Privacy Policy

This Privacy Policy was last updated on 16 October 2026.

This Privacy Policy explains how Virello OÜ collects, uses, stores and protects the personal data of visitors and customers of the website melikakimbud.ee.

The purpose of this Privacy Policy is to provide customers with a clear overview of what personal data we collect, why we use it, to whom we may disclose it where necessary, and what rights customers have in relation to their personal data.

  1. Data Controller

The controller of personal data is:
Virello OÜ
Registry code: 17105105
Registered address: Pori-Kõrtsi/1, Poriküla, 61311 Elva vald, Tartu maakond, Estonia
Email: info@melikakimbud.ee

  1. Definitions

Customer means a person who places an order on the website or contacts us.
Visitor means a person who visits the website melikakimbud.ee.
Personal data means information that can directly or indirectly identify a person, such as name, email address, telephone number, delivery address or information related to an order.
Processing of personal data means any operation performed on personal data, such as collection, use, storage, transfer, correction or deletion.

  1. What Personal Data Do We Collect?

We collect personal data provided by the customer when placing an order, contacting us or using the website.
The data we may collect includes:
name
e-posti aadress;
telephone number;
delivery or collection address;
selected parcel locker or other delivery information;
order details and order history;
payment-related information;
gift card or message card text, if added to an order;
customer messages and correspondence;
- technical information related to website use, such as IP address, device and browser information, cookie data, and data collected through analytics and advertising tools.

  1. Why Do We Use Personal Data?

We use personal data for the following purposes:
to receive and fulfil orders;
to contact customers regarding their orders;
to process payments;
to prepare and hand over or deliver products;
to prepare invoices and accounting documents;
to respond to customer enquiries;
to ensure the security and proper functioning of the website;
to improve the website user experience;
to analyse statistics and advertising performance;
for marketing activities where the necessary consent has been given;
to comply with legal obligations;
to resolve potential disputes, complaints or claims.

  1. Legal Basis for Processing Personal Data

We mainly process personal data in order to perform a contract with the customer, meaning to accept and fulfil an order.
We also process personal data to comply with legal obligations, for example for accounting purposes.
Data related to cookies, analytics and marketing is processed on the basis of consent where such consent is required by law.
In certain cases, we may also process personal data on the basis of legitimate interests, for example to ensure website security or to protect against potential claims.

  1. Requirement to Provide Personal Data

To place an order, the customer must provide the information necessary for us to fulfil the order. For example, we require the customer's name, email address, telephone number and, where necessary, delivery or collection address. If the customer does not provide the information required to fulfil the order, we may be unable to accept or complete the order.

  1. Who May Receive Personal Data?

We disclose personal data only to the extent necessary to fulfil an order, operate the website or comply with legal obligations.

Personal data may be processed by, for example:
1. Montonio – for payment processing and payment services;
2. Smartpost – for delivering orders in Estonia, Finland, Latvia and Lithuania;
3. Bolt – for courier delivery in Tallinn;
4. web hosting and technical support providers;
5. e-commerce platform and plugin service providers;
6. accounting service providers;
7. analytics, advertising and marketing service providers where there is an appropriate legal basis or customer consent;
8. public authorities where disclosure is required by law.

For payment processing, the necessary information is transmitted to Montonio and to the relevant bank or other payment service provider selected by the customer.

For delivery, only the information necessary for delivery is provided to the carrier, such as the recipient's name, telephone number, email address and delivery information.

We do not sell or rent our customers' personal data to third parties.

  1. Social Media, Advertising and Analytics

Our website may contain links to our social media channels, such as Facebook, Instagram or TikTok.

We use analytics and marketing tools on our website, including Meta Pixel and Meta Conversions API, in order to:
– measure advertising performance;
– obtain statistics about website use;
– analyse activities carried out on the website;
– create advertising audiences;
– show more relevant advertisements.

Marketing and analytics cookies and related technologies are used only where the visitor has given consent, where such consent is required by law.
When using Meta and other external services, data may also be processed outside the European Economic Area. In such cases, applicable data protection safeguards are used.

  1. Automated Decision-Making and Profiling

We do not make automated decisions about customers that would have legal or similarly significant effects on them.
Website analytics and marketing tools may be used to analyse visits, purchasing activity and advertising performance, and to create advertising audiences.
Such activities do not result in automated decisions that have legal or other significant effects on customers.

  1. How Long Do We Keep Personal Data?

We retain personal data only for as long as necessary to fulfil the purpose for which it was collected or to comply with legal obligations.

Documents related to orders and accounting are generally retained for 7 years from the end of the financial year in which the relevant transaction was recorded in the accounts, in accordance with applicable law.

Customer enquiries and correspondence are retained for as long as necessary to manage customer communication, an order, a complaint or a potential dispute.

Analytics and marketing data is retained in accordance with the settings of the relevant service and the consent provided by the customer.

When there is no longer a legal basis for retaining personal data, we delete or anonymise the data.

  1. Customer Rights

Customers have the right to:
– ask what personal data is being processed about them;
– request access to their personal data;
– request correction of inaccurate data;
– request deletion of data where there is no longer a legal basis for retaining it;
– request restriction of the processing of personal data;
– object to the processing of personal data;
– request data portability where applicable;
– withdraw consent relating to cookies or marketing.

To exercise your rights, please contact us at info@melikakimbud.eeWithdrawal of consent does not affect the lawfulness of processing carried out before the consent was withdrawn.

  1. Cookies

Our website uses cookies and similar technologies to:
– ensure the basic functionality of the website;
– enable the use of the shopping cart;
– enable order placement;
– improve the website user experience.

With the visitor's consent, we may also use analytics and marketing cookies, including technologies related to Meta advertising and analytics tools.

Visitors can change their cookie preferences using the cookie settings available on the website.

More information about the use of cookies is available in our Cookie Policy.

  1. Data Security

We apply reasonable technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, loss or destruction.

Access to personal data is limited to persons and service providers who need the information to perform their duties or provide their services.

  1. Complaints

If a customer believes that their personal data has been processed incorrectly or that their rights have been violated, we ask them to contact us first at info@melikakimbud.ee. info@melikakimbud.ee.

The customer has the right to lodge a complaint with the Estonian Data Protection Inspectorate or, if the customer is located in another European Union Member State, with the competent data protection supervisory authority of that country.

  1. Changes to the Privacy Policy

We may update this Privacy Policy from time to time if our services, website functions, tools or legal requirements change.

The updated Privacy Policy will be published on melikakimbud.ee.

  1. Transfers Outside the European Economic Area

Some of our service providers may process personal data outside the European Economic Area.

Where personal data is transferred outside the European Economic Area, appropriate data protection safeguards are applied, such as European Commission adequacy decisions or Standard Contractual Clauses.

Contact:

If you have any questions about the processing of personal data, please contact us:
Virello OÜ
Email: info@melikakimbud.ee