Privacy Policy

Last updated: January 2026

This Privacy Policy explains how EstoniK OÜ (“we”, “us”, “our”) collects, uses, stores, and protects personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Estonian laws.

1. Data Controller

Business name: EstoniK OÜ
Registration code: 17407450
Address: Loosimõisa, Loosi, Võru County, 65260, Estonia
Email: office@estonik.com
Phone: +372 5804 1810

EstoniK OÜ is the data controller responsible for the processing of your personal data.

2. Personal Data We Collect

We may collect and process the following categories of personal data:

• Identification and contact information (such as name, email address, phone number)
• E-residency and company-related information provided in connection with e‑residency application support, company formation, and accounting services
• Financial and accounting data necessary to fulfill accounting, compliance, and reporting obligations for client companies
• Technical data, including IP address, browser type, device information, and usage data
• Communication data, such as emails or messages you send to us

We do not intentionally collect special categories of personal data under Article 9 GDPR unless required by law and explicitly provided by you.

3. How We Collect Personal Data

Personal data is collected in the following ways:

• When you contact us via email or other communication channels
• When you use our website
• Through automated technologies such as cookies and analytics tools

4. Purposes and Legal Basis for Processing

We process personal data only when we have a lawful basis under Article 6 of the GDPR, for the following purposes:

• E‑residency application support – assisting clients with preparation and submission of applications
• Company formation services – establishing Estonian companies and related administration
• Accounting and compliance services – fulfilling statutory accounting, tax, and reporting obligations
• Client communication and support
• Website operation, security, and improvement

The legal bases for processing include:

• Contractual necessity – processing required to provide requested services
• Legal obligation – compliance with accounting, tax, and regulatory requirements
• Legitimate interests – operating and improving our services and website
• Consent – for optional processing such as analytics cookies

5. Cookies and Google Analytics

Our website uses cookies to ensure proper functionality and to understand how visitors use our site.

Functional Cookies

We use standard WordPress functional cookies that are necessary for:

• Website functionality
• Security and performance
• Remembering user preferences

These cookies do not track visitors for marketing purposes and cannot be disabled via the website without affecting functionality.

Google Analytics

We use Google Analytics, provided by Google LLC, to collect anonymized statistical data about website usage.

• Google Analytics cookies are used only after visitors are informed and given the option to opt out
• We do not use Google Analytics for advertising, remarketing, or profiling
• IP anonymization and GDPR‑appropriate settings are applied where applicable

Visitors can opt out of analytics tracking via the cookie banner or by adjusting browser settings.

6. Advertising and Data Sales

• We do not display advertisements on our website
• We do not sell, rent, or resell personal data to third parties
• Personal data is never used for third-party marketing purposes

7. Data Sharing and Processors

We may share personal data only with trusted third-party service providers (data processors) where necessary, such as:

• IT and hosting providers
• Analytics service providers (e.g. Google)
• Accounting or legal service providers, where required by law

All processors act under contractual agreements and process data in compliance with GDPR requirements.

8. International Data Transfers

Some service providers (such as Google) may process data outside the European Economic Area (EEA).

Where such transfers occur, we ensure appropriate safeguards are in place, including:

• EU Standard Contractual Clauses
• Adequacy decisions by the European Commission

9. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes described in this policy, including:

• Legal, accounting, and regulatory obligations
• Resolving disputes
• Enforcing agreements

When data is no longer required, it is securely deleted or anonymized.

10. Data Subject Rights

Under the GDPR, you have the following rights:

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure (“right to be forgotten”)
• Right to restrict processing
• Right to data portability
• Right to object to processing based on legitimate interests
• Right to withdraw consent at any time

To exercise your rights, please contact us at office@estonik.com.

11. Data Security

We implement appropriate technical and organizational measures to protect personal data against:

• Unauthorized access
• Accidental loss
• Alteration or disclosure

Access to personal data is limited to authorized personnel only.

12. Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the relevant supervisory authority.

In Estonia, this is:

Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon)

We encourage you to contact us first so we can address your concerns.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website, with the effective date clearly indicated.

14. Contact Us

If you have any questions about this Privacy Policy or our data processing practices, please contact:

EstoniK OÜ
Email: office@estonik.com
Phone: +372 5804 1810