/privacy

General

At itsua.com, one of our main priorities is the privacy of our visitors. This Privacy Policy explains what information this website collects, why we collect it, and what we do with it.

It applies only to our online activities and to visitors to this website. It does not cover information collected offline, or through any channel other than this website.

The controller of personal data collected through this website is ITSUA OÜ, an Estonian private limited company (registry code 16007530, VAT number EE102549430) of Sakala tn 7-2, Tallinn, 10141, Estonia, trading as ITSUA. If you have questions about this policy, or want to exercise any of the rights set out below, write to hello@itsua.com.

Consent

By using our website, you hereby consent to our Privacy Policy and agree to its terms.

Information we collect

We collect only what you choose to send us. This website has no user accounts and nothing to register for.

• The brief form on /contact — your name, your email address, the engagement type and timeline you select, and the text of your brief.
• Booking a call on /meet — the scheduler on that page is provided by Cal.com. The name, email address and any notes you enter there go to Cal.com and to us, so that we can hold the meeting.
• Email you send us directly — whatever you choose to put in it, including any attachments.

How we use your information

• Reply to your enquiry and discuss the work you asked us about
• Provide, operate and maintain this website
• Understand, in aggregate, how this website is used
• Protect the site and the contact form from spam and abuse

We do not sell your personal data. This website carries no advertising and we do not share your data with advertisers.

Log files

This website is hosted on Cloudflare. Like any host, it records standard request logs: internet protocol (IP) address, browser type, date and time stamp, the page requested and the referring page. These are used to serve the site, diagnose faults and defend against abuse.

Cookies and analytics

We use Google Analytics 4 (measurement ID G-BFG8D35EME) to understand how this website is used: which pages are read, roughly where visitors arrive from, and how they move through the site. It loads on every page of itsua.com.

Google Analytics sets two first-party cookies in your browser — _ga and _ga_BFG8D35EME — which tell one visitor apart from another and expire two years after your last visit. The data they generate is processed on our behalf by Google, which may transfer it outside the European Economic Area under its own safeguards. Google states that Google Analytics 4 does not log or store IP addresses: your IP address is used to derive an approximate location and is then discarded.

Cloudflare Turnstile, the anti-spam check on the contact form, may also store a token in your browser for the duration of that check.

You can refuse or delete these cookies in your browser settings, and Google publishes a browser add-on that opts you out of Google Analytics on every site you visit. This website works without cookies, though the contact form's spam check may not.

Third-party services we use

• Cloudflare — hosting, CDN, and the Turnstile anti-spam check on the contact form.
• Google Analytics — website usage measurement.
• Google Fonts — the typefaces on this site are loaded from Google's servers, so your browser's request, including your IP address, reaches Google.
• Cal.com — the meeting scheduler embedded on /meet.
• MailChannels — delivers contact-form submissions to our inbox as email.

Each of these processes data under its own privacy policy. We use no advertising networks, no remarketing pixels and no third-party trackers beyond the services named here.

Links to other websites

This website links out to client projects, open-source repositories and review profiles. This Privacy Policy does not apply to them — once you follow a link, the policy of the site you land on applies. We advise you to read it.

CCPA Privacy Rights (Do Not Sell My Personal Information)

Under the CCPA, among other rights, California consumers have the right to:

Request that a business that collects a consumer's personal data disclose the categories and specific pieces of personal data that a business has collected about consumers.

Request that a business delete any personal data about the consumer that a business has collected.

Request that a business that sells a consumer's personal data, not sell the consumer's personal data.

If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us at hello@itsua.com.

GDPR Data Protection Rights

We would like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:

The right to access – You have the right to request copies of your personal data. We may charge you a small fee for this service.

The right to rectification – You have the right to request that we correct any information you believe is inaccurate. You also have the right to request that we complete the information you believe is incomplete.

The right to erasure – You have the right to request that we erase your personal data, under certain conditions.

The right to restrict processing – You have the right to request that we restrict the processing of your personal data, under certain conditions.

The right to object to processing – You have the right to object to our processing of your personal data, under certain conditions.

The right to data portability – You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.

If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us at hello@itsua.com.

Children's Information

Another part of our priority is adding protection for children while using the internet. We encourage parents and guardians to observe, participate in, and/or monitor and guide their online activity.

itsua.com does not knowingly collect any Personal Identifiable Information from children under the age of 13. If you think that your child provided this kind of information on our website, we strongly encourage you to contact us immediately and we will do our best efforts to promptly remove such information from our records.