Privacy policy
This policy explains which personal data we process when you visit growthforge.biz (and its redirecting domains), why we do so, on what legal basis, and what rights you have under the General Data Protection Regulation (GDPR).
1. Controller
Growthforge OÜ
Tartu mnt 67/1-13b, Kesklinna linnaosa, 10115 Tallinn, Harju maakond, Estonia
Registry code 17354222 · VAT ID EE102915365
Email: office@growthforge.biz
We have not appointed a data protection officer. For any privacy matter, write to the address above.
2. In short
- This website uses no analytics, advertising or tracking cookies, no social-media plug-ins and no third-party fonts or embeds.
- Personal data arises when you visit the site (server log files) and when you contact us.
- We do not sell personal data and do not make automated decisions about you.
3. Hosting and server log files
This website is hosted by Netlify, Inc. (San Francisco, USA), which acts as our processor. When you open a page, the web server automatically processes technical data: IP address, date and time, requested URL, referrer URL, browser and operating-system information (user agent) and the HTTP status code.
Purpose: delivering the website, ensuring security and stability, preventing abuse.
Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in a secure and reliably
running website.
Retention: log data is kept only as long as needed for these purposes, in line with
the hosting provider’s retention practice. We do not combine it with other data.
4. Contact form and email
If you contact us through the form or by email, we process the data you send us: name, email address, optional company name, the topic you choose, your message and the language of the page. Our form provider (Netlify Forms) stores the submission together with technical metadata such as the time of submission, and filters spam automatically.
Spam protection: to protect the form against automated abuse we use a small, self-hosted check (a serverless function on our hosting platform). It verifies a time-limited token and a short computation performed by your browser. It sets no cookies and uses no third-party CAPTCHA service. For this purpose your IP address and request data are processed transiently by the hosting platform. Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in keeping the form and our mailbox free of spam.
Purpose: answering your enquiry and any follow-up questions, preparing a possible
contract.
Legal basis: Art. 6(1)(b) GDPR where your enquiry concerns a contract or pre-contractual
steps; otherwise Art. 6(1)(f) GDPR, our legitimate interest in answering enquiries.
Retention: we delete your enquiry once it has been dealt with and no contract has
resulted, usually within 12 months after our last contact. If a contract is concluded, statutory
retention periods (for example under accounting and tax law) apply to the relevant records.
You are not required to provide any data. Without it, however, we cannot answer your enquiry.
5. Cookies and local storage
This website currently sets no cookies and stores nothing in your browser. If we introduce optional
services in future (for example visitor statistics), they will only be loaded after you have agreed,
and your choice will be stored in your browser’s local storage under the name gf-consent.
Details are in our cookie policy. You can review or change your
choices at any time through “Privacy settings” in the footer.
6. Fonts, external content and links
The fonts used on this website (Outfit and Inter, SIL Open Font License) are served from our own server; your browser does not connect to Google or other font providers. Our product site at wp.growthforge.biz is operated by us. If you follow links to other websites, the privacy policy of the respective operator applies.
7. Recipients and processors
- Netlify, Inc. (USA): hosting and processing of form submissions, under a data processing agreement.
- Google Workspace (Google Ireland Limited, Ireland; Google LLC, USA): receipt and storage of emails sent to us, under a data processing agreement.
- Professional advisers (for example tax and legal advisers) and authorities, where we are legally required or entitled to disclose data.
8. Transfers to third countries
Some of the providers above are based in, or may access data from, the USA. Transfers rely on the European Commission’s adequacy decision for the EU-US Data Privacy Framework where the provider is certified, and otherwise on the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR). You can request a copy of the safeguards from us.
9. Your rights
You have the right, under the GDPR, to:
- access the data we hold about you (Art. 15),
- have inaccurate data corrected (Art. 16),
- have your data erased (Art. 17),
- restrict processing (Art. 18),
- receive your data in a portable format (Art. 20),
- withdraw consent at any time with effect for the future, where processing is based on consent (Art. 7(3)).
Right to object (Art. 21): where we process data on the basis of legitimate interests, you may object at any time on grounds relating to your particular situation.
To exercise your rights, email office@growthforge.biz. We will respond within the statutory period.
10. Right to lodge a complaint
You have the right to complain to a data-protection supervisory authority, in particular in the EU member state of your habitual residence, your place of work or the place of the alleged infringement. The authority responsible for us is:
Andmekaitse Inspektsioon (Estonian Data Protection Inspectorate)
Tatari 39, 10134 Tallinn, Estonia
www.aki.ee ·
info@aki.ee
11. Automated decisions and profiling
We do not use automated decision-making, including profiling, within the meaning of Art. 22 GDPR.
12. Security
This website is served exclusively over an encrypted HTTPS connection. We restrict access to personal data to what is necessary and use reputable providers with appropriate technical and organisational measures.
13. Changes
We update this policy when our processing changes or the law requires it. The current version is always available at this address.