Privacy Policy

This policy explains what LÄVI collects, why, and what you can do about it. LÄVI is operated by Ecom Projects OÜ, registered in Estonia, which is the data controller for the purposes of the GDPR.

Information we collect

When you visit the site, we automatically collect device and usage data — IP address, browser type, pages viewed, referring URL. This is standard analytics data used to understand how people find and use the site.

When you buy something, we collect your name, billing and shipping address, email address, phone number if you give one, payment information and order contents.

When you subscribe or contact us, we collect your email address and whatever you choose to tell us.

Why we use it

  • To fulfil your order — take payment, ship the product, send tracking and updates (performance of a contract)
  • To answer customer service messages (performance of a contract)
  • To send marketing email, only if you opted in, with an unsubscribe link in every message (consent)
  • To improve the site, our products and our advertising (legitimate interests)
  • To detect and prevent fraud (legitimate interests)
  • To meet tax and regulatory obligations (legal obligation)

Who we share it with

Only what is needed to run the business:

  • Shopify — our ecommerce platform, which hosts the store and your order data
  • Payment processors — Shopify Payments, PayPal or whichever you used at checkout
  • Our fulfilment and shipping partners — to make and deliver your parcel
  • Email provider — only if you subscribed
  • Analytics and advertising providers — including Google and Meta, for measurement and advertising

We do not sell your personal information.

How long we keep it

Order and invoice records are kept for 7 years, as Estonian accounting law requires. Marketing data is kept until you unsubscribe or ask us to delete it. Analytics data is kept in aggregated form.

Your rights

Under the GDPR and equivalent laws you can:

  • Ask what personal data we hold about you, and get a copy
  • Have inaccurate data corrected
  • Have your data deleted, subject to legal retention rules
  • Object to or restrict how we process it
  • Ask for your data in a portable format
  • Withdraw consent at any time, including one-click unsubscribe in every marketing email
  • Opt out of the sharing of personal information for targeted advertising — see Your Privacy Choices

To exercise any of these, email us. If you are in the EU and think we have got it wrong, you can complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) or to your local supervisory authority.

Cookies

We use cookies for analytics, advertising and to remember your cart. You can refuse non-essential cookies in the banner, or disable cookies in your browser — some of the site will stop working properly if you do.

International transfers

We are based in Estonia. Some of our providers process data outside the European Economic Area, including in the United States. Where that happens we rely on Standard Contractual Clauses or an adequacy decision.

Children

This site is not intended for anyone under 16, and we do not knowingly collect their information. If you believe we have, email us and we will delete it.

Updates

We may update this policy. The date below reflects the most recent revision, and we will flag material changes by email if you have shared one with us.

Last updated: 12 August 2026