Last updated: June 2026

1. Introduction

This Privacy Policy explains how Sandpackers ("we", "us", "our") collects, uses, and protects your personal data when you visit sandpackers.com, make a purchase, or sign up for our newsletter. We are committed to protecting your privacy and handling your data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Estonian data protection law. By using our website, you agree to the practices described in this policy.

---

2. Data Controller

The data controller responsible for your personal data is: SandPackers Operated by The Suit Clan OÜ Tallinn, Estonia mail@sandpackers.com‍

---

3. What Data We Collect

3.1 Data you provide directly

When you contact us, place an order, or sign up for our newsletter, we may collect:

• Your name and email address

• Postal address (for print orders and shipping)

• Payment information (processed securely by Stripe we do not store card details)

• Any message content you send us via our contact form

3.2 Data collected automatically

When you visit our website, we automatically collect certain technical data including:

• IP address - Browser type and version

• Device type

• Pages visited and time spent

• Referring website This data is collected through cookies and similar tracking technologies, including Google Analytics (see Section 5).

---

4. How We Use Your Data

We use your personal data for the following purposes:

• To process orders — fulfilling print purchases and shipping to your address

• To communicate with you — responding to enquiries sent via our contact form

• To send newsletters — if you have subscribed, we send occasional updates about new stories, prints, and products. You can unsubscribe at any time.

• To improve our website — using anonymised analytics data to understand how visitors use sandpackers.com

• To comply with legal obligations — retaining transaction records as required by law

---

5. Cookies and Google Analytics

Our website uses cookies — small text files stored on your device — to help us understand how visitors use our site. We use Google Analytics, a web analytics service provided by Google LLC. Google Analytics uses cookies to collect anonymised information about your use of our website, including pages visited, time on site, and general location data. This information is transmitted to and stored by Google on servers in the United States. Google Analytics does not identify you personally.

You can opt out of Google Analytics tracking by:

• Using the [Google Analytics Opt-out Browser Add-on](https://tools.google.com/dlpage/gaoptout)

• Adjusting your browser cookie settings We use the following cookie categories:

  Cookie Type Purpose Duration Essential Session Required for the website to function Session Required for the website to function Session Yes Yes Yes Analytics Google Analytics — anonymised usage data Up to 2 years No No

You can manage your cookie preferences at any time through your browser settings. Note that disabling cookies may affect the functionality of the website.

---

6. Payment Processing - Stripe

All payments on sandpackers.com are processed securely by Stripe, a third-party payment processor. When you make a purchase, your payment information is transmitted directly to Stripe and is subject to Stripe's own Privacy Policy, available at stripe.com/privacy. We do not store, access, or process your full payment card details. We only receive confirmation of successful or failed transactions.

---

7. Newsletter

If you subscribe to our newsletter, we store your email address for the purpose of sending you updates. We use Squarespace's built-in email functionality for this purpose. You can unsubscribe at any time by clicking the unsubscribe link in any newsletter email or by contacting us at mail@sandpackers.com. We do not share your email address with third parties for marketing purposes.

---

8. Data Sharing

We do not sell, rent, or trade your personal data. We share data only with the following third parties where necessary to operate our website and services: - Squarespace Inc. — our website platform and hosting provider - Google LLC — analytics (Google Analytics) - Stripe Inc. — payment processing - Shipping carriers — your name and address, shared only when fulfilling a print order All third-party service providers are required to handle your data securely and in accordance with applicable law.

---

9. International Data Transfers

Some of our service providers, including Google and Stripe, are based in the United States. Where your data is transferred outside the European Economic Area (EEA), we ensure that appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.

---

10. Data Retention

We retain your personal data only for as long as necessary: - Order data — retained for 7 years as required by Estonian accounting law - Newsletter subscriptions — until you unsubscribe - Contact form messages — retained for up to 2 years - Analytics data — retained by Google Analytics for up to 26 months

---

11. Your Rights Under GDPR

As a resident of the European Union or European Economic Area, you have the following rights regarding your personal data: - Right of access — you can request a copy of the personal data we hold about you - Right to rectification — you can ask us to correct inaccurate data - Right to erasure — you can ask us to delete your personal data where there is no legitimate reason to retain it - Right to restrict processing — you can ask us to limit how we use your data - Right to data portability — you can request your data in a structured, machine-readable format - Right to object — you can object to our processing of your data, including for direct marketing - Right to withdraw consent — where processing is based on consent, you can withdraw it at any time To exercise any of these rights, please contact us at mail@sandpackers.com. We will respond within 30 days. If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) at aki.ee.

---

12. Data Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. Our website is hosted on Squarespace, which maintains industry-standard security practices. However, no method of transmission over the internet is completely secure. We cannot guarantee absolute security of data transmitted to our website.

---

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

---

14. Contact

If you have any questions about this Privacy Policy or how we handle your data, please contact us at: mail@sandpackers.com Sandpackers Tallinn, Estonia