This Privacy Policy explains how Lehtly OÜ (“we”, “us”, or “our”) collects, uses, and protects your personal data when you visit our website https://lehtly.com or make a purchase from us. We comply with the EU General Data Protection Regulation (GDPR) and applicable Estonian data protection laws.
Who we are
Company name: Lehtly OÜ
Registry code: 17318551
VAT number: EE102897496
Address: Koru põik 3-5, Alliku küla, 76403 Saue vald, Harju maakond, Estonia
Support email: support@lehtly.com
Main email: lehtly@lehtly.com
Legal basis for processing
We process personal data under the following legal bases:
- To perform a contract — fulfilling your orders and providing support.
- To comply with legal obligations — accounting, tax, and consumer protection laws.
- Based on consent — for optional activities such as newsletter subscriptions or marketing.
- Based on legitimate interests — to maintain website security and improve our services.
What personal data we collect and why
- Contact details (name, email, phone) for order processing and communication.
- Billing and shipping address to deliver products.
- Payment information processed securely by MakeCommerce (Maksekeskus AS).
- Order history and customer communication records for support and warranty purposes.
- Technical data (IP address, device type, browser info) collected via Google Analytics for performance and security analysis.
Cookies
Our website uses cookies and similar technologies to ensure proper functionality, improve user experience, and analyze website traffic. Cookies are small text files stored on your device when you visit our website.
We use both essential cookies (necessary for website operation) and optional cookies (for analytics and marketing). Optional cookies are only used after you give your consent through our cookie banner powered by CookieYes.
You can change or withdraw your cookie consent at any time by clicking the cookie settings link displayed on our website. You can also control or delete cookies through your browser settings, but please note that disabling some cookies may affect the website’s functionality.
For more information about the specific cookies used on our website, please refer to the cookie list available via our consent banner or cookie settings link.
Third-party services
- Payments: Processed by MakeCommerce (Maksekeskus AS).
- Shipping: Handled by DHL and DPD, which receives delivery-related data (name, address, phone).
- Analytics: Google Analytics collects anonymous usage data to help us improve website performance.
Data retention
We retain data only as long as necessary to fulfill the purposes described above or as required by law:
- Accounting data are kept for 7 years in accordance with Estonian accounting rules.
- Order and customer communication data are kept for 3 years after the last contact unless a longer period is required to resolve legal or contractual matters.
Your data protection rights
- Right to access your personal data.
- Right to correct inaccurate or incomplete data.
- Right to request deletion of your data when no longer necessary.
- Right to restrict or object to processing in certain circumstances.
- Right to data portability (to receive your data in a structured, machine-readable format).
- Right to withdraw consent for processing based on consent.
You can exercise these rights by contacting us at support@lehtly.com. We will respond within one month.
Data security
We protect your personal data using secure servers, encrypted connections (SSL), and restricted access. We continuously monitor our systems to prevent unauthorized access, disclosure, or misuse.
International data transfers
Some service providers (such as Google and DHL) may process data outside the European Economic Area. In these cases, we ensure compliance through EU Standard Contractual Clauses or adequacy decisions under GDPR.
Contact and complaints
For privacy questions or concerns, please contact us at support@lehtly.com.
If you believe your data is processed unlawfully, you may contact the Estonian Data Protection Inspectorate (info@aki.ee).
Effective date: October 2025