Privacy Policy

Last updated: 30 October 2026

1. Who we are

Tiny Speck of Light is a website operated by Moongazer OÜ, a company registered in Estonia.

Company name: Moongazer OÜ
Registration number: 12783585
Address: Paepargi tn, Tallinn, Estonia
Email: info@tinyspeckoflight.com
Website: https://tinyspeckoflight.com

Moongazer OÜ is the data controller responsible for processing personal data in connection with this website and the services offered through it.

If you have questions about this Privacy Policy or how your personal data is used, please contact us at info@tinyspeckoflight.com.

2. What personal data we collect

Depending on how you use our website and services, we may collect and process the following information:

  • Contact information: your name, email address and other contact details you choose to provide.
  • Booking information: the service or session you book, your preferred appointment date and time, booking history and information needed to manage your appointment.
  • Payment and transaction information: payment status, transaction references, purchase details and information needed for invoicing and accounting. Online payments may be processed by third-party payment providers.
  • Communications: messages and emails you send us, including questions about a booking, a session or after-service care.
  • Course and session information: information necessary to provide the online sessions, group activities or prerecorded courses you purchase.
  • Newsletter preferences: whether you have subscribed to our newsletter, your consent status and any subsequent withdrawal or unsubscribe request.
  • Technical information: information such as your IP address, browser type, device information and website usage data, where collected through server logs, security tools, cookies or analytics.

Please do not send sensitive personal information unless it is necessary for your request or the service you are receiving.

3. Why we use your personal data

We process personal data for the following purposes:

Providing bookings and services

We use your information to manage appointments, confirm bookings, provide purchased services and courses, communicate with you about scheduling, and respond to questions about your sessions or after-service care.

Legal basis: taking steps at your request before entering into a contract and performing our contract with you, under Article 6(1)(b) of the GDPR.

Processing payments, invoices and accounting

We process the information necessary to confirm payments, issue invoices, maintain accounting records and comply with applicable legal obligations.

Legal basis: performance of a contract and compliance with legal obligations under Article 6(1)(b) and Article 6(1)(c) of the GDPR, as applicable.

Responding to enquiries

If you contact us through email or our website, we use the information you provide to respond to your enquiry and handle any follow-up communication.

Legal basis: taking steps at your request before entering into a contract, performing a contract, or pursuing our legitimate interests in responding to business enquiries, depending on the circumstances.

Sending newsletters and marketing communications

We send newsletters, event announcements, promotional messages and information about our services when we have an appropriate legal basis to do so.

Where consent is required, we will only send marketing emails to people who have actively subscribed. You may withdraw your consent or unsubscribe at any time.

Where applicable under Estonian law, we may also rely on the rules permitting marketing of our own similar services to existing customers, subject to the legal conditions and the right to object.

You can contact us at info@tinyspeckoflight.com to stop receiving marketing communications.

Legal basis: consent under Article 6(1)(a) of the GDPR, or another applicable legal basis where permitted by law.

Not subscribing to our newsletter does not prevent you from booking our services, receiving essential booking communications or contacting us for after-service care.

Maintaining website security and functionality

We may process technical information to protect our website, prevent misuse, troubleshoot problems and maintain website functionality.

Legal basis: our legitimate interests in operating and securing the website, where these interests are not overridden by your rights and freedoms.

Complying with legal obligations

We may retain and disclose information where necessary to meet applicable accounting, tax, regulatory or other legal requirements.

Legal basis: compliance with a legal obligation under Article 6(1)(c) of the GDPR.

4. Booking and payment services

Our website uses WordPress and BookingPress to support website functionality and appointment bookings.

When you make a booking, the information you submit may be stored in the website or booking system so that we can manage your appointment and provide the service.

Payments may be processed through PayPal. Where a third-party payment provider handles your payment, that provider processes relevant information under its own terms and privacy policy. We do not intend to collect or store your full payment card details through our website.

We also use accounting software to maintain the records required for our business.

These providers may process personal data on our behalf or act as independent controllers, depending on the service and processing activity. We take reasonable steps to use appropriate providers and protect personal data.

5. Emails and after-service care

We use your contact details to communicate with you about your bookings, purchases, questions and requests for after-service care.

If you contact us to ask a question about a session or service, we may use the information in your message to respond and provide relevant assistance, even if you have not subscribed to our newsletter.

We distinguish these service-related communications from newsletters and promotional emails. We do not make newsletter subscription a condition of booking or receiving after-service care.

6. Newsletter subscriptions

If you subscribe to the Tiny Speck of Light newsletter, we use your email address and subscription preferences to send you the communications described when you subscribe.

You can unsubscribe at any time by using the unsubscribe link included in a marketing email, where available, or by emailing info@tinyspeckoflight.com.

After you unsubscribe, we will stop sending marketing emails covered by that subscription. We may retain limited information about your unsubscribe request to ensure that we respect your preference.

We will only use a newsletter platform or email marketing provider where we have enabled and configured that service. If we use an external provider, its identity and relevant privacy information should be made available as appropriate.

7. Cookies and similar technologies

Our website may use cookies and similar technologies that are necessary for website operation, security, booking functionality and payment-related processes.

Other cookies, including analytics or advertising cookies, may be used only where applicable consent or another valid legal basis is in place.

You can manage cookies through the options provided on our website and, where applicable, through your browser settings. Disabling certain cookies may affect some website features.

The specific cookies used depend on the website’s current configuration, WordPress plugins and any third-party services enabled. Please refer to our cookie notice or cookie settings for further information where available.

8. Who may receive your personal data

We may share personal data with the following categories of recipients where necessary:

  • Website hosting and technical service providers.
  • WordPress and BookingPress-related service providers, where they process data in connection with our website.
  • Payment service providers, including PayPal.
  • Accounting, invoicing and bookkeeping service providers.
  • Email and communication service providers.
  • Website security, maintenance or analytics providers, where enabled.
  • Public authorities, courts or other parties where disclosure is required by law or necessary to establish, exercise or defend legal claims.

We do not sell your personal data.

We only share information to the extent reasonably necessary for the relevant purpose and subject to applicable data protection requirements.

9. International data transfers

Some service providers may process personal data outside Estonia or the European Economic Area (EEA).

Where personal data is transferred outside the EEA, we will ensure that the transfer complies with applicable data protection law, for example through an adequacy decision or appropriate safeguards where required.

The locations of processing depend on the services and providers currently used by our website and business.

10. How long we retain personal data

We retain personal data only for as long as necessary for the purposes described in this policy, unless a longer retention period is required by law.

In general:

  • Booking and customer service information: retained for as long as necessary to manage bookings, provide services and handle relevant follow-up matters.
  • Emails and enquiries: retained for as long as reasonably necessary to respond and maintain relevant business records.
  • Newsletter information: retained while you remain subscribed. After unsubscribing, we may keep the minimum information necessary to record and respect your opt-out.
  • Accounting and transaction documents: retained for the period required by Estonian law. Accounting source documents and relevant accounting records generally need to be preserved for seven years under the Estonian Accounting Act.
  • Technical logs and cookie data: retained according to their purpose, the configuration of the relevant service and applicable legal requirements.

When information is no longer needed, we will delete it or otherwise securely dispose of it, unless we have a lawful reason to retain it.

11. How we protect your personal data

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.

These measures may include restricting access to customer information, using appropriate security settings and keeping website software and relevant systems maintained.

No method of transmitting or storing information online can be guaranteed to be completely secure.

12. Your data protection rights

Under the GDPR, you may have the right to:

  • Access your personal data and obtain a copy.
  • Rectify inaccurate or incomplete information.
  • Erase your personal data where the legal conditions are met.
  • Restrict the processing of your personal data in certain circumstances.
  • Object to processing based on legitimate interests.
  • Receive or transfer certain personal data in a structured, commonly used format where the right to data portability applies.
  • Withdraw consent at any time where processing is based on consent. Withdrawal does not affect the lawfulness of processing before withdrawal.
  • Object to direct marketing at any time, including related profiling.

These rights are subject to the conditions and exceptions provided by applicable law. For example, we may be required to retain certain accounting documents even if you request their deletion.

To exercise your rights, email info@tinyspeckoflight.com. We may need to verify your identity before responding.

13. Complaints

If you have concerns about how we process your personal data, please contact us first so we can try to resolve the issue.

You also have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), the supervisory authority responsible for data protection in Estonia.

Website: https://www.aki.ee/en

You may also have the right to complain to the supervisory authority in the EU Member State where you live or work, or where the alleged infringement occurred.

14. Third-party websites

Our website may contain links to external websites or services. We are not responsible for the privacy practices of third-party websites. Please review their privacy policies before providing them with personal data.

15. Changes to this Privacy Policy

We may update this Privacy Policy when our services, website functionality or legal obligations change.

The latest version will be published on this page with the updated date.

16. Contact

For questions or requests relating to this Privacy Policy or your personal data, contact:

Moongazer OÜ — Tiny Speck of Light
Registration number: 12783585
Address: Paepargi tn, Tallinn, Estonia
Email: info@tinyspeckoflight.com
Website: https://tinyspeckoflight.com

en_GBEnglish (UK)
etEesti en_GBEnglish (UK)