Privacy Policy
Last updated: July 31, 2026This Privacy Policy describes how marloflow (marloflow Osaühing) collects, uses, and protects your personal information when you use our services. We are committed to protecting your privacy and handling your data responsibly and transparently.
Who We Are
We operate a mobile paintless dent repair service specializing in hail damage repair and minor panel damage correction in Tartu and surrounding areas. We may collect personal information through our website, contact forms, service requests, and mobile applications. We act as a data controller responsible for your information and comply with applicable data protection regulations.
Information We Collect
We collect various types of information to provide and improve our services:
- Contact Information: Name, phone number, email address, and vehicle location when you request a service quote or booking
- Vehicle Details: Make, model, year, and damage description to assess repair needs
- Service Information: Details about repairs performed, pricing, and service dates
- Usage Data: Information about how you interact with our website, including pages visited, time spent, and device information
- Cookies: Identifiers and preferences stored on your device to enhance your browsing experience
- Communication Records: Messages and correspondence when you contact us
Legal Basis for Processing
We process your personal information based on the following legal grounds: Consent — when you provide information through contact forms or service requests; Legitimate Interest — to operate our business, improve services, and communicate with customers; Contract Performance — to fulfill service agreements and provide the repairs you've requested; Legal Obligation — to comply with tax laws, accounting requirements, and other regulatory obligations in Estonia.
How We Use Your Information
We use the information we collect for the following purposes: providing and managing paintless dent repair services; responding to service inquiries and booking requests; processing payments and issuing invoices; improving our services and website functionality; communicating service updates and promotional offers; analyzing usage patterns to enhance user experience; complying with legal and financial obligations; and preventing fraud or misuse of our services.
Data Retention
We retain your personal information for specific periods based on the purpose of collection: Service Records and Invoices are kept for 7 years to comply with Estonian accounting regulations; Contact Form Submissions are retained for up to 24 months after your last interaction with us; Website Analytics and Cookies are maintained for up to 12 months; Communication Records are stored for up to 3 years unless required longer by law; Server Logs are kept for up to 12 months for security purposes. After these periods, we securely delete or anonymize your information unless legal obligations require longer retention.
Your Privacy Rights
You have the following rights regarding your personal information: Right of Access — you can request and receive a copy of all personal data we hold about you; Right to Correction — you may request that we correct inaccurate or incomplete information; Right to Erasure — you can request deletion of your data, subject to legal obligations; Right to Restrict Processing — you may ask us to limit how we use your information; Right to Data Portability — you can request your data in a structured format; Right to Object — you can object to certain types of processing including direct marketing. To exercise any of these rights, please contact us using the information provided in the Contact Us section below.
Cookies and Tracking
We use cookies to improve your browsing experience and understand how you use our website. Cookies are small files stored on your device that help us remember your preferences and track usage patterns. We use both session cookies (temporary) and persistent cookies (stored longer). You can control cookie settings through your browser preferences and may refuse cookies, though this may limit some website functionality. We also use analytics tools to collect aggregated, anonymized data about visitor behavior. This information helps us optimize our website and services but does not personally identify you.
Data Security
We implement industry-standard security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These measures include encrypted data transmission, secure server storage, restricted access controls, and regular security assessments. However, no method of transmission over the internet is completely secure. While we strive to protect your data, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of any passwords or access credentials you create.
Third-Party Sharing
We do not sell, rent, or trade your personal information to third parties for marketing purposes. We may share your information with service providers who assist us in operating our website and providing services, such as payment processors and analytics platforms. These partners are contractually obligated to use your information only as necessary to provide services and maintain confidentiality. We may also disclose information when required by law, court order, or government request, or to protect our legal rights and the safety of our users.
Updates to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify you of significant changes by updating the "Last updated" date at the top of this page and, where appropriate, by sending you a notification email. Your continued use of our services following publication of updates constitutes your acceptance of the revised Privacy Policy. We recommend reviewing this page periodically to stay informed about how we protect your information.
Supervisory Authority
If you have concerns about our privacy practices or believe we have violated your data protection rights, you have the right to lodge a complaint with the Estonian Data Protection Authority (Andmekaitse Inspektsioon). You can contact them directly for assistance in resolving privacy disputes. Submitting a complaint does not prevent you from pursuing other legal remedies.
Contact Us
If you have questions or concerns about this Privacy Policy or our data handling practices, please contact us:
Email: [email protected]
Phone: +372 641 2847
Address: Narva Road 28, Tartu, 51010, Estonia