Privacy terms


The controller of the personal data of the Village of Hope website is lootusekü 80135949, located at Laitse, 76313 Harju County, phone +372 671 6198 and e-mail

What personal data is being process

  • name, phone number and email address;
  • bank account number;
  • cost of goods and services and payment related information (donation history);
  • customer support information.

The purpose for which personal data are processed

Personal information is used to manage customer orders and deliver goods. Donation history data (date of purchase, merchandise, quantity, customer details) is used to compile a donation overview and analyze customer preferences. The bank account number is used to refund payments to the customer. Personal data such as email, phone number, customer name is processed to resolve issues related to the delivery of goods and services (customer support). The web site user IP address or other network identifiers are processed to provide the web store as an information society service and to generate web usage statistics.

Legal basis

Personal data are processed for the purpose of executing the contract with the client. The processing of personal data takes place to fulfill a legal obligation (eg accounting and consumer dispute resolution).

Recipients to whom personal data are transmitted

Personal information is passed to the online store customer support to manage purchases and purchase history, and to resolve customer issues.

The name, phone number and e-mail address will be forwarded to the transportation provider of your choice. In the case of goods delivered by courier, the address of the customer shall be provided in addition to the contact details.

If the online store is accounted for by a service provider, personal data will be transferred to the service provider for accounting purposes.

Personal data may be transferred to information technology service providers if this is necessary to ensure the functionality of the web store or data hosting.

Security and data access

Personal data is stored on servers located in the territory of a Member State of the European Union or countries that are members of the European Economic Area. Data may be transferred to countries that have been assessed by the European Commission as having an adequate level of data protection and to US companies that are affiliated with the Privacy Shield framework.

Access to personal information is available to employees of the Village of Hope who can access personal information in order to resolve technical issues related to the use of the online store and provide customer support.

The Website implements appropriate physical, organizational and IT security measures to protect personal information from accidental or unlawful destruction, loss, alteration or unauthorized access and disclosure.

The transfer of personal data to authorized processors of the web site (eg data hosting) is subject to agreements between the web shop and the authorized processors. Controllers are required to provide appropriate safeguards for the processing of personal data.

Access and rectification of personal data

Personal information can be accessed and corrections made to the online store user profile. If the purchase is made without a user account, personal information can be accessed through Client Support.

Withdrawal of consent

By e-mail

If the processing of personal data takes place on the basis of the customer’s consent, the customer has the right to withdraw the consent by notifying thereof.

In the case of disputes concerning payments and consumer disputes, personal data shall be retained until such time as the claim has been fulfilled or until the limitation period has expired.

The personal data necessary for accounting purposes shall be kept for seven years.


Contact customer support via email to delete your personal information. The request for erasure shall be replied to within a period not exceeding one month and the period for erasure shall be specified.


Requests for the transfer of personal data by e-mail shall be replied to within a maximum of one month. Customer Support identifies and informs you of personal data that is subject to transfer.

Direct marketing messages

The email address and phone number will be used to send direct marketing messages, subject to customer consent. If the customer does not wish to receive direct marketing notices, either select the appropriate reference in the footer of the email or contact customer support.

If personal data are processed for direct marketing purposes (profiling), the customer has the right to object at any time to the initial and further processing of their personal data, including profile analysis related to direct marketing, by notifying them.

Resolving the disputes

By e-mail

Disputes related to the processing of personal data are resolved through customer support (CONTACT DETAILS). The supervisory authority is the Estonian Data Protection Inspectorate (

Your company is the controller of the personal data, your company and the authorized employee forward the personal data necessary for making payments to Maksekeskus AS.