Privacy policy

This website is operated by Rasmus Koit Pipar Keyboards FIE (registry code 17101047), Kruusi tee 11, Pukamäe, Kohila Parish, 79852 Rapla County, Estonia (“we”, “us”). We are the controller of the personal data described below. You can contact us at [email protected].

• Mailing list. If you subscribe, we collect your email address, the date you signed up, and the date and IP address from which you confirmed your subscription, which is our record of your consent. We also count how many times each email is opened and each link is clicked, but these counts are not linked to you.
• Orders. If you buy a kit through our Etsy shop, Etsy passes us your name, delivery address and what you ordered, and your phone number if the carrier needs it.
• Emails you send us. If you write to us, we receive your email address, your name if you give it, and whatever you include in the message.
• Website visits. When you visit the site, our servers automatically record technical information: your IP address, browser type, the pages you request, the referring page and the date and time.

Giving us personal data is up to you, but some of it is needed: without an email address we can't send you the mailing list or reply to you, and without a name and delivery address we can't ship an order.

• To send you occasional updates about new keyboards, kits and build guides, and to count how many people read and click them. The legal basis is your consent (GDPR Art. 6(1)(a)). We keep the record of your consent so we can show we had it.
• To ship your order and handle returns, complaints and warranty claims. The legal basis is our contract with you (GDPR Art. 6(1)(b)). We keep order records for accounting because the law requires it (GDPR Art. 6(1)(c)).
• To answer your emails and deal with any follow-up. The legal basis is our legitimate interest in replying to people who contact us (GDPR Art. 6(1)(f)), or taking steps you ask for before a purchase (GDPR Art. 6(1)(b)).
• To operate the website, keep it secure and understand how it is used. The legal basis is our legitimate interest in running a reliable, secure site (GDPR Art. 6(1)(f)).

• Mailing list data is kept while you are subscribed. If you unsubscribe, we keep your address marked as unsubscribed, with the record of your consent, so we don't email you again, unless you ask us to delete it. If you sign up but never confirm, we delete your address after 30 days.
• Accounting records of an order (who bought what, when and for how much) are kept for 7 years from the end of the financial year, as the Estonian Accounting Act requires. Other order details, such as a phone number, are kept only as long as a return, complaint or warranty claim is possible.
• Emails are kept for up to 3 years after our last exchange, in case a question or claim about it comes up later.
• Server logs are deleted after at most 90 days.

We do not sell or rent your personal data. It reaches:

• Cloudflare, Inc., which delivers the website and protects it from attacks on our behalf (privacy policy (opens in new tab)).
• Microsoft Ireland Operations Limited (Azure Communication Services), which delivers the emails we send, including the mailing list, on our behalf. It processes the recipient's address and the message to deliver it, and stores email data in the EU (privacy statement (opens in new tab)).
• Google Ireland Limited, which provides a Gmail account we also use to read our email. Copies of emails sent to [email protected], Etsy order notifications and some earlier emails are stored on Google's servers and handled under Google's own terms (privacy policy (opens in new tab)).
• Etsy Ireland UC, for orders placed in our shop. Etsy is responsible for the data you give it under its own privacy policy (opens in new tab).
• The carrier delivering your order, which receives your name, delivery address and, if given, phone number.

The mailing list itself (subscribers, consent records and the open and click counts) is stored on our own servers in Estonia, not with a mailing-list provider. Emails sent to [email protected] are stored on our own mail server in Estonia, with a copy in the Gmail account above.

Cloudflare, Google and Microsoft may transfer data to the United States. Cloudflare, Inc., Google LLC and Microsoft Corporation are certified under the EU–U.S. Data Privacy Framework, which the European Commission recognises as giving adequate protection.

This website does not use cookies, analytics or advertising trackers. Links to external sites such as Etsy, GitHub and social networks are governed by those sites' own privacy policies.

Mailing-list emails are different. Each one contains a small image that lets us count how often it is opened, and its links pass through news.koit.dev so we can count clicks. These counts are kept per email, not per person. Turning off images in your email app stops your opens being counted; unsubscribing stops both.

You have the right to access, correct or delete your personal data, to restrict or object to its processing, and to data portability. You can withdraw your consent to the mailing list at any time by using the unsubscribe link in any mailing-list email, or by writing to [email protected]. Withdrawing consent doesn't affect what we did with your data before you withdrew it.

You also have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon (opens in new tab)).

We may update this policy from time to time. The date at the top shows when it was last revised.