Privacy Policy

Last updated: October 17, 2026

1. Data controller

The controller responsible for your personal data is:

2. Data we collect

We collect the following personal data through this website:

  • Newsletter: your email address, when you subscribe.
  • Contact form: your name, email address, company (optional), the topic you choose and your message.
  • Analytics: pseudonymized usage statistics (pages visited, device type, approximate location), only if you accept analytics cookies.
  • Correspondence: the content of emails you send us, including your email address.

3. Legal basis

We process personal data on these legal bases under Article 6 of the GDPR:

  • Consent (Art. 6(1)(a)): for the newsletter and analytics cookies. You can withdraw consent at any time.
  • Steps before a contract (Art. 6(1)(b)): to reply to messages sent through the contact form or by email, and to prepare a project proposal at your request.
  • Legitimate interests (Art. 6(1)(f)): to keep the website secure and working.
  • Legal obligation (Art. 6(1)(c)): where the law requires us to keep records.

4. Why we use your data

  • To send you the newsletter, only if you subscribed.
  • To reply to your messages and prepare project proposals.
  • To understand how the website is used and improve it, only if you accepted analytics cookies.

5. Cookies and analytics

We use Google Analytics (property G-V06P5NDZNT) to see how the website is used. It runs only if you accept analytics cookies in the banner shown on your first visit. Until you accept, no analytics script is loaded and no analytics cookies are set.

Your choice is stored in your browser. You can change it at any time with Cookie settings in the footer. If you withdraw consent, we stop loading Google Analytics and delete its cookies.

We do not use advertising cookies.

6. How long we keep data

  • Newsletter: until you unsubscribe.
  • Contact form messages and correspondence: up to 24 months after our last exchange. If we sign a contract with you, we keep records as long as the law requires.
  • Analytics data: up to 26 months, in Google Analytics.

7. Your rights

Under the GDPR you have the right to:

  • Access: get a copy of your personal data.
  • Rectification: have incorrect data corrected.
  • Erasure: have your data deleted.
  • Restriction: limit how we process your data.
  • Portability: receive your data in a machine-readable format.
  • Objection: object to processing based on legitimate interests.
  • Withdraw consent: at any time, without affecting earlier processing.

To use any of these rights, write to hello@calexislabs.com. You can also complain to the Estonian Data Protection Inspectorate, Andmekaitse Inspektsioon.

8. Service providers and transfers

These providers help us run the website. They process personal data only on our behalf and under our instructions:

  • Vercel: hosting of this website.
  • Cloudflare: database for newsletter subscriptions and contact form messages.
  • Resend: delivering contact form messages to our inbox by email.
  • Google: website analytics, only with your consent.

We process data mainly within the European Union. Where a provider processes data outside the EU (for example in the United States), we rely on safeguards such as the EU Standard Contractual Clauses.

9. Changes to this policy

We may update this policy. The date at the top of the page shows the latest version.

10. Contact

Questions about this policy or your data? Write to hello@calexislabs.com.