Kira Disain
Privacy policy
Effective from 25 October 2026
Your privacy matters to me. This page explains what data I collect, why, how long I keep it and what rights you have.
Who processes your data
Kira Disain is a private individual’s handmade project. The data controller is Ingrid Valgejärv, Tallinn, Estonia.
Contact: kiradisain@gmail.com or Instagram @kira.disain.
This website
This website uses no cookies or advertising trackers, and has no forms. Fonts and images are loaded from this site itself, not from third-party servers.
For visitor statistics I use Cloudflare Web Analytics. It uses no cookies, stores nothing on your device and only collects aggregated data (e.g. number of visits, pages viewed, country and device type). This data cannot be used to identify you. Legal basis: legitimate interest in improving the site (GDPR Art. 6(1)(f)).
Your choices on the “Design your bouquet” page stay in your browser only — the site does not store or send them anywhere. You send the order text to me yourself via Instagram or email.
Like any web server, our hosting provider briefly keeps technical logs (e.g. IP address, browser type, time of visit) for security and troubleshooting. This data is not used to identify you or for marketing.
Orders
When you order a bouquet via Instagram, Yaga or email, I process the following data to fulfil your order:
| Data | Purpose | Legal basis |
|---|---|---|
| Name and contact (Instagram username, email or phone) | Agreeing on the order and communication | Performance of a contract (GDPR Art. 6(1)(b)) |
| Order details (size, colours, scent, box message) | Making the bouquet | Performance of a contract |
| Parcel locker, name and phone | Delivering the parcel | Performance of a contract |
Personal data is never used for marketing or sold to anyone.
Who receives your data
- Parcel locker provider (DPD, Omniva, Smartposti, Unisend) — only the data needed for delivery.
- Instagram (Meta) and Yaga — if you communicate or order through these platforms, their privacy policies also apply.
- Web hosting provider — technical logs, as described above.
How long data is kept
I keep order data as long as needed to fulfil the order and to handle any questions or claims, but no longer than 3 years after the order. After that, the data is deleted.
Your rights
You have the right to:
- get information about and a copy of your data;
- have inaccurate data corrected;
- request deletion of your data or restriction of its processing;
- object to the processing of your data;
- receive your data in a machine-readable format (data portability).
To use your rights, write to kiradisain@gmail.com or @kira.disain on Instagram. I will reply within one month at the latest.
If you believe your data has been processed incorrectly, you can also contact the Estonian Data Protection Inspectorate (Tatari 39, 10134 Tallinn, info@aki.ee).
Changes
If this privacy policy changes, I will publish the new version on this page with its effective date.
If there is any difference between language versions, the Estonian version applies.