Privacy.
Last updated 29 October 2026
Who we are
Dropula is run by Mindysm OÜ, Tallinn, Estonia, the controller of your personal data. Questions or requests: hello@dropula.com.
What we collect and why
- Orders: your email, name, shipping address and what you bought, to take payment, make and ship your order and send you its status (performing our contract with you), and to keep accounting records (legal obligation).
- Drop alerts: your email, only if you sign up (your consent). Every alert has an unsubscribe link; you can withdraw at any time.
- Abuse protection: a one-way hash of your IP address and basic browser signals, to stop bots and rate-limit checkout (our legitimate interest in a fair drop).
We don't sell your data and don't use advertising trackers.
Who receives it
We share only what each partner needs to do its job, under a data processing agreement:
- Payment processing: Card and wallet payments, fraud checks and refunds. We never see or store your full card number.
- Production and shipping partner: Makes your piece to order and ships it: your name, shipping address, contact details for delivery and what you ordered.
- Email delivery: Sends order, shipping and drop emails: your email address and the message.
- Hosting and database: Runs this website and stores orders and sign-ups.
Some partners may process data outside the European Economic Area; where they do, transfers rely on an adequacy decision or standard contractual clauses. Email hello@dropula.com for the full list of recipients and where they process data.
How long we keep it
Order records for as long as accounting law requires. Drop-alert sign-ups until you unsubscribe; after that we keep only a record that you opted out, so you are never emailed again (ask us to delete it). IP hashes used for rate limits are deleted within two days; the one stored with a checkout hold stays with that hold's record.
Your rights
You can ask for access to, correction, deletion or a copy of your data, object to or restrict its use, and withdraw consent. Email hello@dropula.com. You can also complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) or your local authority.