Privacy Policy

2026-08-01

BILPP OÜ (Estonia) is the data controller for this website. We follow the principle of data minimization: we only collect what is needed to issue your vignette.

1. What we collect

To fulfil an order we process: your email address, licence plate, country of registration, vehicle data required by the destination country (e.g. VIN, vehicle category, fuel type), start date, chosen locale, and optionally a VAT number for business invoices. We do not require an account and do not collect passwords. Payment card data is handled exclusively by Stripe and never reaches our servers.

2. Why we process it (legal bases)

Order fulfilment and customer support: performance of a contract (GDPR Art. 6(1)(b)). Invoicing and tax records: legal obligation (Art. 6(1)(c)). Expiry reminders and marketing emails: your consent (Art. 6(1)(a)), given via optional checkboxes at checkout and revocable at any time via the unsubscribe link.

3. Processors and recipients

We share data only as needed to deliver the service: Stripe (payment processing), Resend (transactional email delivery), our fulfilment providers and the official national toll systems (to register the vignette to your plate), and Cloudflare (hosting/infrastructure). Vignette registration data is transmitted to the toll operator of the country you buy for — this is inherent to the product.

4. Retention

Order and vehicle data is retained while your vignette is valid and for support purposes afterwards, then anonymized after a fixed period following the expiry of your last vignette. Invoice data is retained as long as required by Estonian accounting law (7 years). Unpaid draft orders are deleted within 48 hours.

5. Your rights

You have the right to access, rectify, erase, restrict and port your data, and to object to processing based on consent or legitimate interest. Contact support@bilpp.com. You may also lodge a complaint with the Estonian Data Protection Inspectorate (AKI) or your local supervisory authority.