Effective from: 01.09.2026

This policy is reviewed periodically and may be updated.

1. Data controller

The controller of personal data is FiilGuud Brands OÜ (registry code 10810444, VAT no. EE100724257), address Jõeääre tee 22, Loo alevik, Jõelähtme vald, Harjumaa, email inri@beebad.ee.

2. What data we collect

When making a purchase through the beebad.ee store, we collect:

• name, email address, phone number;
• delivery and billing address;
• order contents (products, quantities, prices);
• metadata related to payment information (payment confirmation data from Montonio — the Seller itself does not see or store card details);
• email address, if subscribing to the newsletter (via the Brevo newsletter platform).

3. Purposes and legal basis of processing

Purpose	Legal basis
Fulfilling orders and arranging delivery	Performance of a contract (GDPR Art. 6(1)(b))
Age verification for alcohol sales	Compliance with a legal obligation (GDPR Art. 6(1)(c))
Preparing and retaining invoices	Legal obligation (Accounting Act)
Sending the newsletter	Consent (GDPR Art. 6(1)(a))
Providing customer support, handling complaints	Legitimate interest (GDPR Art. 6(1)(f))

4. Data retention

We retain order- and invoice-related data for the mandatory period required under the Accounting Act (generally 7 years). Newsletter data is retained until consent is withdrawn.

5. Disclosure of data to third parties

We disclose personal data to the following authorised processors:

• Montonio Finance — for payment processing;
• Venipak, Unisend, SmartPosti, DPD, Omniva — for integrated delivery (Estonian orders and alcohol-free product orders to Latvia, Lithuania, Finland, Sweden); data is shared only with the transport company selected by the Buyer at Checkout;
• the Buyer’s own chosen transport company — for “distance purchase” orders (orders containing alcoholic products with a delivery address in Latvia, Lithuania, Finland or Sweden), the Buyer chooses the transport company themselves and provides it with their own details (name, address) directly upon collecting the goods from the Seller’s warehouse in Estonia — the Seller does not forward the Buyer’s data to the carrier in advance;
• Brevo — for sending the newsletter (only for those who have given consent).

Montonio (an Estonian company) and Brevo (a French company) generally process data within the European Economic Area (EEA). Either partner may, in exceptional cases, use subprocessors located outside the EEA, but only under safeguards compliant with the GDPR (e.g. the European Commission’s Standard Contractual Clauses).

6. Cookies

The Store uses the following categories of cookies:

• Necessary cookies — essential for the core functions of the Store (shopping cart, login, Checkout) to work. These cannot be declined.
• Analytics cookies — used via Google Analytics 4, only if the Buyer has given separate consent in the cookie banner. Analytics collects information about the use of the Store (e.g. products viewed, items added to cart) to allow the Seller to improve the Store’s user experience.
• Marketing cookies — the Buyer may also give consent to marketing cookies; the Store currently has no active marketing tracking scripts.

Cookie consent is requested via a separate banner when visiting the Store, where the Buyer can choose “Accept all”, “Save selection” (by category), or “Reject all”. Consent is not used until the Buyer has given it.

Necessary cookies are exempt under GDPR Art. 6(1)(f) (legitimate interest) due to technical necessity; analytics and marketing cookies are based on consent (GDPR Art. 6(1)(a)).

7. Data subject rights

The Buyer has the right to:

• obtain information about what data concerning them is being processed;
• request correction of inaccurate data;
• request deletion of data where there is no other legal basis for retaining it;
• withdraw consent previously given (e.g. newsletter subscription);
• lodge a complaint with the Estonian Data Protection Inspectorate (www.aki.ee).

To exercise these rights, please contact: inri@beebad.ee

8. Data security

The Seller implements reasonable technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, or unauthorised access.

9. Contact

FiilGuud Brands OÜ
Jõeääre tee 22, Loo alevik, Jõelähtme vald, Harjumaa
Email: inri@beebad.ee
Phone: +372 503 6996