deletion of your data;
  3. restrict or object to the processing of data;
  4. withdraw given consent (e.g., for receiving marketing emails);
  5. receive your data in a machine-readable format or request its transfer to another service provider;
  6. lodge a complaint with the Data Protection Inspectorate (info@aki.ee) if you find that your rights have been violated.

For all requests and questions, please contact us at the email address eilisoon@gmail.com

  1. Cookies and tracking technologies

The website puhu.ee uses cookies to ensure the correct functioning of the site, collect statistics, and improve the user experience.
Cookies can be deleted or their use restricted at any time in your browser settings.

Cookies can be:

  • Necessary cookies, which ensure the operation of the e-shop (e.g., remembering the contents of the shopping cart);
  • Statistical cookies, which help us understand how visitors use the site;
  • Marketing cookies, which are used to show advertisements (only with your consent).

  1. Changes to the privacy policy

Puhu OÜ may update this privacy policy as necessary to reflect changes in the law or the development of services.
The updated version will be published on the website www.puhu.ee along with the effective date.

Last updated: 2026-07-15

Shopping Cart
Scroll to Top