Privacy Policy | Sorboique

This Privacy Policy describes how sorboique (sorboique Osaühing) collects, uses, and protects your personal information. We are committed to protecting your privacy and handling your data responsibly. This policy applies to our website and all services we provide, including our needle felting and wool craft classes.

Who We Are

We are a digital service provider offering traditional Estonian wool felting and needle sculpting beginner classes. As the data controller, we are responsible for collecting and processing your personal information in accordance with applicable data protection laws. Our services include online class registration, student communications, and course material delivery.

Information We Collect

We collect information in several ways:

Registration Information: When you enroll in our classes, we collect your name, email address, phone number, and payment information.
Communication Data: Messages you send through our contact forms, emails, or inquiries about our classes.
Usage Data: Information about how you interact with our website, including pages visited, time spent, and device information.
Cookies and Tracking: We use cookies to enhance your browsing experience and understand how you use our site.
Payment Information: When you register for classes, we collect payment details processed securely through third-party payment providers.

Legal Basis for Processing

We process your personal information based on the following legal grounds:

Consent: When you provide explicit permission for us to use your data, such as subscribing to newsletters or class updates.
Contract Performance: Processing necessary to fulfill our obligations when you register for classes or purchase services.
Legitimate Interest: When we have a reasonable business need to process your data, such as improving our services or preventing fraud.
Legal Obligation: When required by law, such as tax reporting or regulatory compliance.

How We Use Your Information

We use the information we collect for the following purposes:

Processing your class registration and managing your student account
Delivering course materials, schedules, and class updates
Processing payments and handling billing inquiries
Sending transactional emails related to your enrollment
Improving our website functionality and user experience
Responding to your inquiries and providing customer support
Analyzing website performance and user behavior
Complying with legal obligations and preventing fraud

We do not sell or share your personal information with third parties for marketing purposes. However, we may share data with service providers who assist us in delivering our services, such as payment processors and email providers, under strict confidentiality agreements.

Data Retention

We retain your personal information for specific periods based on the type of data and our business needs:

Class Registration Data: Retained for 24 months after your last interaction with our classes to manage ongoing relationships and provide historical records.
Contact Form Submissions: Retained for 18 months after your last inquiry to handle follow-ups and maintain communication history.
Payment Information: Retained for 36 months as required by tax and accounting regulations.
Website Analytics and Cookies: Retained for 12-14 months to analyze trends and improve our services.
Server Logs: Retained for 12 months for security and technical support purposes.
Email Communications: Retained for 24 months unless you request deletion sooner.

After these retention periods expire, we securely delete your information unless we are required by law to retain it longer.

Your Privacy Rights

You have the following rights regarding your personal information:

Right to Access: You can request a copy of all personal information we hold about you.
Right to Rectification: You can request that we correct inaccurate or incomplete data.
Right to Erasure: You can request deletion of your personal information, subject to certain exceptions.
Right to Restrict Processing: You can ask us to limit how we use your data in certain circumstances.
Right to Data Portability: You can request your data in a portable format and transfer it to another service provider.
Right to Object: You can object to certain types of processing, including marketing communications.
Right to Withdraw Consent: If processing is based on consent, you can withdraw it at any time.

To exercise any of these rights, please contact us using the information provided in the Contact Us section below.

Cookies and Tracking Technologies

We use cookies to enhance your experience on our website. Cookies are small files stored on your device that help us remember your preferences and understand how you use our site. We use both essential cookies (required for website functionality) and analytical cookies (to improve performance). You can control cookie settings through your browser preferences, though disabling some cookies may affect website functionality. For detailed information about our cookie practices, please refer to our Cookie Policy.

Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encrypted data transmission, secure servers, and restricted access to personal data. However, no method of transmission over the internet is completely secure. While we strive to protect your information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.

Children's Privacy

Our services are not directed to children under 13 years of age, and we do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 13 without parental consent, we will delete such information promptly. For younger children interested in our classes, a parent or guardian should manage the registration and account.

Your Supervisory Authority

You have the right to lodge a complaint with the data protection authority if you believe we have violated your privacy rights. The supervisory authority for Estonia is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon). You can contact them to report concerns about our data processing practices or seek guidance regarding your privacy rights.

Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date at the top. Your continued use of our services after such updates constitutes your acceptance of the revised Privacy Policy. We encourage you to review this policy periodically to stay informed about how we protect your information.