Privacy Policy

1. Data Controller

The data controller for personal data collected through this Website is:

If you have questions or requests regarding your personal data, please use the contact details above.

2. What Personal Data We Collect and Why

2.1 Contact and Demo Requests

When you fill in the contact form or book a demo, we collect:

• Name
• E-mail address
• Subject and message content
• Company name (if provided)

Legal basis: Legitimate interest (Article 6(1)(f) GDPR) — we need this information to respond to your inquiry. Where required by applicable law, we rely on your consent.

Retention: We retain contact inquiry data for up to 2 years from the date of the last interaction, or for as long as necessary to maintain the business relationship.

2.2 Server Logs and Analytics

Our web server automatically records standard log data when you visit the Website, including:

• IP address (anonymised where technically feasible)
• Browser type and version
• Operating system
• Pages visited and time spent
• Referring URL
• Date and time of each request

Legal basis: Legitimate interest (Article 6(1)(f) GDPR) — we use this data to operate and improve the Website, to detect security incidents, and for aggregate statistical analysis. We do not use server logs to identify individual visitors unless required by law.

Retention: Standard server logs are retained for up to 90 days.

2.3 Demo Scheduling via Calendly

The "Book a demo" button links to a scheduling page operated by Calendly, LLC. If you book a meeting through Calendly, your data (name, e-mail address, and meeting preferences) is processed by Calendly under their own privacy policy. We receive the scheduling details and use them to prepare for and conduct the demo session.

3. Cookies

We use cookies — small text files stored on your device — to make the Website work and to understand how it is used.

3.1 Strictly Necessary Cookies

These cookies are essential for the Website to function and cannot be switched off. They include the cookie-consent preference cookie we set when you click "Accept". No personal data is included in this cookie.

Legal basis: Necessary for the legitimate operation of the service; no consent required for strictly necessary cookies under ePrivacy rules.

Retention: Up to 1 year.

3.2 Analytics Cookies

We may use analytics tools to collect aggregated information about Website traffic and user interactions. This helps us understand which pages are most useful and how visitors navigate the site. Where analytics cookies are used, they are configured to anonymise IP addresses.

Legal basis: Consent (Article 6(1)(a) GDPR). You can withdraw consent at any time by clearing your cookies and not accepting them again on the next visit.

Retention: Up to 13 months from the date of collection, in line with standard analytics data practices.

3.3 Managing Cookies

Most browsers accept cookies by default. You can change your browser settings to refuse all or some cookies or to alert you when websites set or access cookies. If you disable or refuse cookies, some parts of the Website may become unavailable or not function properly. For browser-specific instructions, visit your browser's help documentation (Google Chrome, Mozilla Firefox, Safari, Microsoft Edge).

4. How We Share Your Data

We do not sell or rent your personal data to third parties. We may share your data only in the following circumstances:

• Service providers: Trusted third-party vendors who help us operate the Website (e.g., hosting providers, e-mail delivery services). These parties process data only on our instructions and are bound by confidentiality obligations.
• Calendly: When you book a demo, limited data is shared with Calendly as described in Section 2.3.
• Legal compliance: Where required to do so by law, court order, or governmental authority, or to protect our legal rights.
• Business transfers: In the event of a merger, acquisition, or sale of substantially all our assets, your data may be transferred to the successor entity. We will notify you before this occurs where required by law.

5. International Data Transfers

AgencyPin OÜ is based in Estonia, within the European Economic Area (EEA). Some service providers we use may be located outside the EEA, including in the United States. Where personal data is transferred outside the EEA, we ensure appropriate safeguards are in place — such as Standard Contractual Clauses approved by the European Commission — to protect your data in accordance with GDPR requirements.

6. Data Security

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encrypted communication (HTTPS), restricted access to personal data, and regular security reviews.

No method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.

7. Your Rights Under GDPR

If you are located in the European Economic Area, you have the following rights regarding your personal data:

• Right of access (Art. 15): You may request a copy of the personal data we hold about you.
• Right to rectification (Art. 16): You may request that we correct inaccurate or incomplete data.
• Right to erasure (Art. 17): You may request deletion of your personal data where there is no legitimate reason for us to continue processing it.
• Right to restriction of processing (Art. 18): You may request that we suspend processing of your data in certain circumstances.
• Right to data portability (Art. 20): You may request a structured, machine-readable copy of the data you have provided to us.
• Right to object (Art. 21): You may object to processing based on legitimate interests. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests or rights.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact us at sales@agencypin.com. We will respond within 30 days. We may need to verify your identity before fulfilling a request.

8. Right to Lodge a Complaint

If you believe your data has been processed in a manner that infringes applicable data protection law, you have the right to lodge a complaint with the supervisory authority in your country of residence. In Estonia, the supervisory authority is:

We encourage you to contact us first so that we can address your concern directly.

9. Links to Other Websites

This Website may contain links to third-party websites or services (such as Calendly). We are not responsible for the privacy practices of those third parties. We encourage you to review the privacy policies of any external sites you visit.

10. Children's Privacy

This Website is intended for business use and is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, regulatory, or operational reasons. The updated version will be published on this page with a revised "Last updated" date. For material changes, we will provide more prominent notice where required. We encourage you to review this page periodically.