Privacy Policy – Tervise & Wellness OÜ
Last updated: April 2026
1. Data Controller
Tervise & Wellness OÜ
Parda tänav 4, 10151 Tallinn, Estonia
Registration number: 16169592
Email: info@tervisewellness.ee
Phone: +372 56722310
2. Personal Data We Collect
Depending on how you interact with us, we may collect the following personal data:
- Full name
- Email address
- Phone number
- Postal address
- Payment information
- Booking history
- IP address and device information
- Website usage data (cookies and tracking technologies)
- Health-related information (only if voluntarily provided for treatment purposes)
- Communication history (e.g. enquiries sent to us)
If you book through Stebby, your booking data is also processed by Stebby under their own privacy policy. We receive only the information necessary to prepare your treatment.
3. Legal Basis and Purpose of Processing
We process personal data only where we have a valid legal basis under the General Data Protection Regulation (GDPR):
- Contract performance — to schedule and provide services (massage, facial, courses)
- Legal obligation — to process payments, invoices, and comply with accounting laws
- Legitimate interest — to respond to enquiries and improve our services
- Consent — for marketing communications and health-related information
Health-related data is considered sensitive under GDPR and is processed only with your explicit consent and solely for the purpose of providing safe and appropriate treatments.
You may withdraw your consent at any time.
4. Cookies and Tracking Technologies
Our website uses cookies in the following categories:
- Strictly necessary — required for website and booking functionality
- Preferences — remember user settings
- Analytics — e.g., website traffic analysis tools
- Marketing — used to display relevant advertisements
You can manage or withdraw your consent at any time via the cookie banner or your browser settings.
5. Sharing Your Data
We do not sell or rent your personal data. We may share it only with:
- Service providers — such as booking systems, email providers, and payment processors (including Maksekeskus), all under data processing agreements
- Stebby — when you use their platform
- Legal authorities — where required by law
6. Data Retention
- Booking and contact records — up to 3 years after your last visit
- Accounting and invoicing — 7 years (as required by Estonian law)
- Marketing data — until consent is withdrawn
- Analytics data — up to 26 months (anonymised where possible)
After these periods, data is securely deleted or anonymised.
7. Data Storage and Security
Your data is processed within the European Economic Area (EEA).
We apply appropriate technical and organisational security measures, including:
- SSL encryption
- Access control systems
- Secure third-party platforms
In case of a data breach, we will notify you and the Estonian Data Protection Inspectorate (AKI) as required by law.
8. Your Rights Under GDPR
You have the right to:
- Access your personal data
- Correct inaccurate or incomplete data
- Request the deletion of your data
- Restrict or object to processing
- Receive your data in a portable format
- Withdraw consent at any time
- Lodge a complaint with the Estonian Data Protection Inspectorate (AKI) at aki. ee
To exercise your rights, please contact us at info@tervisewellness.ee. We will respond within 30 days.
9. Third-Party Links
Our website may contain links to third-party platforms (such as social media or booking services). We are not responsible for their privacy practices and recommend reviewing their policies.
10. Changes to This Policy
We may update this Privacy Policy from time to time. The latest version will always be available on our website, and the revision date will be updated accordingly.
Tervise & Wellness OÜ
Parda tänav 4, 10151 Tallinn
info@tervisewellness.ee · +372 56722310