Legal
Privacy Policy
HairFresh OÜ (registry code 16689423) values your privacy and is committed to protecting your personal data. This policy explains how we collect, use, and protect your information when you use emmebi.ee.
1. Data Controller
The data controller is HairFresh OÜ, located at Laada 41, 44314 Rakvere, Estonia. For any questions regarding the processing of personal data, please contact us at [email protected].
2. Personal Data We Collect
We collect the following personal data when you place an order: name, email address, phone number, delivery address, and payment information. When you create an account, we also store your login credentials. We may also collect data about your use of the website through cookies and analytics tools.
3. Purpose of Data Processing
We process your personal data for the following purposes: fulfilling your orders and delivering products; processing payments; communicating with you about your orders; providing customer support; sending marketing communications (only with your consent); improving our website and services; complying with legal obligations.
4. Legal Basis
We process your personal data based on: performance of a contract (processing orders, delivery); your consent (marketing emails, cookies); legitimate interest (website improvement, fraud prevention); legal obligation (accounting, tax reporting).
5. Data Retention
We retain your personal data for as long as necessary to fulfil the purposes for which it was collected. Order data is retained for 7 years as required by accounting legislation. Account data is retained until you request deletion. Marketing consent data is retained until you withdraw consent.
6. Data Sharing
We may share your personal data with: delivery service providers (DPD, Omniva, SmartPost, Venipak) for order fulfilment; payment service providers (Montonio) for payment processing; IT service providers for website hosting and maintenance. We do not sell your personal data to third parties.
7. Your Rights
You have the right to: access your personal data; request correction of inaccurate data; request deletion of your data; restrict processing of your data; data portability; withdraw consent at any time; lodge a complaint with the Data Protection Inspectorate (www.aki.ee). To exercise your rights, contact us at [email protected].
8. Cookies
Our website uses cookies to ensure functionality, analyse traffic, and personalise content. Essential cookies are necessary for the website to function. Analytics cookies help us understand how visitors interact with the website. You can manage your cookie preferences through your browser settings.
9. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. All data transmission is encrypted using SSL/TLS technology.
10. Changes to This Policy
We may update this privacy policy from time to time. The current version is always available at emmebi.ee. Last updated: April 2026.