Privacy Policy
LINDALING OÜ (“Knitling”, “we”, “us”) respects your privacy. This policy explains what personal data we collect, why, how long we keep it, and your rights under the EU General Data Protection Regulation (GDPR).
1. Data controller
LINDALING OÜ
Registry code: 16234711
Estonia
Email: linda@knitling.com
2. What data we collect
- Order and account data: name, email, phone (if provided), billing and shipping address, order history, payment status (payment card details are processed by our payment provider—we do not store full card numbers).
- Communications: messages you send us (email, Instagram DMs if you contact us there, etc.).
- Technical data: IP address, browser type, device information, and cookies—see our Cookie Policy.
- Marketing: only if you opt in (e.g. newsletter)—email and preferences.
3. Why we use your data
| Purpose | Legal basis |
|---|---|
| Process and deliver orders | Contract |
| Customer support | Contract / legitimate interest |
| Tax, accounting, and legal compliance | Legal obligation |
| Site security and fraud prevention | Legitimate interest |
| Analytics (if you consent) | Consent |
| Marketing emails (if you opt in) | Consent |
4. Who we share data with
We use trusted service providers only as needed to run the shop, for example:
- Montonio Finance UAB (payments: cards and Baltic bank payments)
- Shipping carriers
- Hosting (Render for the site; Monolith / Vercel for checkout and email)
- Mailgun (order and newsletter email) and Google Analytics (only if you consent)
Providers process data on our instructions and under appropriate agreements. If data is transferred outside the EU/EEA, we ensure safeguards such as Standard Contractual Clauses or adequacy decisions apply.
5. How long we keep data
- Order and invoice data: as required by Estonian accounting law (typically up to 7 years).
- Marketing consent: until you unsubscribe or withdraw consent.
- Support messages: up to 2 years after the last contact, unless longer retention is required.
- Cookie preferences: as described in the Cookie Policy.
6. Your rights
Under GDPR you may:
- Access your personal data
- Correct inaccurate data
- Delete data (where applicable)
- Restrict or object to certain processing
- Data portability (where processing is based on contract or consent)
- Withdraw consent at any time (without affecting prior lawful processing)
- Lodge a complaint with the Estonian Data Protection Inspectorate (aki.ee)
To exercise your rights, email linda@knitling.com. We respond within one month unless the request is complex.
7. Children
Our shop is not directed at children under 16. We do not knowingly collect their personal data.
8. Changes
We may update this policy; the current version is always on this page with the date above.