Privacy Notice
This notice explains how Swiftmade OÜ handles personal data when you visit swiftmade.co, email or call us, or book a call with us. It does not cover personal data we process on behalf of clients inside the software we build. That is covered by our contracts with those clients and our Data Protection Policy.
1. Who we are
The controller of your personal data is:
Swiftmade OÜ
Pärnu mnt 148, 11317 Tallinn, Estonia
Registry code: 14173141
Email: [email protected]
Phone: +372 5675 8611
We are not required to appoint a Data Protection Officer under Article 37 GDPR. Privacy questions are handled by our Managing Director at [email protected].
2. What data we collect and why
| Source | Data | Purpose | Legal basis (GDPR) |
|---|---|---|---|
| Email and phone | Your name, email address, phone number, company or organisation, and whatever you choose to tell us | To reply to you, discuss a potential project, and keep a record of our correspondence | Steps prior to entering a contract (Art. 6(1)(b)) and our legitimate interest in responding to business enquiries (Art. 6(1)(f)) |
| "Book a 30-min call" (SavvyCal) | Name, email address, chosen time and time zone, any answers you give in the booking form, and the meeting link | To schedule and hold the call you asked for | Steps prior to entering a contract (Art. 6(1)(b)) and legitimate interest (Art. 6(1)(f)) |
| Website analytics (Plausible) | Aggregated, anonymous statistics: pages visited, referrer, browser, device type and country. No cookies are set and no personal profile is built | To understand which pages are useful and improve the site | Legitimate interest (Art. 6(1)(f)) |
| Clients and suppliers | Contact details and billing information of people at organisations we work with | To perform our contract, invoice and meet accounting obligations | Contract (Art. 6(1)(b)) and legal obligation (Art. 6(1)(c)) |
We do not sell personal data, we do not use it for advertising, and we do not make automated decisions about you. We do not knowingly collect data from children through this website.
3. Cookies
swiftmade.co does not use advertising or tracking cookies. Plausible Analytics works without cookies. Third-party services you choose to open, such as the SavvyCal booking page, may set their own cookies under their own policies.
4. Who we share data with
We share personal data only with service providers that help us run the business, under data processing terms:
- SavvyCal: call scheduling.
- Plausible Analytics (Plausible Insights OÜ, Estonia): cookie-free website statistics, hosted in the EU.
- Email and calendar: our email and calendar providers.
- Zoom (Zoom Video Communications, Inc., USA): video calls.
- Website hosting: a reputable cloud hosting provider.
- Accounting and bookkeeping: our accounting software and bookkeeping service providers.
We may also disclose data where required by law, for example to tax authorities or courts.
5. International transfers
Some of our providers (for example SavvyCal and Zoom) are based in or may process data in the United States. Where data leaves the European Economic Area, we rely on the EU–US Data Privacy Framework where the provider is certified, or on the European Commission's Standard Contractual Clauses (SCCs). Some team members are located outside the EEA. Where they need access to personal data, for example to help prepare a proposal, we limit it and cover it with confidentiality obligations and SCCs.
6. How long we keep data
- Enquiries and correspondence that do not lead to a project: 2 years after last contact, then deleted.
- Call bookings: 2 years.
- Client and supplier records, invoices: 7 years, as required by the Estonian Accounting Act.
- Analytics: aggregated and anonymous, so it is not linked to you.
7. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data deleted, where we have no legal reason to keep it;
- restrict or object to our processing, including processing based on legitimate interest;
- receive your data in a portable format;
- withdraw consent at any time, where we rely on consent.
To use any of these rights, email [email protected]. We will reply within one month.
8. Complaints
If you are unhappy with how we have handled your data, please contact us first so we can try to put it right. You also have the right to complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), Tatari 39, 10134 Tallinn, Estonia (www.aki.ee, [email protected]), or to the supervisory authority in the EU country where you live or work.
9. Changes
We will update this notice when our tools or practices change and show the new effective date at the top.