Privacy
Policy
Last updated: 16.05.2025
This Privacy Policy outlines how Amelia OÜ (registry code 16701360, located at Paavli tn 2a, Tallinn, Estonia) collects, processes, and stores personal data. Amelia OÜ is the data controller (hereinafter referred to as the Data Controller).
For privacy-related questions, please contact: katlin@klashify.com
1. General Provisions
1.1. This Privacy Policy applies to all customers and website visitors whose personal data is collected and processed by the Data Controller.
1.2. A Customer is any person who purchases goods or services via [https://klashify.com].
1.3. The Data Controller processes personal data lawfully, fairly, and securely, in compliance with applicable legislation.
2. Collection and Use of Personal Data
2.1. Personal data is primarily collected electronically via the website and email. No data is collected or stored on paper.
2.2. By submitting their personal data, the customer grants permission for the Data Controller to collect, manage, and use the data for the purposes described in this policy.
2.3. The customer is responsible for the accuracy and completeness of the provided data. Intentionally submitting false information is a violation of this policy.
2.4. The Data Controller is not liable for any consequences caused by incorrect or misleading data provided by the customer.
3. Categories and Legal Grounds for Data Processing
3.1. The Data Controller may collect and process the following personal data:
First and last name
Email address
Phone number
Delivery address (if applicable)
Billing details and account number
Payment method information (processed securely via Maksekeskus AS)
3.2. Publicly available data may also be collected when necessary and legally permitted.
3.3. The legal grounds for processing personal data include:
The customer’s consent
The necessity to fulfill a contract
Legal obligations (e.g. accounting)
Legitimate interests (such as improving service), unless overridden by the customer’s fundamental rights
4. Purposes and Retention of Data
4.1. Personal data is processed for the following purposes:
Ensuring security and legal compliance
Processing and fulfilling customer orders
Maintaining the functionality and operation of the e-store
Managing customer relationships and support
Fulfilling accounting and financial obligations
Sending marketing communications (only with explicit consent)
4.2. Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. For example:
Order-related and financial data is kept for up to 7 years to comply with accounting regulations
Customer support and communication data may be retained for up to 3 years after the last interaction
Marketing data is stored until consent is withdrawn
4.3. The Data Controller may share customer data with authorized third parties, such as:
Accountants
Transport and courier services
Payment providers (e.g., Maksekeskus AS)
4.4. Technical and organizational security measures are in place to protect personal data against accidental or unlawful destruction, alteration, disclosure, or unauthorized access.
5. Data Subject Rights
Customers and data subjects have the following rights:
To access and review their personal data
To request information about how their data is processed
To correct or update inaccurate data
To withdraw consent at any time, where applicable
To request deletion of data in certain cases
To submit complaints to the Estonian Data Protection Inspectorate (www.aki.ee)
To exercise these rights, please contact us at katlin@klashify.com.
6. Final Provisions
6.1. This Privacy Policy complies with the EU General Data Protection Regulation (Regulation (EU) 2016/679), the Estonian Personal Data Protection Act, and other applicable laws.
6.2. The Data Controller reserves the right to update or amend this Privacy Policy at any time. The most current version is always available at [https://klashify.com].