Skip to content

Privacy policy

The controller of your personal data is Gita OÜ (registry code 14005646), the owner of the online shop luxtester.ee. Contact: info@luxtester.ee, +372 56472763. The company details are also in the terms and conditions.

1. What data we collect

  • Order data: name, e-mail, phone, delivery method and parcel machine or delivery address with country, the products ordered and amounts, payment method and payment reference, and your note on the order.
  • Account data (if you create an account): in addition to the above, your password, newsletter consent and favourites. We keep the password only in encrypted form – nobody can see it, not even us.
  • Data from the old shop: if you had an account in our previous online shop and ordered within the last 3 years, we moved your account and order history to the new shop so you can keep logging in with the same details.
  • Technical data: a session cookie (for the cart and logging in); a visit log – IP address, browser and device type, pages opened and cart size; IP addresses are also used to limit failed login attempts.

You enter bank and card details only on the bank’s or payment service’s page – our shop never sees or stores them.

2. What we use the data for

  • To fulfil and deliver your order and to communicate with you (performance of a contract).
  • For accounting and other legal obligations.
  • To keep your account, if you have created one.
  • To send news only if you have given your consent. You can withdraw consent at any time (My account → My details).
  • To keep the shop secure, prevent fraud and attacks, and monitor how the shop works (legitimate interest). Only the shop’s staff can see the visit log.

3. Who we share data with

Only those who help fulfil your order – and only as much as needed:

  • Zone Media OÜ – web hosting and e-mail.
  • EveryPay AS – bank link payments.
  • ESTO AS – ESTO 3 payments. When you sign the payment schedule, ESTO also processes your data itself (identification and creditworthiness check) under its own privacy terms.
  • PayPal (Europe) S.à r.l. et Cie, S.C.A. – PayPal payments.
  • AS Eesti Post (Omniva) and SmartPosti OÜ – parcel delivery: name, phone, e-mail and parcel machine or address.
  • Our accountant and public authorities – only where the law requires it.

We don’t sell your data or give it to anyone for marketing.

Data is processed in the European Union. Outside the EU, data may be processed by PayPal (under its own terms and the EU standard contractual clauses) and by the postal service of the destination country if you order a parcel outside the EU.

4. How long we keep data

  • Orders – 7 years, as accounting law requires.
  • Account – until you delete it (My account → My details → Delete account). Deleting removes the account, favourites and the old shop’s order history; orders from the new shop are kept for accounting.
  • Backups – up to 30 days.
  • Session cookie – up to 30 days; visit log and IP addresses of login attempts – up to 24 hours (the visit log is not included in backups). Individual IP addresses we have marked for security reasons (e.g. repeated attack attempts) are kept for as long as necessary.

5. Cookies

We use only one strictly necessary cookie, which remembers your cart and login. We don’t use advertising or analytics cookies or third-party tracking, and the whole site – fonts and images included – is loaded from our own server. The visit log (see section 1) is kept on our server and is not shared with anyone.

6. Your rights

You have the right to access your data, have it corrected or deleted, restrict its processing, object to processing and receive your data in a portable form. You can do most of this yourself under My account; otherwise write to info@luxtester.ee – we reply within one month.

If you believe your data has been processed incorrectly, you can contact the Estonian Data Protection Inspectorate (www.aki.ee).

7. Security

All connections are encrypted (HTTPS), passwords are hashed, and only the shop’s staff can access the data.

This English text is a translation; if it differs from the Estonian privacy policy, the Estonian version applies. Last updated 14.11.2026.