Draft for review. Staeger, and ideally a lawyer, must check this text before the page goes live. Text in [square brackets] still needs input. Remove this paragraph when the text is final.

1. Who we are

Staeger OÜ (registry code 17328437, VAT number EE102902491), [street address], Otepää, Estonia, is responsible for the personal data described in this policy. For any question about your data, email info@staeger.co.

2. What this policy covers

This policy covers staeger.co and the Staeger online shop, including the checkout, which runs on Shopify.

3. What we collect and why

• Orders. Name, company name, email address, phone number, delivery and billing address, what you ordered and the payment status. We need this to process, deliver and invoice your order, and to meet our accounting and tax obligations.
• Messages. When you email us, we keep your message and contact details so we can answer you.
• Payments. Payments are handled by our payment provider. We never see or store your full card details.
• Website. Our hosting providers process technical data, such as your IP address and browser type, to deliver the website securely.

We process order data to perform our contract with you and to comply with the law, and messages and technical data on the basis of our legitimate interest in answering you and running a secure website.

4. Cookies and local storage

staeger.co does not use analytics or advertising cookies. The shopping cart keeps a cart identifier in your browser’s local storage, so your cart is still there when you come back. This is strictly necessary for the shop to work. Shopify’s checkout sets its own cookies, which are needed to complete a purchase.

[If analytics or advertising tools are added later, this section is updated and a cookie banner is added first.]

5. Who we share data with

We share personal data only with service providers that help us run the shop, under agreements that protect it:

• Shopify: online shop and checkout
• Webflow: website hosting
• [Payment provider, e.g. Shopify Payments]
• [Carrier(s), e.g. Omniva or DPD]: to deliver your order
• [Invoicing or accounting software]
• Our accountant and the tax authorities, where the law requires it

We do not sell personal data.

6. Transfers outside the EU

Some of these providers may process data outside the European Economic Area. Where that happens, the transfer is covered by safeguards such as an adequacy decision or the European Commission’s standard contractual clauses.

7. How long we keep data

Order and invoice data are kept for as long as Estonian accounting law requires, currently seven years. Messages are kept for as long as we need them to handle your question, and deleted after [12 months].

8. Your rights

You can ask for access to your data, correction, deletion, restriction of processing, or a copy in a portable format, and you can object to processing based on our legitimate interest. Email info@staeger.co. You can also lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), aki.ee.

9. Changes

We update this policy when our services or the law change. The date at the top shows the current version.