Privacy policy

Data controller

Nurme Looduskosmeetika OÜ · Taara pst 1, 45109 Tapa, Lääne-Viru maakond, Eesti · Reg nr 11708742 · KMKR EE101313515 · info@nurme.eu · +372 5199 4494

For any privacy questions write to info@nurme.eu.

What we process

Name, email, phone, delivery and billing address, order history, account data, product reviews and correspondence with us.

Purposes and legal bases

Fulfilling orders and running your account — performance of a contract (GDPR Art. 6(1)(b)).

Newsletter and analytics/marketing cookies — only with your consent (Art. 6(1)(a)), which you can withdraw at any time.

Accounting — legal obligation (Art. 6(1)(c)). Fraud prevention and service improvement — legitimate interest (Art. 6(1)(f)).

Processors

We share data only as needed to fulfil your order: Stripe (card payments), Montonio Finance UAB (bank links), Omniva (delivery), hosting by Hetzner (EU). Emails are sent from our own EU-based server.

No personal data is sent to the AI assistants (recommendations, search).

Cookies

Essential cookies (session, cart, login) always work. Analytics and marketing cookies are used only after your consent in the banner. To change consent, clear this site's cookies or contact us.

Retention

Account data is kept until you delete your account. Accounting records are kept for 7 years (Estonian Accounting Act). Technical logs up to 12 months.

Your rights

Access and portability: download all your data from your account. Deletion: delete your account yourself — data is anonymised; order records are retained due to accounting obligations.

Rectification and consent withdrawal: in your account or via info@nurme.eu. Complaints: Estonian Data Protection Inspectorate, aki.ee.

Security

All traffic is TLS-encrypted. Passwords are stored only as hashes. Card data never touches our servers — it is processed by Stripe.