Effective Date: 01.05.2025
Last Updated: 01.05.2025

Your privacy matters to us!

Laiguline.ee webshop is owned and operated by Lepus in Fabula OÜ. We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR). This policy explains how we collect, use, share, and protect your personal data when you use our website, Laiguline.ee, and your rights under EU law.

Who We Are

Lepus in Fabula OÜ is the data controller for the purposes of this Privacy Policy. If you have any questions or concerns, you can contact us using the details at the end of this policy.

Information We Collect

When you browse the shop, create an account or place an order – we collect certain information to serve you better. This may include personal details like your name, email address, shipping and billing addresses, phone number, and payment information. All payment data is handled securely through our trusted payment partners.

We may also collect technical data such as your IP address, browser type, and the pages you visit. This helps us improve the performance and usability of our website so we can offer you the best possible experience.

We do not collect sensitive personal data without explicit consent.

Legal Basis for Processing

Under GDPR, we must have a lawful basis for processing your data. We rely on the following:

  • Contractual necessity – to fulfill your orders and provide requested services
  • Legal obligations – to meet legal or tax requirements
  • Legitimate interests – to improve our services and prevent fraud (unless overridden by your rights)
  • Consent – for sending marketing emails or using certain cookies (which you may withdraw at any time)

How We Use Your Information

We use the information we collect to process your orders, provide customer support, and keep you informed about your purchases. With your permission, we may also send you updates, special offers, or newsletters. Additionally, your data helps us improve our website, detect fraudulent activity, and meet legal or regulatory requirements.

We do not use your data for profiling or automated decision-making that significantly affects you.

Sharing Your Information

We only share your personal data when necessary and with trusted partners.

To complete your orders and operate our business, we may share your information with a few trusted third parties. These include payment processors, shipping carriers, and marketing services (if you’ve opted in). We may also share data when legally required or to protect our rights and property. All third parties are bound by contractual obligations to keep your data secure and process it only as instructed.

Rest assured, we do not sell or rent your personal information to anyone.

Data Retention

We retain your personal data only for as long as necessary for the purposes for which it was collected, including to meet legal, accounting, or reporting obligations.

For example, order records may be kept for up to 7 years to comply with tax laws.

Marketing data is retained only until you withdraw your consent. After this period, data is securely deleted or anonymized.

Cookies and Tracking Technologies

We use cookies to enhance your experience, provide functionality, and analyze site traffic. Some cookies are essential for the website to function properly, while others require your consent.

You can manage or withdraw your cookie consent at any time via our Cookie Banner or through your browser settings.

Data Security

Your security is important to us. We take appropriate steps to protect your information from unauthorized access, misuse, or disclosure. This includes the use of encryption, secure servers, and access controls. While no system is completely foolproof, we do our best to safeguard your data.

Your Rights and Choices

You have control over your personal data. You can access, update, or request deletion of your information at any time. You also have the right to opt out of marketing emails—just click the unsubscribe link at the bottom of any message or send an email to customer support.

You have the following rights under GDPR regarding your personal data:

  • Access – request a copy of the data we hold about you
  • Rectification – request correction of inaccurate or incomplete data
  • Erasure – request deletion of your data (“right to be forgotten”)
  • Restriction – request limited use of your data under certain circumstances
  • Data portability – request your data in a structured, machine-readable format
  • Objection – object to processing based on legitimate interests or direct marketing
  • Withdraw consent – for processing based on your consent, at any time

To exercise these rights, contact us at privacy@lepus.ee. We may ask for proof of identity before fulfilling your request.

If you believe your data protection rights have been violated, you have the right to lodge a complaint with your national data protection authority.

Third-Party Links

Sometimes, our site may contain links to third-party websites. We’re not responsible for their privacy practices or content. We recommend reviewing their policies before providing any personal information.

Changes to This Policy

We may occasionally update this Privacy Policy to reflect changes in our practices or legal obligations. Any changes will be posted on this page with a revised “Last Updated” date. If the changes are significant, we will notify you by email or through the website.

Contact Us

If you have any questions about this Privacy Policy or your data, please contact:

Lepus in Fabula OÜ
Email: privacy@lepus.ee
Phone: +372 5811 4004
Address: Suur-Sõjamäe tn 35b, 11415 Tallinn, Estonia