Last updated: 14 August 2026
This Privacy Policy explains how personal data is collected, used and protected when you visit or make a purchase from tinywaxworks.eu.
1. Who we are
The website tinywaxworks.eu is operated by Study Steps OÜ, trading under the brand Tiny Wax Works.
Location: Tallinn, Estonia
Contact email: tinywaxworks@gmail.com
Study Steps OÜ is the data controller for personal data processed through this website.
2. What personal data we collect
When you use our website or place an order, we may collect:
- your name;
- billing and delivery address;
- email address;
- telephone number;
- order details and purchase history;
- payment-related information;
- IP address;
- browser and device information;
- information about how you use our website;
- account information, if you create a customer account.
We only collect information that is necessary to operate the online shop, process orders, provide customer service, improve the website and comply with legal obligations.
3. Orders and customer accounts
When you place an order, we use the information you provide to:
- process and fulfil your order;
- arrange delivery;
- communicate with you about your purchase;
- handle returns, refunds or complaints;
- maintain accounting and transaction records;
- prevent fraud and misuse of the website.
If you create an account on our website, your account details are stored so that you can manage your orders and account information.
4. Payments
Payments on our website are processed through third-party payment service providers, including Stripe.
We do not store your full payment card details on our website. Payment providers process payment information in accordance with their own privacy and security policies.
Stripe may process personal data required to complete a transaction, prevent fraud, comply with legal obligations and provide payment services.
5. Delivery
To deliver your order, we may share the necessary personal data with postal, courier or parcel locker service providers.
Only the information required to complete the delivery is shared, such as your name, contact information and delivery destination.
6. Google Analytics and website statistics
We use Google Analytics to understand how visitors use our website.
Analytics may collect information such as:
- pages visited;
- approximate location;
- device and browser type;
- how visitors reached our website;
- interactions with pages and products.
Where required by law, analytics cookies and similar technologies are used only after you have given your consent through our cookie settings.
Google Analytics provides controls for data retention and privacy settings.
7. Cookies
Our website uses cookies and similar technologies.
Some cookies are necessary for the website and online shop to function correctly. These may include cookies required for:
- shopping cart functionality;
- checkout;
- customer login;
- security;
- remembering basic website preferences.
Other cookies, such as analytics cookies, are optional and are used only with your consent where required.
You can manage your cookie preferences through the cookie banner or cookie settings available on the website.
8. Embedded content and third-party services
Some pages may contain content or services provided by third parties.
These third parties may process information according to their own privacy policies. Examples may include payment providers, analytics services and delivery providers.
9. Who we share your data with
We may share personal data only where necessary with service providers involved in operating the website and completing your order, including:
- payment service providers such as Stripe;
- hosting and website service providers;
- postal, courier and parcel locker operators;
- accounting or administrative service providers where required;
- Google Analytics, subject to your cookie consent settings;
- public authorities where disclosure is legally required.
We do not sell your personal data.
10. How long we keep your data
We keep personal data only for as long as necessary for the purpose for which it was collected or for as long as required by law.
Order and transaction information may be retained for the period required by accounting, tax and consumer protection laws.
Customer account information is retained while the account remains active, unless deletion is requested or retention is required by law.
Analytics data is retained according to the retention settings configured in Google Analytics.
11. Your rights
Under applicable data protection law, including the GDPR, you may have the right to:
- request access to your personal data;
- request correction of inaccurate or incomplete data;
- request deletion of your personal data;
- request restriction of processing;
- object to certain types of processing;
- withdraw consent where processing is based on consent;
- request transfer of your data where applicable;
- lodge a complaint with a data protection authority.
Some information cannot be deleted immediately if we are legally required to retain it for accounting, tax, fraud prevention or other legal purposes.
12. Data security
We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse or disclosure.
However, no internet transmission or storage system can be guaranteed to be completely secure.
13. International data transfers
Some service providers used by our website may process data outside Estonia or the European Economic Area.
Where required, appropriate safeguards are used in accordance with applicable data protection law.
14. Changes to this Privacy Policy
We may update this Privacy Policy when our services, website functions or legal requirements change.
The latest version will always be published on this page.
15. Contact
If you have questions about this Privacy Policy or wish to exercise your data protection rights, contact:
Study Steps OÜ / Tiny Wax Works
Tallinn, Estonia
Email: tinywaxworks@gmail.com