Privacy policy
In force from 10.10.2026.
WFISH OÜ (registry code 16414809), located at Kadaka tee 4, Tallinn, Estonia, operates the online store www.wfish.ee. We protect your personal data and process it in accordance with the General Data Protection Regulation (GDPR) and Estonian law.
This privacy policy explains what data we collect, what we use it for, and what rights you have.
Definitions
- Personal data - information that identifies a person directly or indirectly.
- Processing - any operation on personal data: collection, storage, modification, deletion.
- Controller - WFISH OÜ, which decides why and how the data is processed.
What data we collect
- Contact and delivery details - name, email, phone, delivery and billing address; for company purchases also company name, registry code and VAT number.
- Order data - the goods bought, the amount, payment method, delivery method, order history.
- Payment data - we never see or store your bank or card details. They are handled by the payment service provider.
- Account data - if you sign in with a Google account, we receive your name and email address.
- Technical data - IP address, browser type, pages viewed. This is collected for analytics only with your consent.
Why, and on what legal basis
| Purpose | Legal basis |
|---|---|
| Fulfilling and delivering your order | Performance of a contract |
| Accounting and tax records | Legal obligation |
| Customer support and complaints | Contract, legitimate interest |
| Store security and fraud prevention | Legitimate interest |
| Counting sales and reviews, without personal data | Legitimate interest |
| Newsletter and offers | Consent |
| Analytics and usage measurement | Consent |
Who we share data with
We do not sell or rent your data. We share it only where it is needed to provide the service:
| Recipient | Purpose |
|---|---|
| Montonio Finance UAB | Payment handling and delivery booking |
| Google Ireland Ltd | Checks whether your device can pay with Google Pay, on the payment step |
| Delivery partners (parcel machines and couriers) | Delivering the goods |
| Erply | Invoices and stock records |
| PostHog Cloud EU (Frankfurt) | Analytics with your consent; counting sales and reviews, without personal data |
| Accounting service provider | Statutory bookkeeping |
Data may also be disclosed where the law requires it, or in a merger or sale of the business.
How long we keep data
- Order and invoice data - 7 years, as required by the Accounting Act.
- Account data - until the account is deleted.
- Newsletter data - until you withdraw consent.
- Analytics data - up to 12 months.
Your rights
You have the right to:
- see the data we hold about you,
- have inaccurate data corrected,
- have your data erased,
- have processing restricted,
- receive your data in a machine-readable form and transfer it,
- object to processing based on legitimate interest,
- withdraw any consent at any time.
Withdrawing consent does not make processing that happened before the withdrawal unlawful.
To exercise these rights, write to epood@wfish.ee. We answer within one month.
Cookies
Cookie use is described in a separate cookie policy. Analytics runs only with your consent, and you can change that consent at any time using the Cookie settings button in the page footer.
Data security
We use technical and organisational safeguards: encrypted connections, restricted access to data and regular backups. No method of transmission is completely secure, so we cannot give an absolute guarantee.
Where data is held
Data is held in the European Union. If data were ever transferred outside the European Economic Area, we would do so only with appropriate safeguards, such as the European Commission's standard contractual clauses.
Children's data
The online store is not aimed at people under 16 and we do not knowingly collect their data. If such data reaches us, we delete it.
Changes
We may update this privacy policy. A new version is published on this page with an updated effective date.
Contact and complaints
Controller: WFISH OÜ, Kadaka tee 4, Tallinn, Estonia. Email: epood@wfish.ee. Phone: +372 56669984.
If you believe we process your data unlawfully, you may complain to the Estonian Data Protection Inspectorate (Tatari 39, 10134 Tallinn, info@aki.ee, +372 627 4135).