PRIVACY POLICY
By Ülle Gluten-Free
Last updated: [03.03.2026]
- Data Controller
This website is operated by By Ülle Gluten-Free (“we”, “us”, “our”).
We act as the data controller for personal data collected through this website.
For privacy-related inquiries, you may contact us via the Contact Form available on this website.
- What Personal Data We Collect
We may collect the following personal data:
- Name
- Email address
- Billing details (if a purchase is made)
- Messages submitted via contact forms
- Newsletter subscription data
- IP address and technical browser information
- Website usage data (via analytics tools)
We collect only data necessary for the operation of this website and delivery of our services.
- Purpose of Processing
Personal data is processed for the following purposes:
- Delivering digital products
- Processing payments (via integrated e-commerce providers)
- Responding to inquiries
- Sending newsletters and marketing communications (with consent)
- Improving website performance and user experience
- Ensuring website security
- Complying with legal and accounting obligations
- Legal Basis for Processing
We process personal data under the following legal bases:
- Performance of a contract (digital product purchase)
- Consent (newsletter subscription and optional cookies)
- Legal obligation (accounting and tax compliance)
- Legitimate interest (website security and analytics improvement)
- Email Marketing (MailerLite)
Newsletter subscriptions are managed through MailerLite.
When you subscribe via an embedded form on this website, your name and email address are processed for the purpose of sending marketing communications.
MailerLite acts as a data processor and processes personal data in accordance with GDPR requirements and its own privacy policy.
You may unsubscribe at any time by clicking the unsubscribe link in any email.
We do not add individuals to marketing lists without explicit consent.
- Analytics (Google Analytics)
We use Google Analytics to understand how visitors interact with the website and to improve performance.
Google Analytics may collect:
- IP address
- Device and browser information
- Pages visited
- Time spent on pages
Where possible, IP anonymization is enabled.
Analytics cookies are only activated after user consent, where required by law.
You may disable cookies through your browser settings.
- Payment Processing
If purchases are made through this website, payment information is processed by third-party payment providers integrated via WooCommerce or other e-commerce systems.
We do not store full credit card information.
Payment providers process data according to their own privacy policies.
- Data Retention
We retain personal data only as long as necessary to:
- Fulfill contractual obligations
- Comply with legal requirements
- Maintain accounting records
- Provide customer support
Newsletter data is retained until you unsubscribe.
- Data Sharing
We do not sell or rent personal data.
Data may be shared with:
- MailerLite (email marketing)
- Google (analytics)
- Payment processors
- Website hosting providers
All third parties process data under appropriate safeguards.
- International Transfers
Some third-party providers may process data outside the European Union.
Where applicable, appropriate safeguards are implemented in accordance with GDPR requirements.
- Your Rights Under GDPR
You have the right to:
- Access your personal data
- Correct inaccurate data
- Request deletion
- Restrict processing
- Object to processing
- Request data portability
- Withdraw consent at any time
Requests may be submitted via the Contact Form.
You also have the right to lodge a complaint with your local data protection authority.
- Cookies
This website uses cookies for essential functionality and analytics.
Where legally required, a cookie consent banner is displayed before non-essential cookies are activated.
You may manage cookie preferences through your browser settings.
- Security
We implement reasonable technical and organizational measures to protect personal data.
However, no method of online transmission is completely secure.
- Changes to This Policy
We may update this Privacy Policy periodically. Updates will be reflected with a revised “Last updated” date.
- Governing Law
This Privacy Policy is governed by the laws of Estonia and applicable European Union legislation.