Privacy policy

Last updated: 26 August 2026

This Privacy Policy explains how Esthete OÜ, trading as JALG TV Stands ("JALG", "we", "us" or "our"), collects, uses, stores and discloses personal data when you visit jalg.me, purchase our products, create or use an account, subscribe to communications, contact us, or otherwise use our website and related services (the "Services").

JALG is established in Estonia and is the data controller responsible for the personal data described in this Privacy Policy, except where another organisation acts as an independent controller for its own services. Our online store is hosted and supported by Shopify.

1. Data controller

Esthete OÜ / JALG TV Stands
Telliskivi 57-116
10412 Tallinn
Estonia
Email: info@jalg.me
Contact form: jalg.me/pages/contact-us

2. Personal data we collect

Information you provide

Depending on how you interact with us, we may collect:

your name, email address, telephone number, billing address and delivery address;
account information and preferences;
order, payment, transaction, return, exchange and warranty information;
newsletter, marketing and back-in-stock preferences;
information submitted through forms, reviews, surveys or customer-support communications; and
other information you choose to provide.

Payment information

Payments are processed through the payment services available at checkout, which may include Shopify Payments, PayPal, Mollie or other payment providers. JALG does not need access to your complete payment-card details to process your order.

Information collected automatically

When you use our Website, we and our technology providers may collect information such as your IP address, browser and device information, language and regional settings, cookie or browser identifiers, pages and products viewed, referring pages, shopping-cart activity, approximate location and technical or security information.

Some of this information is collected through cookies, pixels, local storage, tags, scripts and similar technologies. See our Cookie Policy for details.

Information from other sources

We may also receive personal data from Shopify, payment providers, shipping and fulfilment providers, returns and order-tracking providers, marketing and email platforms, advertising and analytics providers, affiliate platforms, security providers and other service providers working on our behalf.

3. How we use personal data and our legal bases

Under the GDPR, we process personal data only where we have a lawful basis. Depending on the purpose, we rely on performance of a contract, steps taken at your request before entering into a contract, compliance with a legal obligation, our legitimate interests, or your consent.

Orders, payments, shipping and returns

We use your personal data to process orders and payments, confirm purchases, arrange shipping, provide order tracking, manage cancellations, returns and refunds, provide warranty and after-sales support, and maintain transaction records.

Legal basis: performance of our contract with you and compliance with legal obligations.

Customer service and accounts

We use your data to respond to enquiries, provide product or compatibility assistance, manage customer accounts, resolve problems and handle complaints or warranty matters.

Legal basis: performance of a contract, steps taken at your request, and our legitimate interest in providing effective customer service.

Fraud prevention, security and legal compliance

We may process account, transaction, device and usage information to prevent fraud, protect our Services and customers, investigate security incidents, comply with accounting, tax, consumer-protection and other legal obligations, respond to lawful requests from authorities, and establish or defend legal claims.

Legal basis: compliance with legal obligations and our legitimate interests in security, fraud prevention and protecting our legal rights.

4. Marketing and back-in-stock notifications

If you subscribe to JALG marketing communications, we may send product news, collection announcements, editorial content, occasional offers, discount codes and early access to new releases.

Where consent is required, we send marketing only after you have chosen to receive it. You can unsubscribe at any time using the unsubscribe link in any marketing email or by contacting info@jalg.me.

If you request a back-in-stock notification, we use the contact information you provide to send that notification. Requesting a back-in-stock alert does not automatically subscribe you to general marketing communications unless you separately choose to receive them.

5. Analytics, advertising and affiliate tracking

Subject to your consent choices and applicable law, we may use analytics and marketing technologies to understand Website performance, improve usability, measure campaigns, attribute purchases to advertising or affiliate referrals, and improve marketing effectiveness.

Providers may include Shopify, Google, Meta, Microsoft, Klaviyo, Pinterest, UpPromote and related tag-management or server-side measurement services such as Google Tag Manager and Stape.

For visitors in regions where consent is required, analytics, marketing and other non-essential technologies are blocked by default and activated only after the relevant consent has been given.

6. How we disclose personal data

We do not sell customer lists or personal data for monetary consideration. However, operating an ecommerce business requires us to disclose personal data to service providers where necessary.

Recipients may include:

Shopify, which provides our ecommerce platform, hosting, checkout, account, order-management, security and related functionality;
payment providers, such as Shopify Payments, PayPal, Mollie or another provider selected at checkout;
shipping and logistics providers, including DHL, DPD, Omniva and other providers used for the relevant destination;
returns, tracking and customer-service providers;
email and marketing providers, including Klaviyo and Shopify;
analytics, advertising and affiliate providers, subject to applicable law and your consent choices;
IT, hosting, security and fraud-prevention providers;
professional advisers, such as accountants, auditors, insurers and lawyers; and
courts, regulators, law enforcement or other public authorities where disclosure is required or permitted by law.

Personal data may also be disclosed in connection with a merger, sale, restructuring or other business transaction, subject to appropriate confidentiality and data-protection requirements.

7. Relationship with Shopify

JALG uses Shopify to provide the online store and related Services. For many activities involving JALG customer data, JALG acts as the controller and Shopify processes personal data on our behalf. Shopify may also act independently in relation to certain Shopify consumer services and functionality.

For more information, see:

8. Cookies and similar technologies

Our Website uses cookies and similar technologies. When you first visit from a region where consent is required, only strictly necessary technologies are active. Analytics, marketing and other non-essential technologies are blocked until you consent to the relevant category.

We use Consentmo to provide the cookie banner and preference centre and to record and apply your choices. You may change or withdraw your consent at any time through the Cookie Preferences control on the Website.

For more information, see our Cookie Policy.

9. Data retention

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected and to comply with legal, tax, accounting, warranty, security and dispute-resolution requirements.

Accounting and transaction records subject to Estonian accounting or tax requirements are generally retained for seven years.
Customer-service and warranty communications are retained as long as reasonably necessary to resolve the matter and meet related legal obligations.
Account data may be retained while the account is active and for an appropriate period afterwards.
Marketing subscription data is retained until you unsubscribe or withdraw consent, subject to limited suppression information needed to respect your preference.
Back-in-stock data is retained as long as necessary to provide the requested notification unless you separately subscribe to marketing.
Cookie and tracker data is retained according to the periods described in our Cookie Policy and provider settings.

10. International transfers

Some of our technology and service providers operate internationally. Personal data may therefore be transferred to, stored in or accessed from countries outside Estonia or the European Economic Area.

Where personal data is transferred outside the EEA to a country without an adequacy decision, appropriate safeguards are used as required by applicable law, such as Standard Contractual Clauses, Binding Corporate Rules or another legally recognised transfer mechanism.

11. Security

We use appropriate technical and organisational measures designed to protect personal data against accidental loss, unlawful destruction, unauthorised access, alteration, disclosure or misuse. However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

12. Your rights under the GDPR

Where the GDPR applies, you may have the right to:

access the personal data we hold about you;
correct inaccurate or incomplete data;
request deletion of your data in certain circumstances;
restrict processing in certain circumstances;
receive certain data in a portable format where the legal requirements are met;
object to processing based on legitimate interests;
object at any time to direct marketing;
withdraw consent at any time where processing is based on consent; and
lodge a complaint with a competent data-protection authority.

Where applicable, you may also have rights relating to decisions based solely on automated processing that produce legal or similarly significant effects.

To exercise your rights, contact info@jalg.me. We may request information reasonably necessary to verify your identity. We will respond within the period required by applicable law.

13. Supervisory authority

Andmekaitse Inspektsioon (Estonian Data Protection Inspectorate)
Tatari 39
10134 Tallinn
Estonia
Website: www.aki.ee

You may also have the right to complain to the supervisory authority in the EEA country where you live or work, or where an alleged infringement occurred.

14. Other jurisdictions, children and third-party websites

Customers outside the EEA may have additional privacy rights under applicable local law. Nothing in this Privacy Policy limits rights that cannot lawfully be limited.

Our Services are intended for customers purchasing home and interior products and are not directed specifically at children. We do not knowingly seek to collect personal data from children where parental or guardian consent would be required.

Our Website may contain links to third-party websites or services. We are not responsible for the privacy or security practices of services we do not control.

15. Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes to our Services, technologies, service providers, processing activities, applicable law or regulatory guidance. We will publish the revised version on this page and update the "Last updated" date. Where required by law, we will provide additional notice or request renewed consent.

16. Contact