Privacy, in plain language.

Who is responsible

NorthByte OÜ is the data controller for personal data processed through this website and its project-enquiry form.

What we collect

Information you provide

When you submit the enquiry form, we collect your name, work email, company, selected service, message, privacy-policy acknowledgement, and submission time.

Technical information

Our hosting and security infrastructure may process limited technical information such as IP address, browser and device details, request timestamps, and diagnostic or security logs.

Please do not include special-category or highly confidential personal data in the enquiry form.

Why we use it

• To respond, understand your needs, prepare a quote, and take steps toward a possible contract—GDPR Article 6(1)(b).
• To operate and secure the website, prevent misuse, and keep appropriate business correspondence—our legitimate interests under GDPR Article 6(1)(f).
• To meet legal obligations where applicable—GDPR Article 6(1)(c).

The required form checkbox confirms that you have read this policy. It is not consent to marketing. NorthByte does not use enquiry details for automated decision-making or profiling.

Who may receive it

Access is limited to NorthByte personnel and contractors who need the information to respond or support our systems. We use service providers for hosting, database storage, security, and maintenance, including OpenAI Sites and underlying Cloudflare infrastructure.

We may also disclose information to professional advisers or public authorities where lawfully required. We do not sell personal data or share enquiry details for third-party advertising.

International transfers

Some service providers may process data outside the European Economic Area. Where personal data is transferred internationally, we rely on a mechanism recognized under the GDPR, such as an adequacy decision or Standard Contractual Clauses, as applicable. Contact us if you would like more information about relevant safeguards.

How long we keep it

Enquiry data is kept for up to 24 months after our most recent communication. If the enquiry becomes a client engagement, the information may form part of business records retained for the applicable contractual, accounting, tax, or legal period.

Technical logs are kept for the shorter periods needed for security and diagnostics. Information is deleted or anonymized when it is no longer needed, unless longer retention is required by law or to establish, exercise, or defend legal claims.

Your rights

Depending on the circumstances, you may ask us to:

• give you access to your personal data;
• correct inaccurate or incomplete data;
• erase data or restrict how it is used;
• provide portable data where the right applies;
• stop processing based on legitimate interests; or
• withdraw consent where processing relies on consent.

Email legal@northbyte.ee. We may ask for information needed to verify your identity.

Questions and complaints

Please contact us first so we can try to resolve your concern. You also have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon):

Cookies and security

NorthByte does not currently configure analytics or advertising cookies on this website. The hosting infrastructure may use strictly necessary technical mechanisms to deliver and protect the site.

We use reasonable technical and organizational safeguards to protect personal data. No internet service is completely secure, so we cannot guarantee absolute security.

Changes to this policy

We may update this policy when our services, processing, or legal obligations change. The effective date at the top shows the latest version. Material changes will be highlighted where appropriate.

This policy follows the transparency requirements of theEU General Data Protection Regulation ↗.