What we keep, and why.

01Who we are

The controller of your personal data on this site is Iliaster OÜ (registry code 17619577), Hagudi tn 24/1-11, 11312 Tallinn, Estonia. Write to [email protected] about anything in this notice.

02What this site does not do

This site sets no cookies, stores nothing on your device, runs no analytics and loads nothing from third-party trackers, font services or ad networks.

03Messages and project briefs

When you send the contact form we receive your email address, your message and, if you give it, your name. When you send a project brief we also receive your company name, the kind of work, your timeline, your budget range and any links you add.

We use these details only to reply to you and to discuss a possible project. The legal basis is Article 6(1)(b) GDPR, steps taken at your request before entering into a contract, and Article 6(1)(f), our legitimate interest in answering enquiries.

Sending us your details is voluntary. Without an email address we cannot reply. We make no automated decisions about you and do no profiling.

04Who else processes it

Submissions are handled by our own server in Estonia and passed straight on to us. We do not store them in a database on the website. The service providers that run this site and deliver your message to us act only on our instructions.

The site is delivered and protected by Cloudflare, which processes technical connection data such as your IP address for that purpose, based on our legitimate interest in a site that stays available and secure (Article 6(1)(f) GDPR). Cloudflare, Inc. is based in the United States and certified under the EU-US Data Privacy Framework, for which the European Commission has adopted an adequacy decision.

To limit abuse, our server counts submissions per IP address in memory for about an hour, on the same legitimate-interest basis. That count is never written to disk, and our server logs do not record visitors' IP addresses.

05How long we keep it

We keep your message and our correspondence for as long as we are discussing your enquiry or working together, and delete it within 12 months after the conversation ends, unless the law requires us to keep it longer, for example accounting records for a contract.

06Your rights

You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to its use, and to receive it in a portable format. Email [email protected] and we will answer within one month.

You can also complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee) or to the authority where you live.

07Changes

If this notice changes, the new version will be published here with a new date.