Privacy Policy

1. Who we are (data controller)

The data controller is Elyseum Influence OÜ, Sepapaja tn 6, 15551 Tallinn, Estonia (registry code 17211913). Contact details are at the bottom of this page.

2. What data we collect and why

Contact form. When you write to us through the contact form, we receive the details you provide: your name, job title, company, LinkedIn profile if you share it, the services you are interested in, and your message. We use this data only to respond to your inquiry and to prepare the eligibility review you asked for. Legal basis: Art. 6(1)(b) GDPR (steps prior to entering a contract) or Art. 6(1)(f) (our legitimate interest in answering business inquiries).

Technical data. Like virtually all websites, our hosting provider processes standard technical logs (IP address, user agent, requested URL, time) to deliver pages securely and to protect against abuse. Legal basis: Art. 6(1)(f) (security of the website).

Analytics. We use first-party, cookieless analytics that do not identify individuals and do not set analytics cookies. No cross-site tracking takes place.

3. What we do NOT do

We do not sell personal data. We do not run advertising or social media pixels. We do not send marketing newsletters without a separate opt-in, and there is none on this site today.

4. Processors we use

To operate this site we rely on the following categories of processors:

• Vercel Inc., website hosting and content delivery. Our website platform runs on Vercel's infrastructure, which also provides our first-party, cookieless traffic analytics, processed on our behalf.
• Convex, backend database and functions that receive contact form submissions and forward them to us.
• Resend, our transactional email provider (the platform's built-in email service is powered by Resend). It delivers contact form notifications and other service emails to us and to you. It is not used for marketing newsletters.
• Stripe, payments. When you pay us online, payment and card data are handled by Stripe and are not stored on our servers. For fraud prevention and security, Stripe Payments Europe may also act as an independent data controller for the payment and fraud-prevention data it processes; its own privacy policy applies to that role. Service provider: Stripe Payments Europe, Ltd. / Stripe, Inc.
• Elevia, our CRM (customer relationship management) system, where we keep a record of inquiries, contacts, and agreed services so we can follow up and manage the client relationship.

5. International transfers

Our processors may process data outside the EEA: Vercel Inc. operates primarily in the United States, and Convex Labs, Inc. is also based there. The same applies to other processors such as Stripe, Inc., Resend, and Elevia. Where that happens, transfers rely on the European Commission's Standard Contractual Clauses, the EU-US Data Privacy Framework where applicable, or an adequacy decision. Contact us if you want a copy of the safeguards.

6. Retention

Contact inquiries are kept only as long as needed to handle your request and any follow-up, and no longer than 24 months unless a business relationship follows. Server logs are kept by our processor for a short security window. We store no consent data longer than 12 months.

7. Your rights

Under the GDPR you have the right to access, rectification, erasure, restriction of processing, data portability, and the right to object to processing based on legitimate interests. Where processing is based on consent, you can withdraw consent at any time. You also have the right to complain to your local supervisory authority.

To exercise any right, reach us using the contact option at the bottom of this page. We respond within one month.

8. Cookies and local storage

See our Cookie Policy for the full list. In short: strictly necessary storage only, plus your consent choice itself.