Privacy Policy

1. General Provisions

1.1. This Privacy Policy governs the principles of collecting, processing and storing personal data. Personal data is collected, processed and stored by the controller BFL COMPANY OÜ (hereinafter the data processor).

1.2. For the purposes of this Privacy Policy, a data subject is a customer or other natural person whose personal data is processed by the data processor.

1.3. For the purposes of this Privacy Policy, a customer is anyone who purchases goods or services from the data processor's online store.

1.4. The data processor processes personal data lawfully, fairly and securely in accordance with applicable legislation.

2. Collection, Processing and Storage of Personal Data

2.1. Personal data is collected electronically, mainly through the website and email.

2.2. By submitting their data, the data subject grants the data processor the right to collect, use and manage it in accordance with the purposes set out in this policy.

2.3. The data subject is responsible for the accuracy of the data provided and is obliged to inform the data processor of any changes.

2.4. The data processor is not liable for damages resulting from the provision of incorrect data.

3. Processing of Customers' Personal Data

3.1. Personal data processed:

  • First and last name

  • Phone number

  • Email address

  • Delivery address

3.2. The data controller may also use information publicly available in public registers.

3.3. Legal basis: GDPR Article 6(1), points a), b), c), f).

3.4. Purposes of processing and retention periods:

  • Security and safety– in accordance with the law

  • Order processing– up to 10 years

  • Marketing – up to 10 years

3.5. Data may be shared with third parties (e.g. accountants, couriers, payment service providers). Data necessary for processing payments is transferred to an authorised processor (e.g. Maksekeskus AS).

3.6. Organisational and technical measures are used to protect personal data.

3.7. Personal data is retained for up to 10 years or for the period prescribed by law.

4. Rights of the data subject

4.1. Right of access to your personal data.

4.2. Right to receive information about the processing of personal data.

4.3. Right to rectify inaccurate data.

4.4. Right to withdraw consent where processing is based on consent.

4.5. To exercise your rights, you may contact us by email: info@battleforlife.ee

4.6. Right to lodge a complaint with the Estonian Data Protection Inspectorate.

5. Final provisions

5.1. These terms comply with the EU General Data Protection Regulation (GDPR) and Estonian law.

5.2. The data controller has the right to amend the privacy policy. Changes will be announced on the website www.battleforlife.ee.