Liigu sisu juurde

Legal information

Privacy Policy

In effect from: 21.06.2026 · Last updated: 21.06.2026

Migotona OÜ (registry code 17484025) respects your privacy and processes personal data in accordance with the European Union General Data Protection Regulation (GDPR, Regulation 2016/679) and the Estonian Personal Data Protection Act.

1. Data controller

Migotona OÜ
Registry code: 17484025
VAT no: EE102976456
Address: Side tn 6, 79805 Kohila alev, Kohila vald, Rapla maakond
Email: [email protected]
Telephone: +372 5342 5325

2. What data we collect

2.1 Order data

When you place an order, we collect:

  • First and last name
  • Email address
  • Telephone number
  • Delivery address (parcel locker code or address)
  • Payment information (payment is processed through the Montonio payment service; card and account details never reach our servers)

2.2 Personalisation files

Logos and design files uploaded during configuration are stored securely in Cloudflare R2 cloud storage. The files are linked to a specific order and are deleted within 6 months of the order being fulfilled.

2.3 Contact form data

A message sent via the contact form (name, email, telephone, message content) is stored in our database and used to answer your question.

2.4 Shopping cart and local storage

The shopping cart is stored in your device's localStorage — the data does not travel to the server until you place an order. With your consent, we use Google Analytics 4 cookies (_ga, _ga_*) for statistical purposes; without consent they are not set. We do not use advertising or remarketing cookies. See also the cookie notice.

3. Purpose and basis of data processing

Data category Purpose Legal basis (GDPR)
Order data Order fulfilment, delivery, payment Art 6(1)(b) — performance of a contract
Personalisation files Engraving artwork for production Art 6(1)(b) — performance of a contract
Contact form data Responding to enquiries Art 6(1)(f) — legitimate interest
Email address (confirmation emails) Sending the order confirmation Art 6(1)(b) — performance of a contract
Web analytics (Google Analytics) Visit statistics and improving the store Art 6(1)(a) — consent

4. Data retention

We retain order and accounting data for 7 years after the order is fulfilled, in accordance with the requirements laid down in the Accounting Act. We retain contact form messages for up to 1 year. Personalisation files are deleted 6 months after the order is fulfilled.

5. Sharing data with third parties

We do not sell or pass on your personal data to third parties, except:

  • Montonio — payment processing (Estonian fintech, GDPR-compliant)
  • Omniva / DPD / Itella — for arranging delivery (only the information necessary for delivery)
  • Cloudflare — web hosting and file storage (GDPR DPA concluded)
  • Resend — email service provider (only for sending emails)
  • Google (Google Ireland Limited) — web analytics (Google Analytics 4), only with your consent; data may be transferred outside the EEA on the basis of Google's standard contractual clauses (SCCs)

Data is not transferred outside the European Economic Area, except where appropriate safeguards (SCCs or similar) are ensured.

6. Your rights

You have the right to:

  • Access the personal data we process about you
  • Rectify inaccurate data
  • Erase your data ("the right to be forgotten") where there is no legal basis for the processing
  • Restrict processing in the event of a dispute
  • Object to processing based on legitimate interest
  • Data portability — receive your data in a structured format
  • Lodge a complaint with the Estonian Data Protection Inspectorate (aki.ee)

To exercise your rights, write to: [email protected]. We respond within 30 days.

7. Security

All data is transmitted over an HTTPS connection. The database and files are protected by access control mechanisms. Only authorised persons have access to the data.

8. Web analytics (Google Analytics 4)

With your consent, we use the Google Analytics 4 (Google Ireland Limited) service to understand how visitors use the store. Analytics collects pseudonymised data: pages visited, session duration, approximate location (country/city based on IP address, which Google truncates/anonymises), device and browser type, and referrer. The data is used only as aggregate statistics and is not linked to your identity. We use the cookies _ga and _ga_*. Legal basis: consent (GDPR Art 6(1)(a)), which you give in the cookie banner. We have implemented Google Consent Mode v2 — analytics cookies are not set before consent, and advertising data (ad_storage, ad_user_data, ad_personalization) is disabled by default. The retention period in Google Analytics is 14 months. You can withdraw your consent at any time in the manner described in the cookie notice, via the "Cookie preferences" link in the page footer, or using the Google opt-out add-on: tools.google.com/dlpage/gaoptout. Google's data processing is governed by policies.google.com/privacy.

9. Contact for privacy matters

For questions relating to privacy, write to: [email protected]

Migotona · [email protected] · +372 5342 5325