/privacy

General

At itsua.com, one of our main priorities is the privacy of our visitors. This Privacy Policy explains what information this website collects, why we collect it, and what we do with it.

It applies only to our online activities and to visitors to this website. It does not cover information collected offline, or through any channel other than this website.

The controller of personal data collected through this website is ITSUA OÜ, an Estonian private limited company (registry code 16007530, VAT number EE102549430) of Sakala tn 7-2, Tallinn, 10141, Estonia, trading as ITSUA — full company details are in our Legal Notice. If you have questions about this policy, or want to exercise any of the rights set out below, write to privacy@itsua.com.

Consent

By using our website, you hereby consent to our Privacy Policy and agree to its terms.

Information we collect

We collect only what you choose to send us. This website has no user accounts and nothing to register for.

• The brief form on /contact — your email address, and whatever else you choose to fill in: your name, the engagement type, timeline, budget and team size you select, links, your tech stack, the company and contact you are introducing, and the text of your brief.
• Booking a call on /meet — the scheduler on that page is provided by Cal.com. The name, email address and any notes you enter there go to Cal.com and to us, so that we can hold the meeting.
• Email you send us directly — whatever you choose to put in it, including any attachments.

How we use your information

• Reply to your enquiry and discuss the work you asked us about
• Provide, operate and maintain this website
• Understand, in aggregate, how this website is used
• Protect the site and the contact form from spam and abuse

We do not sell your personal data. This website carries no advertising; the only advertising service that receives data from it is Google Ads, as described below.

Log files

This website is hosted on Cloudflare. Like any host, it records standard request logs: internet protocol (IP) address, browser type, date and time stamp, the page requested and the referring page. These are used to serve the site, diagnose faults and defend against abuse.

Cloudflare also counts page views for us with its own Web Analytics script, which your browser loads from static.cloudflareinsights.com. And through Network Error Logging, your browser may report a page that failed to load to a.nel.cloudflare.com — a report that carries your IP address, the address of the page and the kind of error. Neither sets a cookie or stores anything in your browser, and neither is used to recognise you between visits.

Cookies, analytics and advertising

We use Google Analytics 4 (measurement ID G-BFG8D35EME) to understand how this website is used: which pages are read, roughly where visitors arrive from, and how they move through the site.

Google Analytics sets two first-party cookies in your browser — _ga and _ga_BFG8D35EME — which tell one visitor apart from another and expire 13 months after your last visit. The data they generate is processed on our behalf by Google, which may transfer it outside the European Economic Area under its own safeguards. Google states that Google Analytics 4 does not log or store IP addresses: your IP address is used to derive an approximate location and is then discarded.

We also advertise on Google Search. To learn whether an advertisement led to an enquiry, Google Ads (account AW-18471680274) records the click that brought you here in two first-party cookies — _gcl_au and _gcl_aw, which expire after 90 days — and in a local-storage entry, _gcl_ls. If you send the contact form, it reports that back to our account. Google may also use your visit to build advertising audiences for that account.

If you visit from the European Economic Area, the United Kingdom or Switzerland, Google's scripts are not loaded and none of these cookies is set until you accept them in the banner shown on your first visit. Elsewhere they load with the page. Wherever you are, the Cookies link at the foot of every page lets you change your answer at any time, and declining removes the cookies already set. Your answer is kept in your browser's local storage, under itsua_consent. If you have accepted, we also keep a note there, under itsua_first_touch, of how you first reached the site — the source, the campaign and the landing page — so an enquiry can be traced to the channel that brought it. Both entries are discarded after 13 months, and the banner then asks again.

Cloudflare Turnstile, the anti-spam check on the contact form, may also store a token in your browser for the duration of that check.

You can also refuse or delete these cookies in your browser settings, and Google publishes a browser add-on that opts you out of Google Analytics on every site you visit. This website works without cookies, though the contact form's spam check may not.

Third-party services we use

• Cloudflare — hosting, CDN, cookieless page-view counts, network error reports, and the Turnstile anti-spam check on the contact form.
• Google Analytics — website usage measurement.
• Google Ads — measuring whether our search advertisements lead to enquiries.
• Cal.com — the meeting scheduler embedded on /meet.
• MailChannels — delivers contact-form submissions to our inbox as email.

Each of these processes data under its own privacy policy. We use no third-party trackers beyond the services named here.

International transfers

Cloudflare, Google and Cal.com are based in the United States, and MailChannels in Canada, so the data described above may be processed outside the European Economic Area. Transfers to the United States rely on the EU–US Data Privacy Framework where the provider is certified under it, and otherwise on the European Commission's standard contractual clauses. Canada is covered by a European Commission adequacy decision.

Links to other websites

This website links out to client projects, open-source repositories and review profiles. This Privacy Policy does not apply to them — once you follow a link, the policy of the site you land on applies. We advise you to read it.

CCPA Privacy Rights

Under the CCPA, among other rights, California consumers have the right to:

Request that a business that collects a consumer's personal data disclose the categories and specific pieces of personal data that a business has collected about consumers.

Request that a business delete any personal data about the consumer that a business has collected.

Request that a business that sells a consumer's personal data, not sell the consumer's personal data.

We do not sell personal data. Where Google's cookies are in use, your visit is shared with Google for advertising; to stop that, use the Cookies link at the foot of every page and choose Decline. If your browser sends a Global Privacy Control signal, we treat it as that choice already made: Google's scripts are not loaded unless you accept them yourself.

If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us at privacy@itsua.com.

GDPR Data Protection Rights

We would like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:

The right to access – You have the right to request copies of your personal data. We may charge you a small fee for this service.

The right to rectification – You have the right to request that we correct any information you believe is inaccurate. You also have the right to request that we complete the information you believe is incomplete.

The right to erasure – You have the right to request that we erase your personal data, under certain conditions.

The right to restrict processing – You have the right to request that we restrict the processing of your personal data, under certain conditions.

The right to object to processing – You have the right to object to our processing of your personal data, under certain conditions.

The right to data portability – You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.

If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us at privacy@itsua.com.

Children's Information

Another part of our priority is adding protection for children while using the internet. We encourage parents and guardians to observe, participate in, and/or monitor and guide their online activity.

itsua.com does not knowingly collect any Personal Identifiable Information from children under the age of 13. If you think that your child provided this kind of information on our website, we strongly encourage you to contact us immediately and we will do our best efforts to promptly remove such information from our records.