Privacy Policy

1.Scope

This Privacy Policy applies to personal data collected through our website, contact forms, project inquiries, client communications, and related service delivery.

2.Information We Collect

We may collect the following categories of information:

• Contact information, such as your name, email address, phone number, company name, and inquiry details.
• Project information, such as drawings, files, references, specifications, and feedback you provide.
• Usage data, such as IP address, browser type, device information, pages visited, and referral source.
• Communication data, including messages you send through forms, email, or other channels.
• Cookie and analytics data, where applicable, collected through cookies or similar technologies.

3.How We Use Information

We may use personal data to:

• respond to inquiries and provide quotes;
• deliver and manage our services;
• communicate with you about a project, request, or support matter;
• improve our website, services, and user experience;
• measure which ads bring enquiries and, if you accept advertising cookies, show our ads to people who have visited this site;
• send you a free guide you ask for and, only if you tick the box on the form, two short follow-up emails about 3D visualization;
• maintain security and prevent misuse; and
• comply with legal, accounting, or regulatory obligations.

4.Legal Bases

Where applicable under data protection law, we process personal data on one or more of the following bases: consent, performance of a contract, compliance with legal obligations, and legitimate interests in operating, improving, and securing our business and website.

When you download a free guide, we email it to you because you asked for it. The follow-up emails rely on your consent, which you give by ticking the box on the form. You can withdraw it at any time with the unsubscribe link in every email.

5.Cookies and Analytics

We may use cookies, analytics tools, and similar technologies to understand site usage, improve performance, and support marketing. You can control cookies through your browser settings and, where required by law, through our cookie consent mechanism.

Advertising. If you accept cookies, we use the Google Ads tag, the Meta Pixel, the Microsoft Advertising UET tag and the LinkedIn Insight Tag. They tell us whether a visit came from one of our ads and led to a quote request, and they let these platforms show our ads to people who have visited this site (remarketing). For the Meta Pixel, we and Meta Platforms Ireland Ltd are joint controllers for collecting your visit and sending it to Meta; Meta alone is responsible for what it does with the data after that. If you reject cookies, none of this code runs. You can change your choice at any time with “Cookie settings” at the bottom of every page.

6.How We Share Information

We do not sell personal data. If you accept advertising cookies, the advertising platforms listed below can use your visit to show you our ads on other sites.

We share personal data with the following recipients:

• Google Ireland Ltd and Google LLC for Google Analytics 4 (property G-Q9CEJ683HE), Google Ads conversion measurement and remarketing, and Google reCAPTCHA.
• Meta Platforms Ireland Ltd for the Meta Pixel: ad conversion measurement and remarketing.
• Microsoft Ireland Operations Ltd for Microsoft Advertising: ad conversion measurement and remarketing.
• LinkedIn Ireland Unlimited Company for the LinkedIn Insight Tag: ad conversion measurement and remarketing.
• Crisp IM SAS (France), the live chat widget on this site.
• Zone Media OÜ (Estonia), website hosting and email.
• Resend, the service that sends our emails, including the free guides and their follow-up emails.
• MillionVerifier, which checks that an email address can receive mail before we send our emails to it. Only the address is sent.
• Our accountants and professional advisers, where a matter requires it.

We also disclose information where the law requires it, or where it is necessary to establish, exercise or defend a legal claim.

7.International Transfers

Personal data collected through Google Analytics, Google Ads, Google reCAPTCHA, the Meta Pixel, Microsoft Advertising and the LinkedIn Insight Tag may be transferred to Google LLC, Meta Platforms, Inc., Microsoft Corporation and LinkedIn Corporation in the United States. Those transfers rely on the European Commission's adequacy decision of 10 July 2023 for the EU-U.S. Data Privacy Framework (Implementing Decision (EU) 2023/1795), under which these four companies are self-certified. Where that framework is unavailable, transfers are made under the Commission's Standard Contractual Clauses, and you can request a copy from [email protected].

Our other processors, Crisp IM SAS and Zone Media OÜ, process personal data within the EU and EEA.

Resend is based in the United States. Where a processor outside the EU and EEA is not covered by an adequacy decision, transfers are made under the Commission's Standard Contractual Clauses.

8.Retention

We keep personal data only as long as we need it, and we delete or anonymise it after that. In practice:

• Enquiries that do not become projects: 24 months from the last contact, so we can pick up a conversation that resumes.
• Client project files and correspondence: for the duration of the engagement and 3 years after the final delivery, which covers warranty questions and repeat work on the same building.
• Invoices and accounting records: 7 years, as the Estonian Accounting Act requires.
• Live chat transcripts: 12 months.
• Free guide downloads: 24 months from the download. If you unsubscribe, we keep only your address and the date, so we never email you again.
• Google Analytics data: 14 months, the maximum the platform allows for this property.
• Remarketing lists: a visitor stays on our advertising audiences for at most 180 days after the last visit.

Where a legal claim is live or reasonably foreseeable, we keep what is relevant to it until the matter is closed.

9.Security

We use reasonable technical and organizational measures to protect personal data against unauthorized access, loss, misuse, or disclosure. No method of transmission or storage is completely secure, and absolute security cannot be guaranteed.

10.Your Rights

Under the EU General Data Protection Regulation you have the right to request access to your personal data, to have inaccurate data corrected, to have data erased, to restrict how we process it, to receive a copy in a portable, machine-readable format, and to object to processing. Where we rely on your consent, you can withdraw it at any time. To exercise any of these rights, email [email protected].

Your right to object. Where we process your personal data on the basis of our legitimate interests (including publishing completed work in our portfolio and keeping this website secure), you may object at any time on grounds relating to your particular situation. Where we process personal data for direct marketing, you have an absolute right to object and we will stop immediately.

Complaints. You have the right to lodge a complaint with a data protection supervisory authority. Our lead authority is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), Tatari 39, 10134 Tallinn, Estonia, [email protected], www.aki.ee/en. If you are elsewhere in the EU or EEA you may instead complain to the authority where you live, where you work, or where you believe an infringement took place.

11.Third-Party Services and Links

Pages on this site link to third-party websites we do not control, and we are not responsible for their content or their privacy practices. This does not apply to the services we have chosen to embed (Google Analytics, Google Ads, Google reCAPTCHA, the Meta Pixel, Microsoft Advertising, the LinkedIn Insight Tag and Crisp live chat), for which we are the controller and which are described in sections 6 and 7 above.

12.Children's Privacy

Our website and services are not directed to children, and we do not knowingly collect personal data from children. If you believe a child has provided personal data to us, contact us and we will take reasonable steps to delete it.

13.Changes to This Policy

We may update this Privacy Policy. The current version is always posted on this page with its effective date. If we intend to use personal data we already hold for a new purpose, we will tell you before we do so, and we will ask for your consent where the new purpose requires it.

14.Contact

If you have questions about this Privacy Policy or want to exercise your rights, contact:

Email [email protected]. Our full company details, including the registry code and VAT number, are set out at the foot of this page.