This privacy policy explains how Nulu Kids OÜ (registry code 17072038, address Lennuki 8-48, Rakvere, Estonia; hereinafter “Nulu” or “we”) collects, uses and protects your personal data when you use the website nulu.ee.

Data Controller

Nulu Kids OÜ
Registry code: 17072038
Address: Lennuki 8-48, Rakvere, Estonia
Email: hello@nulu.ee

What data do we collect?

  • Contact details: name, email address, phone number, delivery and billing address.
  • Order details: purchased products, order number, payment method, order history.
  • Technical data: IP address, browser type, device information, data collected through cookies.
  • Communication data: correspondence, contents of contact forms and withdrawal applications.

What do we use your data for?

  • To process and deliver orders.
  • To provide customer support and respond to questions and complaints.
  • To process returns and withdrawal applications.
  • To manage the customer relationship and fulfil legal obligations (e.g. accounting).
  • To send marketing messages, with your consent.

Who do we share your data with?

We share your data only to the extent necessary to provide the service:

  • Payment service providers (e.g. Stripe) for order payment.
  • Courier services (e.g. Omniva, DPD, DHL) for order delivery and return handling.
  • IT and hosting service providers who support the website’s operation.
  • Accounting and legal advisors, where required by law.

We do not sell your personal data to third parties.

How long do we keep your data?

We keep your data for as long as necessary to fulfil the purposes described in this privacy policy, including the retention periods required by accounting law (generally 7 years from the transaction date).

Cookies

We use cookies on the website to ensure it functions correctly, to analyse traffic, and to improve the user experience. You can manage cookie usage in your browser settings.

Your rights

You have the right to:

  • Receive information about what data we process about you.
  • Request correction of inaccurate data.
  • Request deletion of data, if there is no legal basis for retaining it.
  • Object to the processing of your data for marketing purposes.
  • Withdraw consent already given (e.g. newsletter subscription).
  • Lodge a complaint with the Estonian Data Protection Inspectorate (www.aki.ee), if you believe your rights have been violated.

To exercise your rights, contact us at: hello@nulu.ee

Changes to this privacy policy

We may update this privacy policy from time to time. The updated version will always be published on this page.

Last updated: August 2026