Last updated: 19 August 2026
This Privacy Policy explains how personal data is collected, used, stored, and protected when you visit or make a purchase from ladakholosho.com.
Who we are
The data controller is Lada Kholosho, an independent artist based in Estonia.
Website: https://ladakholosho.com
Email: hollada@gmail.com
Personal data we collect
When you place an order, we may collect your name, email address, telephone number, billing and shipping addresses, order details, chosen payment and delivery methods, and communications concerning your order.
When you use the contact form, we collect the information you provide, including your name, email address, subject, and message.
Technical information, such as your IP address, browser information, device type, and essential cookie data, may be processed for website operation, security, fraud prevention, and spam protection.
How we use your data
We process personal data to:
- respond to enquiries;
- process payments and orders;
- arrange delivery;
- provide order, payment, shipping, refund, and customer-service notifications;
- prevent fraud, spam, and misuse of the website;
- comply with accounting, tax, and other legal obligations.
The legal bases for processing are the performance of a contract or steps requested before entering into a contract, compliance with legal obligations, legitimate interests in operating and protecting the website, and consent where required.
We do not sell personal data or use contact-form details for marketing without separate consent.
Payments
Payments may be processed by Stripe, PayPal, or a digital-wallet provider selected at checkout. These providers receive the information necessary to process and secure the transaction under their own privacy policies.
We receive payment confirmation and transaction information but do not store complete payment-card details.
Delivery
To fulfil an order, we may share the recipient’s name, delivery address, telephone number, email address, and relevant order information with the postal or courier service responsible for delivery.
Service providers
Personal data may be processed by providers that support the operation of the website, including web-hosting and security services, WooCommerce, payment providers, delivery companies, email services such as Google, and form and spam-protection services.
These providers may process data only as necessary to provide their services or comply with legal obligations.
Where data is processed outside the European Economic Area, the provider must use an appropriate legal transfer mechanism, such as an adequacy decision or Standard Contractual Clauses, where applicable.
Cookies
The website uses essential cookies required for functions such as the shopping cart, checkout, security, and remembering visitor preferences.
Analytics, advertising, or other non-essential cookies will only be used in accordance with the visitor’s cookie choices where consent is required. Visitors will be able to accept, reject, or manage these cookies through the cookie notice.
How long we retain data
Order, payment, invoice, and accounting records may be retained for up to seven years where required by Estonian accounting and tax legislation.
Contact-form enquiries are normally retained for up to 12 months after the last communication, unless they relate to an order, legal claim, or another matter requiring longer retention.
Other data is retained only for as long as necessary for the purpose for which it was collected or to comply with legal requirements.
Your rights
Under applicable data-protection law, you may have the right to:
- request access to your personal data;
- correct inaccurate or incomplete data;
- request deletion of your data;
- restrict or object to processing;
- receive your data in a portable format;
- withdraw consent where processing is based on consent;
- lodge a complaint with a supervisory authority.
To exercise these rights, contact: hollada@gmail.com.
You may also contact the Estonian Data Protection Inspectorate.
Data security
Reasonable technical and organisational measures are used to protect personal data against unauthorised access, alteration, loss, or disclosure. However, no method of online transmission or storage can be guaranteed to be completely secure.
Changes to this policy
This Privacy Policy may be updated when the website, its services, or legal requirements change. The latest version will always be published on this page with its revision date.