Privacy & Cookies Policy
This policy explains what personal data we process, why, and how. We respect your privacy and collect only what we need to provide our service.
Last updated 27 July 2026.
1. Data controller
Nordsur OÜ (registry code 17559480)
Sepapaja tn 6, 15551 Tallinn, Estonia
Email: [email protected] · Phone: +358 41 326 6030
2. What data we collect
Contact form. When you submit the form, we process the details you provide: name, business name, email address, phone number, the services you select, your message, preferred language, and your consent.
Server logs. Our server records technical data (such as IP address, browser type and timestamp) to keep the site secure and working.
3. Why we use it and legal basis
- To respond to enquiries and quote requests and to prepare a contract — based on your consent and pre-contractual steps (GDPR Art. 6(1)(a) and (b)).
- Site security, abuse prevention and technical maintenance — based on our legitimate interest (GDPR Art. 6(1)(f)).
We do not use your data for automated decision-making or profiling, and we never sell it.
4. Who receives the data
We rely on trusted providers who process data on our behalf:
- Web hosting — server infrastructure for the site and email.
- Cloudflare — content delivery and security (protects the site and routes traffic).
- Google Fonts — your browser fetches the fonts from Google, which may receive your IP address.
5. Transfers outside the EU
Some providers (such as Cloudflare and Google) may process data outside the EU/EEA. Where they do, transfers rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
6. Retention
We keep enquiry data for as long as needed to handle your request and any resulting relationship, after which it is deleted or anonymised (at the latest around 24 months after our last contact). Logs are kept for a shorter period for security purposes.
7. Cookies and similar technologies
We use only strictly necessary technologies to keep the site working and secure. Cloudflare may set a security cookie (for example __cf_bm) to tell human visitors apart from automated traffic.
We do not use tracking, advertising or analytics cookies. You can manage and delete cookies in your browser settings at any time. If we introduce analytics in future, we will update this policy and ask for your consent where required.
8. Your rights
You have the right to: access your data, rectify or erase it, restrict or object to processing, receive it in a portable format, and withdraw your consent at any time. Requests: [email protected].
You also have the right to lodge a complaint with a supervisory authority: in Estonia the Data Protection Inspectorate (aki.ee) or in Finland the Office of the Data Protection Ombudsman (tietosuoja.fi).
9. Changes
We may update this policy as our operations or the law change. The latest version is always on this page.