Privacy Policy

This page explains what data ZAVRA OÜ (hereafter "we") collects, what it's used for, and what rights you have as a data subject. It applies to all orders, briefs and inquiries submitted through sitepop.eu.

1. What data we collect

We only collect data that's necessary to fulfil the order and provide the service:

• Contact details: information from the order form (name, email, company name).
• Account details: the email and password (securely encrypted/hashed) for your Sitepop user account, which lets you track the order's status in the client area.
• Brief and project input: the questionnaire answers (content, texts, images, wishes for the website) that you fill in after the order is confirmed.
• Catalog data: the data submitted for a product or service catalog (names, prices, images, descriptions).
• Payment data: payment-related information, processed and handled securely by our payment service provider.

2. Why we collect data

• To fulfil the order: to build and set up your new website.
• To communicate about the project: to stay in touch with you during the project through our platform.
• To meet legal obligations: to issue invoices and fulfil bookkeeping requirements.

3. Who we share data with

Data is never sold or shared with third parties for marketing purposes. Data may be processed by our trusted partners, only to the extent necessary to fulfil the order:

• Hosting and domain service providers (to host the finished website and register the domain).
• Payment service providers (to securely process the deposit and balance payment).
• Database and email service providers (to store orders and send notification emails).

4. How long we keep data

We keep project-related data for the duration of the project and afterward for as long as necessary to meet bookkeeping obligations (Estonian law requires source bookkeeping documents to be kept for 7 years) and guarantee-related obligations. After the retention period ends, the data is deleted or anonymized.

5. Your rights

Under the General Data Protection Regulation (GDPR), you have the right to:

• get information about what data we process about you;
• request correction of inaccurate data;
• request deletion of your data (unless this conflicts with a legal retention obligation);
• object to the processing of your data.

To exercise these rights, contact us at info@sitepop.eu. If you believe your rights have been violated in the processing of your personal data, you have the right to contact the Estonian Data Protection Inspectorate (www.aki.ee).

6. Cookies

On your first visit, we ask which cookies we may use. Cookies fall into three categories:

• Necessary: no consent is asked, since the site doesn't work without them (e.g. the login session in the client area). This is currently the only cookie category used on the site.
• Statistics: used only with your consent, helps us understand how the site is used. No analytics tool is currently in use.
• Marketing: used only with your consent, measures how well our advertising performs. No marketing pixel is currently in use.

You can change your choice at any time via the "Cookie settings" link in the site's footer.

7. Contact

For questions about the processing of personal data, get in touch:
Email: info@sitepop.eu