Privacy Policy

Last updated: September 4, 2026

Ergo Tüür ("we", "us" or "our") operates this website and provides training and related services in Estonia. This Privacy Policy explains how we collect, use, store and disclose personal information when you visit our website, contact us, purchase our services or otherwise interact with us.

We process personal information in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and other applicable data protection laws.

For the purposes of applicable data protection laws, Ergo Tüür is the data controller of the personal information described in this Privacy Policy.

1. Personal information we collect

Depending on how you interact with us, we may collect the following information:

Information you provide to us

When you contact us through our contact form or by email, we may collect:

• your name;

• your email address;

• your phone number, if you choose to provide it; and

• the contents of your message and any other information you choose to provide.

When you purchase one of our services, we may collect information necessary to process and manage your purchase, such as your name, email address, billing information, transaction details and the service you purchased.

Payment information

Payments made through our website are processed using Shopify Payments. Payment information is processed through Shopify and its payment-processing infrastructure. We do not need to receive or store your full payment card details ourselves in order to process your payment.

Shopify may process personal information in connection with payment processing, fraud prevention, security and regulatory requirements. Shopify Payments is available for online payments in Estonia and may require information to verify customers and transactions.

You can learn more about how Shopify processes personal information in the Shopify Privacy Policy.

Information collected automatically

When you visit our website, certain technical information may be collected automatically by Shopify and the technologies used to operate the website. This may include information such as your IP address, browser type, device information, network information and information about how you interact with the website.

We use this information primarily to operate, secure and maintain the website and to detect and prevent fraudulent or malicious activity.

2. How we use your personal information

We may use your personal information for the following purposes:

Providing and managing our services

We use your information to:

• process purchases of our services;

• communicate with you about your purchase or enquiry;

• provide and manage the services you request;

• respond to customer support enquiries; and

• otherwise perform our contractual obligations to you.

The legal basis for this processing is performance of a contract or taking steps at your request before entering into a contract.

Communicating with you

If you contact us, we use the information you provide to respond to your enquiry and communicate with you about your request.

The legal basis for this processing is generally legitimate interests or, where applicable, taking steps at your request before entering into a contract.

Accounting and legal obligations

We may process personal information where necessary to comply with legal obligations, including accounting, tax, financial reporting and other legal requirements applicable to our business.

The legal basis for this processing is compliance with a legal obligation.

Security and fraud prevention

We may process personal information to maintain the security of our website and services, prevent fraud, detect malicious or unlawful activity and protect our rights and the rights of our customers.

The legal basis for this processing is generally our legitimate interests in maintaining a secure and reliable service and, where applicable, compliance with a legal obligation.

3. Marketing

We do not currently use personal information for email marketing or targeted advertising.

If we introduce marketing communications in the future, we will update this Privacy Policy and, where required by law, obtain your consent before sending marketing communications to you.

Where we rely on consent for marketing, you will be able to withdraw your consent at any time.

You may also be able to unsubscribe from marketing emails using the unsubscribe link included in those communications.

4. Cookies and similar technologies

Our website uses cookies and similar technologies that are necessary for the operation, security and functionality of the Shopify platform.

Shopify may also use cookies and similar technologies for analytics, personalization and other purposes depending on the configuration of our store and the services we use.

We currently do not use Google Analytics.

If we introduce additional analytics, advertising or other non-essential tracking technologies, we will update this Privacy Policy and, where required, provide an appropriate cookie consent mechanism before using those technologies.

You can also manage certain cookie settings through your browser and, where available, through the cookie controls provided on our website.

5. Who we share your information with

We may share personal information with third parties where necessary to operate our business and provide our services.

These may include:

Shopify

Our website is hosted and powered by Shopify. Shopify may process personal information on our behalf in order to provide website hosting, checkout, order management, security and other Shopify services.

Shopify may also process certain information as an independent data controller for purposes described in its own privacy policies.

For more information, see the Shopify Privacy Policy.

Payment providers

Payments are processed using Shopify Payments. Shopify and the relevant payment-processing providers may process information necessary to complete transactions, prevent fraud, maintain payment security and comply with applicable legal and regulatory requirements.

Service providers

We may use other service providers where necessary to operate our business, such as providers of website technology, email services, IT services, accounting services or other professional services.

Such providers will receive personal information only where necessary for the services they provide to us and will process it in accordance with applicable data protection requirements.

Legal requirements

We may disclose personal information where required by law, regulation, court order or other valid legal process, or where necessary to establish, exercise or defend our legal rights.

We may also disclose information where necessary to protect the security of our website, business, customers or other persons.

6. Shopify and international data transfers

Because our website is powered by Shopify, personal information may be processed by Shopify and its service providers in countries outside the European Economic Area (EEA).

Shopify states that personal information relating to individuals in the EEA may initially be processed by Shopify International Limited in Ireland and may subsequently be processed by Shopify affiliates and service providers in other countries, including countries outside the EEA. Shopify uses applicable legal mechanisms for international transfers of personal information.

For more information about Shopify's processing of personal information and international transfers, please see the Shopify Privacy Policy and Shopify Data Processing Addendum.

7. How long we keep your information

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy.

The length of time we retain information depends on the nature of the information and why we need it.

For example:

• enquiry and communication information may be retained for as long as reasonably necessary to respond to and manage the enquiry and our business relationship;

• transaction and accounting information may be retained for as long as required by applicable accounting, tax and other legal obligations; and

• information relating to legal claims may be retained for as long as necessary to establish, exercise or defend those claims.

When personal information is no longer required, we will delete it or otherwise securely dispose of it where reasonably possible.

8. Your rights

Depending on the circumstances and applicable law, you may have the following rights in relation to your personal information:

• Right of access — to request a copy of personal information we hold about you.

• Right to rectification — to request correction of inaccurate or incomplete information.

• Right to erasure — to request deletion of your personal information, subject to applicable legal exceptions.

• Right to restriction — to request that we restrict the processing of your personal information in certain circumstances.

• Right to object — to object to certain processing, including processing based on legitimate interests.

• Right to data portability — in certain circumstances, to receive personal information you have provided to us in a structured, commonly used and machine-readable format and to request that it be transferred to another controller.

• Right to withdraw consent — where we rely on your consent to process your personal information, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

These rights are subject to applicable legal conditions and exceptions.

To exercise your rights, please contact us using the details provided below.

We may need to verify your identity before responding to certain requests.

9. Complaints

If you have concerns about how we process your personal information, please contact us first so that we can try to resolve the issue.

You also have the right to lodge a complaint with the data protection supervisory authority responsible for you.

In Estonia, the supervisory authority is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon).

10. Children's privacy

Our services are not directed at children.

We do not knowingly collect personal information from children where doing so would be unlawful. If you believe that a child has provided us with personal information unlawfully, please contact us and we will take appropriate steps to address the situation.

11. Security

We take reasonable technical and organisational measures to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

However, no method of transmission or electronic storage is completely secure, and we cannot guarantee absolute security.

12. Third-party websites and services

Our website may contain links to third-party websites or services, including social media platforms.

If you follow a link to a third-party website, that website will process your information according to its own privacy policy and terms. We are not responsible for the privacy practices or security of third-party websites.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, technologies, legal requirements or data-processing practices.

When we make changes, we will update the "Last updated" date at the top of this Privacy Policy and, where required by law, provide additional notice.

14. Contact

If you have questions about this Privacy Policy, would like to exercise your data protection rights, or have a concern about how we process your personal information, please contact:

Ergo Tüür
Email: ergo.tuur@gmail.com

For the purposes of applicable data protection laws, Ergo Tüür is the data controller of your personal information.