Privacy policy

Last updated: March 18, 2026

OÜ Top Textile, operating under the brand Mirtel Design (“we”, “us”, “our”), operates this website and online store (the “Services”).

This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you visit our website, make a purchase, or otherwise interact with us.

We process personal data in accordance with applicable data protection laws, including the EU General Data Protection Regulation (GDPR). For the purposes of GDPR, OÜ Top Textile acts as the data controller of your personal data.


Company details

OÜ Top Textile (Mirtel Design)
Raua 55, 10120 Tallinn, Estonia
Registry code: 11034048
VAT number: EE100902626

Email: contact@mirteldesign.com
Phone: +372 5553 7102


1. Personal Data We Collect

Depending on how you interact with our website, we may collect the following categories of personal data.

Contact Information

  • name

  • billing address

  • shipping address

  • email address

  • phone number

Order and Transaction Information

  • products purchased

  • order history

  • payment confirmation

  • returns and exchanges

Payment Information

Payments are processed securely through third-party payment providers.
We do not store full credit card details.

Payment providers may process:

  • payment card details

  • billing information

  • transaction identifiers

Account Information

If you create an account:

  • username

  • password (encrypted)

  • account preferences

Communications

Information you provide when contacting us, including:

  • emails

  • support messages

  • customer service requests

Device and Technical Information

When you visit our website we may automatically collect:

  • IP address

  • browser type

  • device information

  • operating system

  • referring website

  • cookies and tracking identifiers

Usage Information

Information about how you interact with the website, including:

  • pages visited

  • time spent on pages

  • products viewed

  • items added to cart

  • purchase behavior


2. How We Collect Personal Data

We collect personal data from several sources:

Directly from You

When you:

  • place an order

  • create an account

  • contact us

  • subscribe to marketing communications

Automatically Through the Website

We collect data through technologies such as:

  • cookies

  • pixels

  • analytics tools

From Service Providers

For example:

  • Shopify (our ecommerce platform)

  • payment processors

  • shipping providers

  • analytics and advertising platforms

From Advertising Platforms

We may receive information from advertising platforms such as:

  • Google

  • Meta (Facebook and Instagram)

This may include information related to advertising performance and user interactions.


3. How We Use Your Personal Data

We process personal data for the following purposes.

Order Processing and Contract Performance

To:

  • process and fulfill orders

  • process payments

  • ship products

  • manage returns and exchanges

  • communicate regarding orders

Legal basis: performance of a contract


Customer Service

To:

  • respond to inquiries

  • provide support

  • resolve disputes

Legal basis: legitimate interest in providing customer service.


Website Functionality and Improvement

To:

  • operate and maintain the website

  • analyze website performance

  • improve user experience

Legal basis: legitimate interest


Marketing and Advertising

We may use your personal data to:

  • send marketing emails (if you have consented)

  • display personalized advertising

  • measure advertising performance

This may involve advertising platforms such as:

  • Google Ads

  • Google Analytics

  • Meta (Facebook / Instagram)

Legal basis: consent

You can opt out of marketing emails at any time using the unsubscribe link included in the emails.

Meta (Facebook & Instagram) Advertising

We use advertising services provided by Meta Platforms Ireland Ltd. (“Meta”), including the Meta Pixel, Advanced Matching, and the Conversions API.

These technologies allow us to measure the effectiveness of our advertising, understand user behavior, and display personalized advertisements on Facebook and Instagram.

When you interact with our website, we may share certain information with Meta, including:

  • pages visited and actions taken on the website

  • purchase information and transaction details

  • device and technical information (such as IP address, browser type)

  • identifiers such as email address or phone number (in hashed form)

This data may be collected through cookies and similar technologies or transmitted directly from our server to Meta via the Conversions API.

Meta may match this data with your Facebook or Instagram account to:

  • measure ad performance

  • optimize advertising delivery

  • create custom and lookalike audiences

  • show you personalized advertisements

The use of these technologies involves the processing of personal data for advertising purposes.

We have entered into a data processing agreement and, where applicable, joint controller arrangements with Meta in accordance with GDPR requirements.

Legal basis:
We rely on your consent for the use of marketing cookies and tracking technologies. These tools are only activated after you have given consent via our cookie banner.

Joint controllership:
For certain processing activities, we and Meta act as joint controllers under GDPR. Meta is responsible for processing data for its own advertising purposes in accordance with its Privacy Policy.

You can find more information here:
https://www.facebook.com/privacy/policy/

You can manage your advertising preferences via your Facebook account:
https://www.facebook.com/adpreferences/ad_settings


Security and Fraud Prevention

We process data to:

  • prevent fraud

  • secure payments

  • detect suspicious activity

Legal basis: legitimate interest and legal obligations.


Legal Compliance

We may process personal data to comply with legal obligations such as:

  • accounting requirements

  • tax laws

  • law enforcement requests

Legal basis: legal obligation.


4. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to operate the website and improve user experience.

Cookies may be used for:

  • essential website functionality

  • analytics and performance measurement

  • advertising and marketing

Third parties such as Google and Meta may place cookies or tracking technologies on our website for advertising purposes.

Marketing and advertising cookies (including Meta Pixel and similar technologies) are only activated after you provide consent through our cookie banner.

You can control cookies through your browser settings or cookie consent tools available on our website.

Some cookies are set by our ecommerce platform provider Shopify, which is necessary for the operation of the website and checkout.


5. Sharing Personal Data

We may share your personal data with trusted service providers when necessary to operate our business.

These may include:

Ecommerce Platform

  • Shopify, which hosts our store.

Payment Providers

To process payments securely.

Shipping and Logistics Providers

To deliver orders.

Analytics and Advertising Partners

Including:

  • Google

  • Meta (Facebook / Instagram)

These partners may process personal data according to their own privacy policies. In some cases (such as with Meta), we and the provider may act as joint controllers for certain processing activities related to advertising.

We do not sell personal data to third parties.


6. International Data Transfers

Some of our service providers may process personal data outside the European Economic Area (EEA).

When such transfers occur, we ensure appropriate safeguards are in place, including:

  • European Commission Standard Contractual Clauses

  • transfers to countries with adequacy decisions


7. Data Retention

We retain personal data only as long as necessary for the purposes described in this policy, including:

  • fulfilling orders

  • complying with legal obligations

  • resolving disputes

For example:

  • order records may be retained for accounting and tax compliance

  • marketing data is retained until consent is withdrawn


8. Your Data Protection Rights (EEA)

Under GDPR you may have the right to:

  • access your personal data

  • request correction of inaccurate data

  • request deletion of your data

  • restrict processing

  • object to processing

  • request data portability

  • withdraw consent where processing is based on consent

To exercise these rights, contact us at:

contact@mirteldesign.com

We may need to verify your identity before processing your request.


9. Complaints

If you believe your personal data has been processed unlawfully, you have the right to lodge a complaint with a supervisory authority.

In Estonia, the supervisory authority is:

Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon)
https://www.aki.ee


10. Security

We implement reasonable technical and organizational measures to protect personal data.

However, no internet transmission or storage system can be guaranteed to be completely secure.


11. Children's Data

Our Services are not intended for children under the age of 16, and we do not knowingly collect personal data from children.

If we become aware that we have collected such data, we will delete it.


12. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in legal requirements or our business practices.

The updated version will always be published on this page with a revised “Last updated” date.


13. Contact

If you have questions about this Privacy Policy or how we process personal data, please contact:

OÜ Top Textile (Mirtel Design)
Raua 55, 10120 Tallinn, Estonia

Email: contact@mirteldesign.com
Phone: +372 5553 7102