Last updated: 7 August 2026
1. Who is responsible for your data
The data controller for personal data processed through this website is Etari Digitals OÜ, registry code 17514298, Sepapaja tn 6, 15551 Tallinn, Harju Maakond, Estonia. Contact: info@etaridigitals.com.
We have not appointed a Data Protection Officer, as we are not required to under the GDPR. All privacy requests go to the email address above.
2. What data we collect and why
2.1 Contact and audit request form
When you submit our contact or free audit form, we collect: your name, email address, website URL, the service you are interested in, your approximate ad spend, and your message. We use this data to respond to your enquiry, prepare the requested audit, and follow up on your request. Submissions are stored in our CRM (Airtable) and trigger an internal notification (Slack) so we can respond quickly; see section 3.
Legal basis: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR).
2.2 Call booking
If you book a call through the embedded Google Calendar booking tool, your booking details (name, email, chosen time, and anything you add to the booking) are processed by Google on our behalf and shared with us to hold the appointment.
Legal basis: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR).
2.3 WhatsApp contact
Our website contains a link to contact us on WhatsApp. The conversation only starts if you initiate it. If you do, your phone number and messages are processed by WhatsApp (Meta) under Meta's own terms and privacy policy, which we do not control. We use the conversation content to respond to you.
Legal basis: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR), and our legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR).
2.4 Newsletter and DIY waitlist
If you subscribe to the operator's letter (our newsletter) or join the DIY product waitlist, we collect your email address and, if you provide it, your name. We use this data to send you the content or product updates you signed up for, and we record the signup time as proof of consent. Signups are stored in our CRM (Airtable).
Legal basis: your consent (Art. 6(1)(a) GDPR). You can unsubscribe at any time via any email we send or by writing to info@etaridigitals.com, and we will remove you.
2.5 Analytics
We use Google Analytics 4 for aggregate, pseudonymous usage statistics. It is not fully anonymous: Google processes your IP address and a persistent client identifier. It runs only after you opt in through our cookie banner; nothing analytics-related loads before you consent. You can withdraw consent at any time with one click (see our Cookie Policy).
Legal basis: your consent (Art. 6(1)(a) GDPR).
2.6 Technical data
When you visit the website, our hosting provider technically receives your IP address in order to deliver the page to your browser. This is inherent to serving any website. All fonts are self-hosted on our own domain, so no font network receives any visitor data.
We also process your IP address briefly to rate-limit our forms against spam. It is held in memory for a ten-minute window and never stored.
Legal basis: our legitimate interest in operating a functional and secure website (Art. 6(1)(f) GDPR).
3. Who we share data with (processors and recipients)
- Vercel Inc. (USA): website hosting. Vercel serves the site to EU visitors and processes connection data such as IP addresses.
- Airtable Inc. (USA): our CRM. Contact and audit form submissions, newsletter signups, and DIY waitlist signups are stored in Airtable so we can handle and follow up on them.
- Slack Technologies (USA/Ireland, part of Salesforce): internal notifications. When you submit a form, we receive an internal Slack alert with the details you submitted so we can respond quickly. Slack is used internally only.
- Google: calendar booking (Google Calendar, loads only after you click to load the calendar) and, after consent only, Google Analytics 4.
- Meta (WhatsApp): only if you choose to contact us via WhatsApp. Meta acts independently under its own terms; it is not our processor.
- ZOHO Corporation: our email provider. If you email us or we reply to a form you submitted, the message and your address are processed there.
- Our client dashboard (app.etaridigitals.com), for clients only. It is covered by the service agreement and data processing agreement you sign as a client, not by this website policy.
We do not sell personal data and do not share it with anyone else unless required by law.
4. International transfers
Some of the providers above are located in the United States or process data outside the EEA. Where this happens, transfers rely on an adequacy decision (such as the EU-US Data Privacy Framework, where the provider is certified) or on the European Commission's Standard Contractual Clauses, together with additional safeguards where appropriate. You can request a copy of the safeguards we rely on for any specific provider by emailing info@etaridigitals.com.
5. How long we keep your data
- Enquiry and audit request data: 24 months from our last contact with you, then deleted unless an engagement follows.
- Booking data: 12 months from the appointment.
- Newsletter and waitlist data: until you unsubscribe, and in any case deleted after 36 months with no engagement.
- Client data: the duration of the contract plus 7 years, the period required by the Estonian Accounting Act.
- Analytics data: 2 months for event-level data and 14 months for user-level data, the periods configured in our Google Analytics 4 property. Consent is the basis.
- Form rate-limiting data: 10 minutes, in memory only.
6. Your rights
Under the GDPR you have the right to:
- Access the personal data we hold about you
- Have inaccurate data rectified
- Have your data erased
- Receive your data in a portable format
- Object to processing based on legitimate interest
- Withdraw consent at any time, without affecting processing done before withdrawal
- Restrict processing in the cases set out in Art. 18 GDPR
To exercise any of these rights, email info@etaridigitals.com. We respond within one month.
7. Supervisory authority
We do not carry out automated decision-making or profiling that produces legal effects for you. Where a form asks for your email address, providing it is necessary for us to reply; if you do not provide it we simply cannot respond, and there is no other consequence.
If you believe we process your data unlawfully, you can lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), www.aki.ee, or with the supervisory authority of your own EU member state.
8. Cookies
Details about cookies and local storage, including our opt-in consent banner and how to withdraw consent, are in our Cookie Policy.
9. Changes to this policy
We may update this policy as the website or our tooling changes. The current version is always published on this page.
10. Related documents
The commercial terms that govern our engagements are in our Terms & Conditions. Company and registration details are in the Impressum.