Privacy policy

This document explains what personal data we collect, what we use it for and how long we keep it.

Data controller

The controller is the company named below. Registry code: 16685939.

What we collect

• Contact form: name, e-mail address, phone number (if you enter one), the chosen topic and product, and your message.
• Newsletter: e-mail address.
• Reviews: the rating, an optional name, an optional e-mail address and a comment. The e-mail is never published; we use it only to confirm a purchase.
• Technical data: with a review we store a hash derived from your IP address so the same product cannot be rated repeatedly. The IP address cannot be recovered from the hash.
• When placing an order or issuing an invoice: name or company name, address, e-mail and, for companies, the registry and VAT numbers.

Why we use it

• To answer your enquiry and prepare a quote.
• To fulfil an order, issue an invoice and keep our books.
• To send the newsletter if you subscribed. You can unsubscribe at any time.
• To publish reviews after moderation.

Legal basis

Answering enquiries and fulfilling an order rests on entering into and performing a contract. The newsletter rests on your consent. Keeping accounting documents rests on a statutory obligation.

Retention

• Enquiries and reviews are kept while they serve a business purpose and are deleted on request.
• Accounting source documents (invoices) are kept for 7 years, as the Estonian Accounting Act requires.
• Newsletter addresses are kept until you unsubscribe.

Who we share it with

We do not sell data. We use processors acting on our behalf:

• Web hosting: Vercel Inc. Servers in the European Union.
• Database and file storage: Supabase. Servers in the European Union.
• E-mail delivery: our e-mail provider, through which enquiries and notifications are sent.
• [TO CONFIRM: accounting, courier and payment provider — add these once chosen].

Every processor listed acts only on our instructions.

Cookies and what is stored in your browser

We use no advertising cookies. Right now your browser stores only the following:

• skytent-theme — the theme you picked (light or dark). Written only when you switch it.
• skytent-review-… — a note that you have already rated this product, so the same browser cannot rate it twice.
• skytent-consent — your answer to the consent question described below.
• Admin session cookie — for our own staff only; it does not exist on the public site.

These are technically necessary or follow from your own choice, and need no separate consent. We collect no analytics today and no analytics service is loaded on the site.

On your first visit we ask whether analytics may be collected. If you answer "Essential only", nothing is sent — this is not merely a promise: the site's code refuses to emit a single analytics event without an explicit yes. Refusing is exactly as easy as accepting and the site works the same either way. You can change your answer at any time from the link in the footer.

Your rights

• Ask what data we hold about you.
• Have inaccurate data corrected.
• Have data deleted where no statutory basis requires us to keep it.
• Withdraw consent (for example unsubscribe from the newsletter).
• Lodge a complaint with the Estonian Data Protection Inspectorate (aki.ee).

The simplest route is to write to the address below — we reply within a reasonable time.