Privacy Policy

This Privacy Policy explains how Data Trust OÜ (“DataTrustly”, “we”, “us”) collects, uses and protects personal data when you visit datatrustly.eu, get in touch, or use our services. We’re based in the European Union and we treat the GDPR as a baseline, not a checkbox.

1. Who we are

The data controller is Data Trust OÜ, a private limited company registered in Estonia, at Roosikrantsi tn 4a-11, 10119 Tallinn, Estonia. For any privacy question, email privacy@datatrustly.eu.

2. What data we collect

• Information you give us — when you use our contact form or email us (name, email address, company and message).
• Information collected automatically — basic server logs such as IP address, browser type and pages visited, used to keep the site secure and running.
• Third-party resources — we load fonts and icons from external CDNs (Google Fonts and Font Awesome via Cloudflare). Your browser requests those files directly, so these providers may receive your IP address.
• Service data — when you use our API, we process the data you send us on your behalf as a data processor, governed by your customer agreement.

3. Legal bases

We process personal data under one or more of the GDPR Article 6 bases: performance of a contract (to provide services you signed up for), our legitimate interests (to keep the site and API secure and to answer your enquiries), your consent (which you can withdraw at any time), and legal obligations (such as accounting and tax).

4. How we use your data

• Respond to your enquiries and provide support
• Provide, maintain and improve the service
• Protect against fraud, abuse and security threats
• Meet our legal and accounting obligations

5. Sharing & processors

We do not sell your personal data. We share it only with service providers who help us run DataTrustly (such as cloud hosting and email), under appropriate data-processing terms. Wherever possible, our infrastructure and data storage are located in the European Union.

6. International transfers

We aim to keep processing within the EU/EEA. Where a provider processes data outside the EEA (for example, a CDN), we rely on appropriate safeguards such as Standard Contractual Clauses.

7. Data retention

We keep personal data only as long as needed for the purposes above or as required by law. Enquiry emails are kept for a reasonable period; service data retention follows your plan (see Pricing) and your customer agreement.

8. Your rights

Under the GDPR you can request access to, rectification of, or erasure of your personal data, and you can restrict or object to processing or ask for data portability. To exercise these rights, email privacy@datatrustly.eu. You also have the right to lodge a complaint with your local supervisory authority — in Estonia, the Data Protection Inspectorate (Andmekaitse Inspektsioon).

9. Cookies

We do not use advertising or cross-site tracking cookies, and we don’t run third-party analytics that profile you. Any cookies used are limited to what is strictly necessary for the site to work. The external CDNs that serve our fonts and icons may set their own cookies or log requests when your browser loads their files.

10. Security

We encrypt data in transit and at rest and follow standard security practices. No system is perfectly secure, but we work to protect your data and to notify you and the relevant authority without undue delay if a breach affects you.

11. Children

Our services are intended for businesses and are not directed at children under 16.

12. Changes to this policy

We may update this policy from time to time. We’ll change the “last updated” date above and, for significant changes, let affected customers know.

13. Contact

Questions about your privacy? Email privacy@datatrustly.eu and we’ll be glad to help.