Privacy policy

This policy explains which personal data we process when you visit legacy-boardhouse.com, write to us or place an order, why we do so, for how long, and what your rights are.

Data controller

Ecom Empire OÜ, operator of the Legacy Board House shop, Liimi tn 1b, Kristiine linnaosa, 10621 Tallinn, Harju maakond, Estonia (registration number 16494984). Contact: info@legacy-boardhouse.com.

Data we process

• Order: name, delivery and billing addresses, e-mail, telephone number (if you provide it), products ordered, amount, order history and exchanges with customer service.
• Payment: it is handled by our payment processor; we neither receive nor store your full card details, only the payment status.
• Customer account (optional): login details and past orders.
• Contact: the information you send us by e-mail or through the form.
• Browsing: technical data needed for the site to work and stay secure (IP address, server logs), and cookies essential for the cart, language and currency.

Purposes and legal bases

• Processing and delivering your order, managing returns and guarantees: performance of the contract.
• Replying to your messages: legitimate interest or pre-contractual steps.
• Keeping our accounts and meeting our tax obligations: legal obligation.
• Keeping the site secure and preventing fraud: legitimate interest.

We do not sell your data and do not send a newsletter without your consent.

Recipients

Your data is accessible to our team and, as far as they are concerned, to our service providers: site hosting (OVHcloud, server located in Canada), payment, carriers and workshops that ship your order (name, address and telephone number for delivery), and e-mail services. Each receives only the data needed for its task.

Transfers outside the European Union

The site's server is located in Canada, a country recognised by the European Commission as providing an adequate level of protection. For delivery outside the European Union, the necessary data is passed to the carrier in the destination country.

Retention periods

• Orders and invoices: 10 years (accounting obligations).
• Exchanges with customer service: 3 years after the last contact.
• Customer account: until it is deleted, or 3 years without activity.
• Technical logs: 12 months at most.

Your rights

You may request access to your data, its rectification, erasure, restriction of processing and portability, and object to processing based on legitimate interest. Write to info@legacy-boardhouse.com; we reply within one month. You may also lodge a complaint with the data protection authority in your country (in France: the CNIL; in Estonia: the Andmekaitse Inspektsioon).

Cookies

The site uses only cookies necessary for it to work (cart, session, language and currency). They are not used for advertising or to track you from one visit to the next.

Security and updates

The site is served over HTTPS and the server is updated automatically. We may amend this policy; the date of the last update appears below.

Last updated: 29 October 2026.