Privacy Policy

Last updated: 27 October 2026

This policy explains how Pinwheel collects and uses your personal data when you visit pinwheelshop.com, shop with us, visit our store or subscribe to our newsletter.

1. Who we are
The data controller is Pinwheel Shop OU, registry code 14127520, Suur-Patarei 9, Tallinn, Estonia. For any privacy question, write to happiness@pinwheel.shop or call +372 5670 7755.

2. What data we collect

• Orders and account: name, delivery and billing address, email, phone number, order history and wishlist.
• Pinwheel Customer programme: your customer number and purchases used to calculate your discount.
• Payments: payments are handled by Every-Pay. We do not see or store your full card details.
• Newsletter: your email address and, if you give it, your name and language.
• Website usage: pages viewed, device and browser type, approximate location and similar data collected through cookies and Google Analytics.
• Messages: what you write to us by email, phone or Facebook chat.

3. Why we use your data and on what legal basis

• Processing and delivering orders, customer account, returns: performance of a contract
• Pinwheel Customer discounts: performance of a contract
• Accounting and tax records: legal obligation
• Sending the newsletter: your consent
• Website statistics (Google Analytics): your consent via the cookie banner
• Answering your questions: legitimate interest in serving customers

4. Newsletter
We send our newsletter only to people who have subscribed. We use Mailjet (Sinch Mailjet SAS, France) to send it and to see whether emails are opened. Every newsletter contains an unsubscribe link, and you can also unsubscribe by writing to us. After you unsubscribe we stop sending newsletters and delete your address from the list, except a record that you opted out.

5. Who we share data with
We share only what each partner needs to do its job:

• Every-Pay, for payments
• DPD, to deliver your parcel
• Digital Ocean, which hosts our website and shop
• Mailjet, for the newsletter
• Google Ireland Limited, for Google Analytics
• Meta Platforms Ireland Limited, if you message us through Facebook chat
• Our accountant and public authorities, when the law requires it

Some of these companies may process data outside the European Economic Area, for example in the United States. In that case they use safeguards approved by the European Commission, such as Standard Contractual Clauses or the EU–US Data Privacy Framework. We do not sell your personal data.

6. How long we keep data

• Accounting documents for orders: 7 years, as required by Estonian accounting law
• Customer account: until you ask us to delete it, or 3 years after your last purchase
• Newsletter: until you unsubscribe
• Analytics data: up to 14 months
• Messages: as long as needed to resolve your question, and no longer than 2 years

7. Cookies
We use necessary cookies to make the shop work, for example to keep your basket and language. With your consent we also use Google Analytics cookies to understand how visitors use the site. You can change your choice at any time in the cookie banner or in your browser settings.

8. Your rights
You have the right to:

• see what data we hold about you and get a copy
• correct wrong data
• ask us to delete your data
• restrict or object to processing
• receive your data in a portable format
• withdraw consent at any time, for example by unsubscribing

To use these rights, write to happiness@pinwheel.shop. We reply within one month. If you think we handle your data unlawfully, you can complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee) or the data protection authority in your own country.

9. Children
Our shop sells toys for children, but our services are meant for adults. We do not knowingly collect data from children under 13.

10. Changes
We may update this policy. The current version is always on this page, with the date it was last updated.