Privacy policy

Last updated: 23 September 2026

1. Data controller

The controller of personal data is LMKK Group OÜ, registration number 12666810, address Vinkli tn 4, 50411 Tartu, Estonia. For data protection questions, contact info@avenelle.ee or call +372 5599 7100.

2. What data we process

We may process your name, email address, phone number, billing and delivery addresses, selected parcel locker or collection point, order and return details, payment status, customer correspondence and technical data related to your use of the website, such as IP address, device and browser information, and cookie data.

The store does not receive online banking credentials or complete card details entered through OPAY, a bank or a card network.

3. Purposes and legal bases

  • receiving an order, confirming payment, shipping goods, processing returns and providing customer service – performance of a contract;
  • accounting, tax records and obligations related to consumer rights – legal obligation;
  • preventing fraud, securing the service and protecting legitimate claims – legitimate interests;
  • newsletters and direct marketing – consent, which can be withdrawn at any time.

4. Service providers and recipients of data

The following service providers may process data to the extent necessary to provide their services:

  • Shopify – the technical platform for the store, cart, orders and customer accounts;
  • UAB OPAY solutions (OPAY) and the bank or card service provider involved in the payment – initiating and confirming payments, preventing fraud and processing refunds;
  • the Parcely app – storing the selected delivery method and collection point, forwarding the order to the carrier, and creating shipping labels and tracking information where needed;
  • the carrier selected by the buyer, such as Omniva, SmartPosti or DPD – delivery and notifications;
  • accounting, IT, email, analytics and customer service providers to the extent necessary to provide their services.

Depending on their role, service providers act as processors or independent controllers. If data is processed outside the European Economic Area, applicable safeguards are used, such as an adequacy decision of the European Commission or standard contractual clauses.

5. Retention

Order and customer correspondence data is kept for as long as necessary to perform the contract and resolve possible claims. Accounting records are kept for the period required by law, generally seven years. Marketing data is kept until consent is withdrawn. Technical data is kept only for the time necessary to fulfil its purpose.

6. Cookies

The store uses strictly necessary cookies to operate the store and cart. Analytics and marketing cookies are used in accordance with cookie settings and applicable consent. You can change your cookie choices in the store's cookie settings or in your browser.

7. Your rights

You have the right to request access to, correction or erasure of your data, restriction of processing, data portability and to object to processing. Consent for processing based on consent may be withdrawn at any time. Send requests to info@avenelle.ee. You also have the right to lodge a complaint with the Estonian Data Protection Inspectorate.

8. Security and changes

We apply reasonable technical and organisational measures to protect data. This privacy policy may be changed if services, providers or legislation change. The current version is published on this page with the date of its last update.