Privacy Policy
Valid from: 19.10.2026
1. General provisions and controller
This privacy policy describes how Tileest OÜ processes personal data when using the website and online store.
The website address is https://tileest.ee
The website is based on the WordPress content management system, and the online store functionality is provided by WooCommerce.
The controller of personal data is: Tileest OÜ
Registry code: 17209394
Address: Harju County, Rae Parish, Jüri, Väljaku tn 10/1-25, 75301
Email: info@tileest.ee
Phone: +372 5595 0327
Tileest OÜ has not appointed a separate data protection officer. For questions regarding data protection, please contact us using the details above.
2. What personal data is processed?
Tileest OÜ may collect and process the following personal data:
•first and last name
•email address
•phone number
•billing and delivery address
•payment-related data (payment method, amount, transaction reference; bank account number only
for making refunds)
•purchase history (order date, products, quantities)
•customer support and correspondence data
•technical data on website use (e.g. IP address, logs, browser type)
3. Purposes of processing personal data
Personal data is processed for the following purposes:
•receiving, processing and fulfilling orders
•delivering goods or arranging collection
•receiving payments and making refunds
•customer communication and support
•reporting and analysis related to purchase history
•fulfilling accounting and statutory obligations
•ensuring the technical functioning and security of the website and online store
4. Legal basis for processing personal data
Personal data is processed on the following legal bases:
•performance of a contract (e.g. processing an order and delivering goods)
•compliance with a legal obligation (e.g. accounting and consumer disputes)
•legitimate interest (e.g. customer communication, website security and keeping logs)
•the customer's consent, where data is processed for marketing purposes
5. Online store and WooCommerce
When placing an order, the online store collects the following personal data:
•name
•billing and delivery address
•email address
•phone number
•payment method-related data
•purchase history
This data is used to process orders, deliver goods, make payments and refunds, and fulfil statutory obligations.
If the Customer creates a user account, the account data is stored to simplify future orders.
Withdrawal and refund
If the Customer submits a withdrawal request on the "Returns and withdrawal from the contract" page, the following data will be processed:
•name
•email address and desired confirmation channel
•telephone number, if the Customer adds it
•order number and date of receipt of goods
•information about the products being returned and their condition
•refund details, including bank account number, if provided by the Customer
•reason for withdrawal, if the Customer voluntarily adds it
•date, time and IP address of the application submission
This data is processed to process the withdrawal application, arrange the return and refund, and fulfill the legal obligation, including sending confirmation of receipt of the application in accordance with § 56⁴ of the Law of Obligations Act. The application is saved in the e-shop system and sent to the Seller's e-mail address info@tileest.ee.
6. Comments
When visitors leave comments on the website, the data entered in the comment form is stored, as well as the visitor's IP address and browser identifier to help identify spam comments.
An anonymised hash created from your email address may be sent to the Gravatar service to check whether you are using a profile picture.
Gravatar privacy policy: https://automattic.com/privacy/
7. Media
When uploading images to a website, we recommend avoiding adding location information (EXIF GPS) to image files. Website visitors may download the images and the location information contained in them may be accessible.
8. Cookies
The website uses cookies and similar technologies to ensure the correct functioning of the website and online store and to improve the user experience.
WordPress and WooCommerce may set cookies, among other things, to:
•to manage the user's session and login
•to remember the contents of the shopping cart
•to ensure the security of the website
•to save user preferences
In addition, the website uses analytics cookies (Google Analytics) with the Client's consent to understand how visitors use the website. These cookies are only stored if the Client has clicked "I agree" in the cookie notice. Consent can be withdrawn by deleting the cookies for this website from the browser.
9. Transfer of personal data
Personal data may be transferred to third parties only to the extent necessary to provide the service:
•payment service provider Montonio OÜ – for processing payments
•logistics partners (Omniva, DPD, SmartPosti) – for delivery of goods
•email service provider (Amazon Web Services) – for sending order, shopping cart reminder and review request emails
•Google Ireland Limited (Google Analytics) – website visit statistics, only if you consent to cookies
•accounting service provider – for fulfilling accounting obligations
•IT and hosting service providers – for ensuring the technical functioning of the website and data
Authorized processors process personal data based on Tileest OÜ's instructions and in accordance with contracts.
10. Retention of personal data
Personal data is retained only for as long as necessary to fulfil the purpose of processing or
as required by law:
•order and customer management data: up to 3 years
•revocations and related correspondence: up to 3 years
•accounting data: in accordance with the deadlines laid down by law
•data related to customer communication, returns and disputes: until final resolution of the dispute
until resolution
•marketing data: until consent is withdrawn
11. Rights of the data subject
The Customer has the right to:
•access their own personal data
•request correction of inaccurate data
•request deletion of data, where this does not conflict with statutory obligations
•restrict the processing of personal data
•object to the processing of personal data
•request the transfer of data
Please submit your requests to info@tileest.ee. We will respond to your requests within 30 days at the latest.
12. Withdrawal of consent and direct marketing
Where personal data is processed on the basis of the Customer's consent (e.g. direct marketing), the Customer has the right to withdraw consent at any time.
The Customer's email address and telephone number will only be used for direct marketing if the Customer has given explicit consent.
13. Automated decisions and profiling
Tileest OÜ does not use automated decision-making or profiling based on personal data that would have a legal or significant effect on the Customer.
14. Security of personal data
Personal data is stored on servers located in the territory of the European Union or the European Economic Area, or in countries whose level of data protection the European Commission has assessed as adequate.
Tileest OÜ applies appropriate technical, organisational and physical security measures to protect personal data against accidental or unlawful destruction, loss, alteration or unauthorised access.
15. Data breaches
In the event of a personal data breach, Tileest OÜ will immediately implement measures to limit the damage and, if necessary, notify the supervisory authority and data subjects in accordance with applicable legislation.
16. Disputes and supervision
Disputes related to the processing of personal data will first be resolved by agreement with Tileest OÜ.
Supervisory authority:
Estonian Data Protection Inspectorate
Email: info@aki.ee
Web: https://www.aki.ee