Privacy Policy

Last updated: 20 Feb 2026

Kikkas Equestrian (referred to as “Kikkas Group”, “Kikkas Equestrian”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share personal data when you visit or make a purchase from kikkasequestrian.com (“website”), or when you contact us.

1. Who we are

Controller (data controller): Kikkas Group OÜ, registration no. 17432376, located, but not as physical shop at Tammiku 18b, Tallinn, Estonia, 10922

Contact: [email protected]

Mobile: +372 5685 9733
Website: https://kikkasequestrian.com

If you have any questions about this Privacy Policy or your personal data, you can contact us at the email address above.

2. What personal data we collect

We may collect and process the following categories of personal data:

a) Data you provide to us

  • Name
  • Email address
  • Phone number (if provided)
  • Billing and shipping address
  • Bank account number
  • Order details and purchase history
  • Messages sent via contact forms or email

b) Data collected automatically
When you use our website, we may automatically collect:

  • IP address
  • Device and browser information
  • Pages visited and actions taken on the website
  • Cookies and similar technologies (see Section 8)

c) Payment data
Payments are processed by our payment service providers. We do not store your full payment card details.

3. Why we use your data (purposes)

We use your personal data for the following purposes:

  • To process and deliver your orders
  • To provide customer support and respond to your requests
  • To communicate with you about your orders and service-related matters
  • To manage returns, refunds, and warranty requests
  • To improve our website, products, and customer experience
  • To send marketing emails/newsletters (only if you have opted in)
  • To comply with legal obligations (e.g., accounting and tax requirements)
  • The IP address or other online identifiers of users of the online shop are processed for the provision of our shop as an information society service and for web use statistics.

4. Legal basis for processing (GDPR)

We process your personal data under the following legal bases:

  • Performance of a contract (e.g., fulfilling your order)
  • Legal obligation (e.g., tax and accounting compliance)
  • Legitimate interests (e.g., improving our services, preventing fraud, ensuring website security)
  • Consent (e.g., newsletter sign-ups, certain cookies)

resolving potential consumer disputes, is necessary due to the controller’s legitimate interest.

You can withdraw your consent at any time (see Section 7).

5. Who we share your data with

We only share your personal data where necessary to operate our business and deliver our services, including with:

  • Payment service providers (to process payments)
  • Shipping and logistics partners (to deliver orders)
  • E-commerce and website service providers (hosting, security, analytics, email services)
  • Professional advisors (accounting, legal) when required
  • Authorities where required by law

We do not sell your personal data.

6. Security and access to data

Personal data are stored in the servers of website host provider, which are located on the territory of a member state
of the European Union or states of the European Economic Area.

Personal data can be accessed by the staff of the online shop in order to resolve technical issues
related to the use of the online shop and to provide customer support.

Personal data are forwarded to processors (e.g. the transport service provider and data hosts) on
the basis of contracts between the online shop and processors. Upon processing data, the processors
are obliged to ensure the relevant safeguards in accordance with article 28 of the GDPR.

Personal data can be accessed and rectified via the online shop’s user profile or customer support.
If a purchase is made without a user account, personal data can be accessed via customer support.
If the request to access personal data has been submitted electronically, the information will also
be provided via commonly used electronic means.

7. Erasure

For the erasure of personal data, customer support should be contacted by e-mail. Requests for
erasure are responded to within one month and the period of erasure is specified. The response to
the request will also indicate which personal data will not be erased, on which legal basis and why.

8. Cookies

We use cookies and similar technologies to ensure the website works properly and to improve your browsing experience.

Depending on the cookies used, they may include:

  • Strictly necessary cookies (required for core website functionality)
  • Analytics cookies (to understand how the website is used)
  • Marketing cookies (to measure and improve advertising performance)

You can control cookies through your browser settings and, where applicable, through our cookie banner.

9. Data retention

We keep your personal data only as long as necessary for the purposes described in this policy, including to comply with legal, accounting, or reporting requirements.

Personal data are erased upon deleting the online shop’s customer account, except for the personal
data (purchase history) which are necessary for accounting or to resolve consumer disputes.

In the event of disputes regarding payments and consumer disputes, personal data are stored until
the claim is settled or the limitation period expires.

The personal data in original accounting documents is stored for seven years.

If the data are incorrect, incomplete or processed unlawfully, the customer has the right to request
the restriction of the processing of their personal data.

10. Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, or alteration. However, no system is completely secure, and we cannot guarantee absolute security.

11. Children’s privacy

Our website is not intended for children, and we do not knowingly collect personal data from children.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The most current version will always be available on this page, with the “Last updated” date shown at the top.

13. Resolution of disputes

Disputes concerning the processing of personal data are settled through customer support
(CONTACT DETAILS). The supervisory authority is the Estonian Data Protection Inspectorate
([email protected]).