1. Home
  2. Privacy policy

Privacy policy

Version of 4 November 2026. This is a template that must be reviewed by a lawyer before publication.

1. Who processes your data

Data controller: Aurora Web, address: Tallinn, Harju County, Estonia. For any questions about your data, message us on Telegram at @aurorawebstudio.

2. What data we collect

  • Contact details from forms, chat and the project brief: name, phone, e-mail, Telegram, company name.
  • The content of your messages and any files you attach.
  • Technical data: IP address, device and browser type, pages you visited.
  • Analytics and advertising data, only if you have given consent in the cookie banner.

3. Why we use your data

  • To reply to your request, prepare a proposal and conclude a contract (Art. 6(1)(b) GDPR).
  • To meet accounting and tax obligations (Art. 6(1)(c) GDPR).
  • To improve the website and measure advertising performance, with your consent (Art. 6(1)(a) GDPR).
  • To protect the website from spam and abuse (legitimate interest, Art. 6(1)(f) GDPR).

4. How long we keep it

Requests that did not lead to a contract are kept for up to 24 months. Contract documents are kept for 7 years, as required by the Estonian Accounting Act. Analytics data is kept for up to 14 months.

5. Who we share it with

Data is shared only with services that help us work: hosting, CRM, e-mail, analytics (Google Analytics, Microsoft Clarity) and, if you have consented, advertising (Google Ads, Meta). We do not sell personal data.

6. Your rights

You can request access to your data, its correction, erasure, restriction of processing and portability, and you can withdraw your consent. Message us on Telegram at @aurorawebstudio and we will reply within 30 days. You can also contact the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee).

7. Cookies

We use three kinds of cookies:

  • Necessary: keep the website working and remember your theme, language and cookie choice. Always on.
  • Analytics: Google Analytics 4 and Microsoft Clarity. Only with your consent.
  • Advertising: Google Ads and Meta Pixel for conversion measurement and remarketing. Only with your consent.

We use Google Consent Mode v2: until you give consent, analytics and advertising tags do not store cookies.