Privacy policy

Data controller

The controller of personal data is Robert (Lehesepp). For questions about data protection, write to robert@lehesepp.ee.

Data collected

When you submit the quote form, I receive your business name, your name, email address, phone number, business type, current website address and message. When you write or call directly, I receive the information you choose to share.

Visit statistics are collected with Umami, which uses no cookies and does not store IP addresses. The statistics show only totals, such as how many times a page was viewed and where visitors came from, and cannot identify an individual person.

If you give consent, the site uses Google Ads cookies to measure whether a visitor who came from an ad sent an enquiry. Without consent these cookies are not loaded. You can withdraw consent at any time with the “Cookie settings” link in the footer.

Purpose of processing

Data is used only to respond to your enquiry, prepare a quote and, if we work together, perform the contract. The legal basis is pre-contractual steps and the contract (GDPR Art. 6(1)(b)).

The legal basis for ad measurement is your consent (GDPR Art. 6(1)(a)).

The legal basis for visit statistics is my legitimate interest in knowing how the site is used (GDPR Art. 6(1)(f)).

Data is never sold or shared with third parties for marketing purposes.

Processors

The site is hosted on GitHub Pages (GitHub, Inc.), which logs visitors' IP addresses for security purposes. Form requests are delivered through the email service Formspree (Formspree, Inc.). Visit statistics are processed by Umami Software, Inc. With your consent, ad measurement data is processed by Google Ireland Limited. These providers process data only on my instructions.

Retention

Enquiries are kept for up to 12 months if no work follows. Under a contract, data is kept for as long as the law requires (for example 7 years for accounting records).

Your rights

You have the right to access the data held about you, request its correction or deletion, and restrict its processing. Write to robert@lehesepp.ee. If you believe your rights have been violated, you may contact the Estonian Data Protection Inspectorate (www.aki.ee).