eComComply

Privacy Policy

We built eComComply to collect as little personal data as possible. We do not use advertising or tracking cookies, and we do not build profiles of visitors. This policy explains what limited data we process and your rights under the EU General Data Protection Regulation (GDPR).

1. Who is responsible (data controller)

JKH E-Commerce OÜ
Registry code: 17146512
Nurmenuku tn 3/2-18, Pärnu, Estonia
Email:

2. What we collect and why

Analytics. We use Cloudflare Web Analytics, a privacy-focused, cookieless analytics service. It gives us aggregate figures (for example, how many people viewed a page) without setting cookies, without tracking you across sites, and without building a personal profile. Legal basis: our legitimate interest in understanding how the site is used (GDPR Art. 6(1)(f)).

Hosting and security logs. Our site is hosted and served through Cloudflare. Like any web host, its infrastructure processes technical data such as IP addresses transiently to deliver pages and protect against abuse. Legal basis: legitimate interest in security and reliable delivery.

Email correspondence. If you email us, we process your email address and the contents of your message solely to respond and to keep a record of the exchange. Legal basis: legitimate interest, or steps taken at your request.

Contact form. If you use the form on our contact page, we process the name, email address, topic, and message you enter, together with the country your request comes from as reported by Cloudflare, in order to reply to you. Legal basis: legitimate interest, or steps taken at your request. The submission is delivered to our mailbox by Resend, an email delivery provider.

Spam protection. The contact form is protected by Cloudflare Turnstile, which checks that a submission comes from a person rather than an automated script. To do this it processes technical signals such as your IP address and browser characteristics. Turnstile does not use tracking cookies and is not used to profile you or to track you across websites. Legal basis: our legitimate interest in preventing abuse and spam (GDPR Art. 6(1)(f)).

3. Cookies

We do not set advertising, analytics, or tracking cookies. Because our analytics is cookieless and we run no ad networks, this site does not require a cookie-consent banner. If this ever changes, we will update this policy and add appropriate consent controls first.

4. Service providers we rely on

5. International transfers

Some providers (for example, Cloudflare) may process data outside the European Economic Area. Where that happens, transfers are covered by appropriate safeguards such as the European Commission's Standard Contractual Clauses.

6. How long we keep data

Analytics data is aggregated and not tied to an identifiable person. Email correspondence is kept only as long as needed to handle your query and for a reasonable period afterwards, then deleted.

7. Your rights

Under the GDPR you have the right to access, correct, delete, restrict, or object to the processing of your personal data, and the right to data portability. To exercise any of these, use our contact form or email .

You also have the right to lodge a complaint with a supervisory authority. In Estonia this is the Data Protection Inspectorate (Andmekaitse Inspektsioon), www.aki.ee.

8. Changes to this policy

We may update this policy as the site evolves. The date below shows when it was last revised.

Last updated: 18 July 2026