Last updated: 01.07.2026
This Privacy Policy explains how Designation OÜ (“Designation”, “we”) collects and processes personal data through shop.designation.ee (the “Shop”). We are the data controller for the personal data described here.
1. Contact
Designation OÜ, Estonia
Email: info@designation.ee
2. What we collect and why
| Data | Why we process it | Legal basis (GDPR) |
|---|---|---|
| Name, email, billing address, company, VAT number | Process your order, issue invoices, deliver products | Contract |
| Payment information (handled by our payment provider) | Take payment | Contract |
| Order history, license keys, download logs | Provide updates, verify licenses, support | Contract / legitimate interest |
| Support messages | Answer your enquiries | Contract / legitimate interest |
| IP address, device, browser, pages visited | Security, fraud prevention, analytics | Legitimate interest / consent (analytics cookies) |
| Email (newsletter) | Send product updates you asked for | Consent |
We do not sell your personal data.
3. Cookies
We use cookies for essential shop functionality (cart, login, checkout), and, with your consent, for analytics and marketing. See the Cookie Policy for details and how to change your choices.
4. Who we share data with
We share the minimum amount of data needed with trusted service providers acting as processors under written agreement:
- Hosting & CDN — infrastructure providers hosting the Shop.
- Payment processing — Stripe / PayPal / relevant provider (they handle card data directly; we never store card numbers).
- Email delivery — for transactional and marketing email.
- Analytics — with your consent only.
- Accounting — for legally required bookkeeping and invoicing.
We may disclose data if required by law or to protect our rights.
5. International transfers
Some processors may be located outside the EU/EEA. Where that happens, transfers are protected by Standard Contractual Clauses or an equivalent legal mechanism.
6. Retention
- Order & invoice data — kept for 7 years (Estonian accounting law).
- Customer account & license data — kept while your account is active, plus 3 years.
- Support tickets — 3 years after the last interaction.
- Marketing consent — until you withdraw it.
7. Your rights
Under GDPR you have the right to: access, rectify, erase, restrict or object to processing, data portability, and withdraw consent at any time. To use these rights, write to info@designation.ee. You also have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon).
8. Security
The Shop runs over HTTPS. Passwords are hashed. Access to customer data is limited to team members who need it. Payment data is handled entirely by PCI-DSS compliant providers.
9. Children
The Shop is not directed at children under 16 and we do not knowingly collect their data.
10. Changes
We may update this Policy. The current version always lives at this URL with a “last updated” date.