Privacy Policy

KALEW is operated as a small Estonian project. The data controller can be reached at support@kalew.ee.

Depending on how you use the site, we may process:

• Order data: name, email, shipping address, phone number, items purchased.
• Payment data: handled by Stripe; we never store full card numbers.
• Fulfillment data: shared with Printful to produce and ship your order.
• Technical data: IP address, browser, device, referrer, pages viewed.
• Cookies: see the Cookies section below.

We rely on contract performance (to fulfil your order), legal obligation (accounting, tax), and our legitimate interest in keeping the store secure and improving the experience.

We share the minimum necessary data with: Stripe (payments), Printful (production and shipping), Vercel (hosting), Neon (database), Google Analytics (anonymised traffic stats). Each provider has its own privacy terms.

Order and accounting data is kept for 7 years as required by Estonian law. Marketing logs and analytics are kept up to 26 months and then anonymised or deleted.

Under GDPR you have the right to:

• access the personal data we hold about you
• request correction or deletion
• restrict or object to processing
• data portability
• lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon)

To exercise any of these rights, write to support@kalew.ee.

We use a small number of strictly necessary cookies (cart, language, session). Google Analytics uses cookies to count visits in an aggregated way; you can block them in your browser without breaking the store.

Traffic to kalew.ee is encrypted (HTTPS). Payment data flows directly to Stripe and never touches our servers in plain form.

We may update this policy. The latest version always lives at this URL with a new "last updated" date.

Privacy questions: support@kalew.ee.