Privacy Policy

Data controller

The controller is Purana OÜ (registry code 16617524), Nõmmiku tn 26, Vahi alevik, Tartu vald, Tartu County 60534, Estonia. For privacy questions, email [email protected].

Data we process

• Order data: name, email, phone number, billing and delivery addresses, ordered products, payment status and delivery status.
• Customer communications: contact-form and email messages, returns, complaints and support history.
• Website technical data: IP address, basic browser and device details, visited pages, referrer and identifiers stored by cookies or similar technologies.
• Eltivo does not see or store full payment-card details; they are entered in the payment provider’s secure environment.

Purposes and legal bases

• Contract performance: accepting orders, payment, delivery, returns, customer accounts and product support.
• Legal obligations: accounting, tax records, consumer rights and lawful requests from public authorities.
• Legitimate interests: shop security, fraud prevention, troubleshooting and improving service reliability.
• Consent: optional analytics and marketing cookies. Consent can be withdrawn at any time through the cookie choices.

Cookies

Necessary cookies keep the cart, checkout, payment security and your privacy choice working. Optional analytics and marketing technologies are used only with your consent to understand website use and measure advertising performance.

Recipients and transfers

We share data only as needed with hosting and IT providers, WooCommerce service providers, the payment provider selected at checkout, Omniva or another displayed carrier, and professional advisers or public authorities where there is a lawful basis.

Where a provider processes data outside the European Economic Area, an applicable safeguard is used, such as a European Commission adequacy decision or standard contractual clauses.

Retention

Order and accounting source documents are generally retained for seven years from the end of the relevant financial year. Customer communications are kept for up to two years after a case closes unless longer retention is needed to establish or defend a claim. Technical security logs are normally kept for up to 12 months. Consent-based data is processed until consent is withdrawn or the purpose ends.

Your rights

You may request access, correction, deletion, restriction or portability of your data, object to processing, or withdraw consent. Email [email protected]; we normally respond within one month. You may also complain to the Estonian Data Protection Inspectorate at aki.ee.

Account, device and energy-use data in the Eltivo Home app is covered by the separate app privacy policy at eltivo.eu/eltivo-home-privacy/.