CIDERHOUSE.EE PRIVACY POLICY
Effective from 4 August 2026
1. Data Controller
The controller of the personal data collected through the ciderhouse.ee online store is:
OÜ JAANIHANSO
Registration number: 10839040
Registered address: Liivaoja tn 6-4, 10155 Tallinn, Estonia
Email: cider@jaanihanso.ee
Telephone: +372 512 0874
This Privacy Policy explains what personal data we collect when you use the Ciderhouse.ee online store, the purposes and legal bases for which we process it, to whom we disclose it, and what rights the Customer has.
2. Personal Data We Process
Depending on how the Customer uses the online store, we may process the following data:
- name and company name if an order is placed on behalf of a company;
- email address and telephone number;
- billing and delivery address;
- order contents, total amount, payment method, payment status and order history;
- customer account details if the Customer creates an account in the online store;
- customer service requests and related correspondence;
- technical data relating to the use of the website, such as the IP address, device and browser information, time of visit and actions performed on the website;
- data collected through cookies and similar technologies in accordance with the choices made by the Customer;
- confirmation that the person placing and the person receiving an order containing alcohol are both at least 18 years of age.
Ciderhouse.ee does not collect the Customer’s personal identification code or a copy of an identity document when an ordinary order is placed. When an order containing alcohol is delivered, the courier may verify the recipient’s age. Such verification does not mean that the recipient’s personal identification code or a copy of their identity document is disclosed to the Seller.
We do not see or retain full payment card details. Payment data is processed by the payment service provider selected by the Customer in its secure payment environment.
3. Purposes and Legal Bases for Processing
| Purpose | Data processed | Legal basis |
| Receiving and processing an order, arranging payment, delivering the goods and providing customer service | Contact, delivery, order and payment status data | Entering into and performing a contract |
| ssuing invoices, maintaining accounting records and complying with tax obligations | Order, payment and billing data | Compliance with a legal obligation |
| Preventing fraud, ensuring the security of the online store, and establishing or defending legal claims | Order, communication and technical data | The Seller’s legitimate interest in protecting its property, systems and rights |
| Sending newsletters and offers | Name, email address and newsletter engagement data | The Customer’s consent |
| Website usage statistics, development and personalised advertising | Data collected through cookies and similar technologies | The Customer’s consent, except for cookies that are strictly necessary for the operation of the website |
Providing the data necessary to fulfil an order is required in order to enter into and perform the sales contract. If the Customer does not provide this data, we may be unable to accept the order or deliver the goods.
4. Sources of Personal Data
We obtain personal data:
- directly from the Customer through an order, customer account, contact form, email or newsletter subscription;
- from the payment service provider regarding a successful or failed payment;
- from the courier company regarding the delivery status of a shipment;
- automatically through the website and cookies in accordance with the Customer’s consent choices.
5. Recipients of Personal Data
We disclose personal data only to the extent necessary to fulfil an order, provide a service or comply with a legal obligation. Personal data may be disclosed to:
- the delivery service provider selected at checkout for the delivery of the goods;
- the payment service provider selected at checkout and banks for arranging payment;
- providers of website hosting, technical maintenance, email and IT services;
- providers of accounting and other professional services;
- Mailchimp for sending newsletters if the Customer has subscribed to the newsletter;
- web analytics and marketing service providers, including Google and Meta, if the Customer has consented to the use of the relevant cookies;
- public authorities and other persons where disclosure is necessary to comply with a legal obligation or protect our rights.
Service providers process data either on our instructions or as independent controllers under their own privacy policies, depending on their role in providing the relevant service.
Some technology or marketing service providers may process data outside the European Economic Area. In such cases, the data is protected using a European Commission adequacy decision, standard contractual clauses or another safeguard permitted by law.
We do not sell Customers’ personal data.
6. Data Retention
We retain personal data only for as long as necessary to fulfil the purpose for which it was collected or to comply with a legal obligation:
- accounting source documents and related data are retained for seven years from the end of the financial year in which the transaction was recorded in the accounts;
- accounting source documents and related data are retained for seven years from the end of the financial year in which the transaction was recorded in the accounts;
- customer service correspondence is generally retained for up to three years after the request has been closed;
- customer account data is retained until the account is deleted or use of the account ends, unless the law requires a longer retention period;
- data used for sending newsletters is retained until consent is withdrawn;
- records evidencing the giving or withdrawal of consent are retained for up to three years after consent is withdrawn;
- technical and security logs of the online store are generally retained for up to 12 months, unless they need to be kept for longer to resolve a security incident or legal dispute;
- cookies are retained for the periods displayed in the cookie settings.
In the event of a dispute, potential claim or proceedings, we may retain the relevant data until the dispute or proceedings have ended and the applicable limitation periods have expired.
7. Newsletters
We send newsletters and marketing offers only where the Customer has given consent to receive them. Subscribing to the newsletter is voluntary and is not a condition for placing an order.
Consent may be withdrawn at any time by using the unsubscribe link included in each marketing email or by contacting us at cider@jaanihanso.ee. Withdrawal of consent does not affect the lawfulness of processing carried out before the consent was withdrawn.
8. Cookies
Ciderhouse.ee uses cookies and similar technologies. Cookies that are strictly necessary for the operation of the online store are used without separate consent. Analytics, preference and marketing cookies are used only with the Customer’s consent.
Cookie choices can be changed at any time using the cookie management link in the website footer. The cookie management window displays up-to-date information about the cookies used, their purposes, service providers and retention periods.
9. Customer Rights
The Customer has the right to:
- obtain information about whether and what personal data we process about them;
- request access to their personal data and obtain a copy of it;
- request the correction of inaccurate or incomplete data;
- request the erasure of data where there is no longer a legal basis for processing it;
- request restriction of processing in the circumstances provided by law;
- receive the data they have provided in a machine-readable format and transmit it to another service provider where the conditions for data portability are met;
- object to processing based on legitimate interests;
- withdraw their consent at any time;
- lodge a complaint with the Estonian Data Protection Inspectorate at www.aki.ee if the Customer believes that their personal data has been processed unlawfully.
To exercise your rights, please contact us at cider@jaanihanso.ee. We generally respond to requests within one month. Before disclosing personal data, we may, where necessary, ask the person making the request to provide additional proof of identity.
10. Data Security
We implement appropriate technical and organisational measures to protect personal data. Access to personal data is limited to employees and service providers who require it to perform their duties or provide the relevant service.
11. Automated Decision-Making
We do not make decisions about Customers based solely on automated processing where such decisions would have legal or similarly significant effects on the Customer
12. Changes to This Privacy Policy
We may amend this Privacy Policy if our services, the technologies we use or applicable laws change. The current version will be published on the Ciderhouse.ee website together with its effective date.