Effective date: March 21, 2026.

Philopraxis OÜ (Vägeva tee 43/1, Peetri alevik, Rae vald 75312, Harju maakond, Estonia) — personal data operator on the Exi-Care website.

This Privacy Policy describes what data we collect, how we use it, and how we protect it in accordance with the General Data Protection Regulation (GDPR) and applicable Estonian law.

1. What data we collect

While using the site and our services, we may collect the following personal data:

• Name and email address — when registering, purchasing a ticket, subscribing, or contacting us

• Phone number — if you provide it during registration or payment

• Payment data — processed by the payment provider Stripe; we do not store card data

• Technical data — IP address, browser type, pages visited, cookies, and analytics data

2. How we use your data

We use the collected data for the following purposes:

• Contract fulfillment: processing orders, issuing tickets, providing access to subscriptions and online courses

• Communication: sending confirmations, event notifications, and responses to your inquiries

• Service improvement: analyzing site usage through aggregated analytics

• Legal compliance: maintaining accounting records and fulfilling legal requirements

3. Legal grounds for processing

The processing of personal data is carried out on the following legal grounds:

• Performance of a contract (Art. 6(1)(b) GDPR) — when processing orders and providing services

• Legitimate interests (Art. 6(1)(f) GDPR) — for ensuring security and improving the site

• Consent (Art. 6(1)(a) GDPR) — for using analytical cookies

• Legal obligation (Art. 6(1)(c) GDPR) — for accounting and tax purposes

4. Cookies and analytics

Our website uses cookies for proper functionality and analytics. Technical cookies are necessary for the site's operation and do not require consent. Analytical cookies are used only with your consent, which you can revoke at any time through your browser settings.

5. Data sharing with third parties

We do not sell your data. Data may be shared with the following categories of recipients:

• Stripe — payment provider for processing transactions

• Email service providers — for sending notifications

• Analytics services — in anonymized form for traffic analysis

• Government authorities — as required by law

All data transfers outside the EEA are conducted based on standard contractual clauses or other permissible mechanisms according to GDPR.

6. Data retention period

We retain personal data no longer than necessary for the purposes of processing:

• Account data — during the existence of the account plus 3 years after its deletion

• Payment and transaction data — 7 years in accordance with accounting requirements

• Analytics data — in anonymized form indefinitely

7. Your rights

As a data subject, you have the following rights:

• Right of access — to obtain a copy of your data

• Right to rectification — to correct inaccurate data

• Right to erasure — to request the deletion of data when there are no legal grounds for retention

• Right to restriction of processing

• Right to data portability

• Right to object to processing

• Right to withdraw consent — at any time without affecting the lawfulness of prior processing

To exercise your rights, contact us at: contact-info@exi-care.com

You also have the right to lodge a complaint with a data protection supervisor. In Estonia, this is the Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee).

8. Data security

We implement technical and organizational measures to protect personal data from unauthorized access, loss, or disclosure, including encryption of transmitted data (HTTPS) and restricted access to systems.

9. Policy changes

We may update this Privacy Policy. The current version is always available on the Exi-Care website. For significant changes, we will notify you by email.

10. Contact information

Philopraxis OÜ

Vägeva tee 43/1, Peetri alevik, Rae vald 75312, Harju maakond, Estonia

Email: contact-info@exi-care.com