Privacy Policy
This page explains how we process your personal information. We recommend at least reading the summary below, but the full policy will give you the complete picture.
Kuldlelu.com, last updated 25.9.2026.
We are committed to processing your personal information with trust and to respecting your privacy. We collect it to maintain your customer relationship with us (the legal basis is our contract with you, formed when you order, and the legal obligations that follow from it) and, separately, for marketing (the legal basis is your consent, such as subscribing to our newsletter). Without the first, you cannot order from our webstore; the second is always optional.
You have the right to be "forgotten" only where we have no legally binding reason to keep processing your information, in practice meaning you have not placed any orders with us. You can ask us to remove your account at any time, which removes your personal information from our webstore. This does not remove information we are legally required to keep, such as accounting material, which we must retain for at least 7 years.
We mainly use cookies to save this data, see the Cookies section below.
If you subscribe to our newsletter, we save your email address and the date you subscribed. If you have a registered account, we may use other data, such as your name, birthday, and shopping history, to personalize marketing to you. You can unsubscribe at any time.
We use your personal information to:
We process your data based on our customer relationship with you, the usability of the website, or your explicit consent.
Data security matters to us. We protect personal data against unauthorized access, disclosure, destruction, and other unlawful processing with appropriate technical and organizational safeguards, including firewalls, encryption, secure data facilities, controlled access rights, and careful selection of our subcontractors.
Some of our service providers, such as Google, Stripe, PayPal, and Mailchimp, may also process data outside the EU and EEA, for example in the United States. In those cases, transfers rely on safeguards required by EU data protection law, such as the EU–US Data Privacy Framework approved by the European Commission, or the Commission's Standard Contractual Clauses.
We may update this Privacy Policy as needed, or when the law changes. Changes are posted on this page, and we recommend checking it regularly to stay up to date.
You can contact our customer service with any questions about this Privacy Policy or our marketing.