Privacy Policy
Effective from 10.10.2026
1. Who processes your data
The data controller is Web Design Group OÜ (registry code 16107326, address Tulika tn 19/1, 10613 Tallinn, Estonia). Office: Mustamäe tee 50, 10621 Tallinn.
Data protection contact: info@sitedesign.ee.
2. What data we collect and why
Contact and order forms
When you send an enquiry, we process your name, e-mail address, phone number and message. We use them only to answer your enquiry and prepare an offer. Legal basis: steps taken at your request before entering into a contract (GDPR Art. 6(1)(b)).
The forms are protected against spam by Google reCAPTCHA, which analyses data about your device and browser (including your IP address). Legal basis: our legitimate interest in protecting the website against abuse (Art. 6(1)(f)).
Chat assistant
Messages sent through the chat window, the selected language and the page address are transmitted to our server. Replies are generated by the OpenAI artificial intelligence service. Conversations are stored in the website’s admin area so that we can contact you if needed. Please do not enter sensitive personal data in the chat. Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b)).
Statistics and marketing (only with your consent)
With your consent we use Google Analytics (measuring site traffic) and Meta Pixel and Google advertising signals (ad relevance and measuring ad performance). If you do not consent, no cookies are stored and Google receives only anonymous, cookieless signals used to model statistics. Legal basis: consent (Art. 6(1)(a)), which you can withdraw at any time using the “Cookie settings” button at the bottom of the page.
Server logs
The web server keeps technical logs (IP address, time, requested address) for security. Legal basis: legitimate interest (Art. 6(1)(f)).
3. Cookies
| Cookie | Purpose | Duration | Type |
|---|---|---|---|
| sd_consent | Remembers your cookie choice | 6 months | Necessary |
| wp-wpml_current_language | Remembers the selected language | 1 day | Necessary |
| _ga, _ga_W441XYWZ7D | Google Analytics: distinguishing visits | up to 13 months | Analytics |
| _fbp | Meta Pixel: measuring ad performance | 3 months | Marketing |
The chat assistant also stores the conversation history and the selected language in your browser (localStorage) so the conversation continues across pages. This data stays on your device.
4. Who receives the data
- Hosting provider in Estonia (Afacerver OÜ) — website and e-mail.
- Google Ireland Limited — reCAPTCHA, Google Analytics, Google advertising services.
- Meta Platforms Ireland Limited — Meta Pixel (only with consent).
- OpenAI — to generate chat assistant replies (chat messages).
Google, Meta and OpenAI may process data in the United States; transfers rely on the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses. We do not sell personal data.
5. Retention
- Enquiries and correspondence — up to 3 years after the last contact; if a contract is concluded, accounting documents for the period required by law (7 years).
- Google Analytics event data — 14 months.
- Server logs — according to the hosting provider’s settings, usually up to a few months.
6. Your rights
You have the right to access your data, have it corrected, request its erasure or restriction of processing, object to processing and receive your data in a portable format. You can withdraw your consent at any time. Write to info@sitedesign.ee — we reply within 30 days.
If you believe we are violating your rights, you may contact the Estonian Data Protection Inspectorate (www.aki.ee).
7. Changes
We update this notice when our data processing changes. The current version is always on this page.