Home/Privacy Policy

Privacy Policy

Privacy Policy

Last updated: 6 June 2026

1. Who is responsible for your data

The data controller for personal data processed through this website is Etari Digitals OÜ, registry code 17514298, Sepapaja tn 6, 15551 Tallinn, Harju Maakond, Estonia. Contact: info@etaridigitals.com.

We have not appointed a Data Protection Officer, as we are not required to under the GDPR. All privacy requests go to the email address above.

2. What data we collect and why

2.1 Contact and audit request form

When you submit our contact or free audit form, we collect: your name, email address, website URL, the service you are interested in, your approximate ad spend, and your message. We use this data to respond to your enquiry, prepare the requested audit, and follow up on your request.

Legal basis: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR).

2.2 Call booking

If you book a call through the embedded Google Calendar booking tool, your booking details (name, email, chosen time, and anything you add to the booking) are processed by Google on our behalf and shared with us to hold the appointment.

Legal basis: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR).

2.3 WhatsApp contact

Our website contains a link to contact us on WhatsApp. The conversation only starts if you initiate it. If you do, your phone number and messages are processed by WhatsApp (Meta) under Meta's own terms and privacy policy, which we do not control. We use the conversation content to respond to you.

Legal basis: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR), and our legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR).

2.4 Analytics

We do not run any analytics or tracking before you consent. We plan to use Google Analytics 4 after launch. If and when it is active, it will only run after you opt in through our cookie banner. You can withdraw consent at any time (see our Cookie Policy).

Legal basis: your consent (Art. 6(1)(a) GDPR).

2.5 Technical data

When you visit the website, our hosting provider and the font delivery networks we use technically receive your IP address in order to deliver the page and its fonts to your browser. This is inherent to serving any website.

Legal basis: our legitimate interest in operating a functional and secure website (Art. 6(1)(f) GDPR).

3. Who we share data with (processors and recipients)

  • Vercel Inc. (USA): website hosting. Vercel serves the site to EU visitors and processes connection data such as IP addresses.
  • Google: calendar booking (Google Calendar, loads only after you click to load the calendar) and, after consent only, Google Analytics 4.
  • Meta (WhatsApp): only if you choose to contact us via WhatsApp. Meta acts independently under its own terms; it is not our processor.

We do not sell personal data and do not share it with anyone else unless required by law.

4. International transfers

Some of the providers above are located in the United States or process data outside the EEA. Where this happens, transfers rely on an adequacy decision (such as the EU-US Data Privacy Framework, where the provider is certified) or on the European Commission's Standard Contractual Clauses, together with additional safeguards where appropriate.

5. How long we keep your data

  • Enquiry and audit request data: as long as needed to handle your enquiry and follow up, then deleted unless an engagement follows.
  • Booking data: for the duration of the appointment cycle and reasonable follow-up.
  • Client data: for the duration of the contract plus the retention periods required by Estonian accounting and tax law.
  • Analytics data (once active): according to the retention period configured in Google Analytics, with consent as the basis.

6. Your rights

Under the GDPR you have the right to:

  • Access the personal data we hold about you
  • Have inaccurate data rectified
  • Have your data erased
  • Receive your data in a portable format
  • Object to processing based on legitimate interest
  • Withdraw consent at any time, without affecting processing done before withdrawal
  • Restrict processing in the cases set out in Art. 18 GDPR

To exercise any of these rights, email info@etaridigitals.com. We respond within one month.

7. Supervisory authority

If you believe we process your data unlawfully, you can lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), www.aki.ee, or with the supervisory authority of your own EU member state.

8. Cookies

Details about cookies and local storage, including our opt-in consent banner, are in our Cookie Policy.

9. Changes to this policy

We may update this policy as the website or our tooling changes, for example when analytics goes live. The current version is always published on this page.