Privacy policy

This privacy policy describes how Allikukivi Winery (“we”) handles the personal data of the users of our website, the buyers of our wines, and the visitors who book wine cellar tours and glamping.

1. What data we collect

We collect the following types of data:

• Personal details: name, email address, postal address, phone number and payment-related data.
• Account details: login information and password, if you create an account with us.
• Usage data: information about how you use our website (pages viewed, timestamps, device information).
• Cookies and similar technologies: see section 5 for details.
• Records of communication: emails and messages you send us.

2. Purposes of data use

We use the data for the following purposes:

• Processing and fulfilling orders and bookings.
• Providing customer support and answering your questions.
• Personalising and improving the website experience.
• Sending marketing content with your consent (e.g. a newsletter).
• Meeting legal obligations (accounting, taxes, etc.).

3. Who we share data with

We share data only with trusted parties who help us provide the service: payment providers, courier services, web hosting and email delivery services. Data is passed on only to the extent necessary to provide the service, and the partner concerned is obliged to keep it confidential.

We may also disclose data to the authorities where the law requires it.

4. Data retention

We keep data for as long as necessary to fulfil the purpose and for as long as the law requires (7 years for accounting records). Newsletter contact details are kept until you unsubscribe.

5. Cookies

We use cookies to remember your preferences, measure website performance and improve the user experience. You can control the use of cookies in your browser settings. Disabling some cookies may reduce the functionality of the website.

6. Data security

We use encryption (HTTPS), secure hosting, restricted access for our staff and regular security reviews. Transmission over the internet is never 100% secure, however — we take reasonable steps to minimise the risks.

7. Your rights

You have the following rights regarding your data:

• The right to access the data collected about you.
• The right to have data corrected.
• The right to have data deleted (the “right to be forgotten”).
• The right to restrict processing.
• The right to data portability.
• The right to object.
• The right to lodge a complaint with the Estonian Data Protection Inspectorate.

To exercise your rights, contact us at info@allikukivi.ee.

8. Children’s privacy

Our services are not intended for persons under 18. We do not knowingly collect personal data from minors.

9. Changes to the privacy policy

We may update this policy when necessary. The latest version is always available on the website, marked with the date of the update.

10. Contact

If you have questions, write to info@allikukivi.ee or call +372 525 2800.