LEGAL INFORMATION

Privacy policy

Last updated: 28.10.2026

We look after your data as carefully as your photos. Here we explain in plain language what data we collect, why, who we share it with and what rights you have.

1. Who is responsible for your data

The Omaraamat online shop is run by Librix Print OÜ (registry code 11425435), Vabriku 6 / Valgevase 13, 10414 Tallinn, Estonia, which is the controller of your personal data.
For data protection questions, email info@omaraamat.ee or call +372 530 11 330.

2. What data we collect

  • Contact and order details: name, email address, phone number, delivery and billing address, order contents and history.
  • Photos, texts and designs you add to create your product.
  • Account details, if you create an account (passwords are stored encrypted).
  • Payment details: payments are processed by the payment service provider. We never see or store your card details.
  • Communication: emails, enquiries and feedback you send us.
  • Technical data: IP address and browser and device type, logged by the web server for security purposes.

3. Why and on what basis we process data

  • To fulfil your order – making and delivering the product, communicating with you and handling complaints (performance of a contract, GDPR art. 6(1)(b)).
  • To meet legal obligations – accounting and taxation (GDPR art. 6(1)(c)).
  • Legitimate interest (GDPR art. 6(1)(f)) – website security and fraud prevention (server logs), and a reminder if you entered your email address at checkout but did not complete the order. Our interest is to help you finish an unfinished order. You can opt out of reminders via the link in the email or by writing to us.
  • Your consent (GDPR art. 6(1)(a)) – newsletter and offers, statistics and marketing cookies, and selecting photos from Google Photos, Facebook or Instagram. You can withdraw your consent at any time.

4. Your photos and designs

We use the photos and texts you upload only to make the product you ordered. We do not use them in advertising or show them to others without your clear permission.
An unordered project (a design you have not ordered) is deleted 40 days after the last change.
An ordered project and its files are kept for 400 days after the order, so that you can reorder the same product and we can handle any complaints. After that they are deleted automatically.

5. Google Photos, Facebook and Instagram

Our online editor (Taopix Online) lets you pick photos directly from your Google Photos, Facebook or Instagram account. Access is granted only with your consent and only to the photos you choose. We use this data solely to make your product and never sell or share it with third parties.
Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can revoke access at any time in the security settings of your Google or Meta account.

6. Who we share data with

We share data only as much as necessary and only with partners who have signed a data processing agreement with us:

  • payment provider (Montonio) – to process payments;
  • delivery providers (parcel lockers and couriers) – to deliver your order;
  • Taopix – to provide the online design software;
  • Printbox – to provide our previous design environment (omaraamat-online.ee) during the transition period;
  • web hosting and IT service providers – to run the website, shop and email;
  • Brevo – to send the newsletter (only with your consent);
  • Google and Meta – only if you connect your Google Photos, Facebook or Instagram account to select photos (see section 5) or allow statistics and marketing cookies;
  • public authorities (e.g. the Tax and Customs Board) – when required by law.

7. Transfers outside the European Union

Some of our partners (for example Google and Meta) may also process data outside the European Economic Area. In such cases, transfers take place on the basis of safeguards approved by the European Commission, such as the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses.

8. How long we keep data

  • Order and invoice data: 7 years, as required by the Accounting Act.
  • Unordered project: 40 days after the last change.
  • Ordered project and its files: 400 days after the order.
  • Unfinished order (email and cart contents): 30 days.
  • User account: until the account is deleted.
  • Newsletter: until you withdraw your consent.
  • Correspondence and enquiries: 3 years after the last contact (limitation period for claims).
  • Server logs: up to 30 days.

9. Cookies

We only use cookies set by our own domain – third parties have no access to them.
Necessary (always on, the shop cannot work without them):
• woocommerce_cart_hash, woocommerce_items_in_cart – shopping cart; until the browser is closed
• wp_woocommerce_session_* – cart session; 2 days
• wordpress_logged_in_*, wordpress_sec_* – login; until the browser is closed or 14 days (“Remember me”)
• wp-wpml_current_language – language; 1 day
• montonio_tz – payment time zone (Montonio); up to 30 days
• cmplz_* – your cookie choice; 365 days
Statistics – not used at the moment. If we add them (e.g. Google Analytics), we will update this list and ask for your consent first.
Marketing (only with your consent):
• sbjs_* – WooCommerce order source, i.e. how you found us (e.g. Google, Facebook or the newsletter); until the browser is closed (sbjs_session 30 minutes). The information is stored only with your order in our shop.
You can give or withdraw your consent at any time with the “Cookie settings” button at the bottom of the page – as easily as you gave it. You can also delete cookies in your browser settings.

10. Your rights

You have the right to:

  • receive information about and a copy of your data;
  • have inaccurate data corrected;
  • have your data deleted where we are not required by law to keep it;
  • restrict or object to the processing of your data;
  • receive your data in a machine-readable format (data portability);
  • withdraw any consent you have given.
Email us at info@omaraamat.ee. We will reply within one month at the latest. For security reasons, we may ask you to confirm your identity before replying.

11. Complaints and changes

If you believe we have violated your rights, please contact us first – we'll be happy to sort it out. You always have the right to turn to the Estonian Data Protection Inspectorate or a court.
We may update this privacy policy from time to time. The current version is always on this page, and we will notify you of significant changes.
This is a translation; in case of discrepancies, the Estonian version prevails.

EN
Shopping Cart