lets_talk@confifood.com
Youtube Facebook-f Instagram Linkedin X-twitter

1. Introduction

Confi Food OÜ (“Company”, “we”, “us”, or “our”) is committed to protecting the privacy of our website visitors, course participants, and clients. This Privacy Policy explains how we collect, use, store, and protect your personal data when you access our website, purchase courses, or engage our services.

This policy complies with the General Data Protection Regulation (EU 2016/679) and Estonian data protection legislation.

2. What Personal Data We Collect

We may collect the following categories of personal data:

  • Identity Data: Full name, job title, organization
  • Contact Data: Email address, phone number, billing address
  • Account Data: Login credentials (if account-based access applies)
  • Payment Data: Processed securely via Stripe; we do not store full payment details
  • Technical Data: IP address, browser type, device information, cookies
  • Usage Data: Course progress, login times, page interactions
  • Communications: Any messages sent to us via email, forms, or support requests

3. How We Collect Your Data

We collect data through:

  • Website forms (contact, registration, purchase)
  • Direct email communication
  • Stripe payment gateway
  • Cookies and analytics tools (e.g., Google Analytics)
  • Service contracts (for business clients)

4. Why We Process Your Data

We process your personal data for the following purposes:

  • To fulfill our contractual obligations (e.g., course access, invoicing)
  • To manage your user account
  • To respond to inquiries and customer support
  • To deliver course certificates or reports
  • To comply with legal obligations (e.g., accounting)
  • For legitimate business interests (e.g., service improvement, analytics)

We only process data where we have a legal basis: contract performance, legal obligation, legitimate interest, or consent.

5. Sharing Your Data

We do not sell your personal data.

We may share limited data with:

  • Service providers (e.g., Stripe, hosting platforms, email marketing software) under data processing agreements
  • Public authorities if required by law (e.g. tax authorities)

All third parties are required to respect your data and process it in compliance with GDPR.

6. Data Storage & Security

  • Data is stored securely on EU-based servers or platforms that are GDPR-compliant.
  • Access is restricted to authorized personnel only.
  • We implement encryption, access controls, and regular backups to protect your data.

7. Data Retention

We retain personal data only as long as necessary for the purposes for which it was collected, including:

  • Customer and invoice records: 7 years (as required by Estonian law)
  • Course data: 2 years after course completion
  • Inquiry emails: 1 year after last contact

You may request deletion of your data where applicable (see Section 9).

8. Cookies & Analytics

Our website uses cookies to improve functionality and analyze usage.

  • Necessary cookies: for site performance
  • Analytical cookies: for traffic and behavior analytics (e.g., Google Analytics)

By continuing to use the site, you consent to the use of cookies. You can manage cookie settings via your browser.

9. Your Rights

Under the GDPR, you have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion (“right to be forgotten”)
  • Object to or restrict data processing
  • Withdraw consent (where applicable)
  • Lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon)

To exercise your rights, contact us at: lets_talk@confifood.com

10. Children’s Privacy

Our services are intended for adults (18+). We do not knowingly collect data from minors. If you believe a child has submitted data to us, please contact us for immediate deletion.

11. International Data Transfers

We primarily store and process data within the EU/EEA. If we work with third-party processors outside the EU, we ensure appropriate safeguards (e.g., Standard Contractual Clauses).

12. Changes to This Policy

We may update this Privacy Policy to reflect changes in legal or operational requirements. Updates will be posted on this page with the updated effective date.

13. Contact

For all privacy-related inquiries or data requests:

Confi Food OÜ
[Insert Address]
Email: lets_talk@confifood.com
Business ID: [Insert Number]
Supervisory Authority: https://www.aki.ee