Legal

Privacy

How we handle personal data on alamilabs.com, under the EU General Data Protection Regulation (GDPR).

1. Who is responsible

The controller for the data described here is AlamiLabs OÜ, registration number 17545637, Sepapaja tn 6, Lasnamäe linnaosa, 15551 Tallinn, Harju maakond, Estonia. You can reach us at hello@alamilabs.com.

We have not appointed a Data Protection Officer; we are not required to. Privacy questions go to the address above and are handled by the management board.

2. Cookies and tracking

We do not use cookies on this site. We do not run Google Analytics or any equivalent, we do not embed advertising or social media pixels, and we do not build profiles of visitors. Web fonts are served from our own domain rather than a third-party font CDN, so loading this page does not disclose your visit to a font provider.

Because we set no cookies and use no non-essential tracking, there is no consent banner to click. There is nothing to consent to.

3. What we process, and why

Server and security logs

Our hosting provider automatically records technical request data — IP address, timestamp, requested URL, referrer and user-agent string — as every web server does. This is used to serve the site, keep it available and defend it against abuse.

• Legal basis:legitimate interests (Article 6(1)(f) GDPR) — operating and securing our website.
• Retention:short-term, per our hosting provider’s standard log retention. We do not export these logs or use them to identify individual visitors.

Email you send us

If you email hello@alamilabs.com, we process your email address, your name if you give it, and whatever you choose to write, in order to answer you.

• Legal basis: legitimate interests (Article 6(1)(f)) in responding to enquiries; or, where your message concerns entering into a contract with us, steps taken at your request prior to contract (Article 6(1)(b)).
• Retention: for as long as the correspondence is relevant to our business relationship, and then deleted. Where a message relates to a transaction, accounting law may require us to keep the underlying records for seven years.

4. What we do not do

• We do not sell or rent personal data. Ever.
• We do not use personal data for automated decision-making or profiling.
• We do not send marketing email from this site — there is no mailing list to join here.
• We do not knowingly collect data from children. This is a corporate site not directed at children.

5. Who else sees the data

We keep the number of parties involved deliberately small. Personal data may be handled by:

• Our hosting and content-delivery provider, which serves this site and keeps the technical logs described above;
• Our email provider, which delivers and stores correspondence sent to us;
• Professional advisers and authorities, where we are legally required to disclose information.

These providers act as processors on our instructions under data processing agreements. Where a provider processes data outside the European Economic Area, that transfer is covered by an adequacy decision or by the European Commission’s Standard Contractual Clauses.

6. Other sites we operate

The products we operate run on their own domains and have their own privacy notices, because they process more than this site does — accounts, orders and payments. This notice covers alamilabs.com only. Payment card details are never received or stored by us: card data is handled directly by our regulated payment service provider.

7. Your rights

Under the GDPR you have the right to:

• ask what personal data we hold about you, and get a copy;
• have inaccurate data corrected;
• have data erased where there is no ongoing reason for us to keep it;
• ask us to restrict how we use it;
• receive data you gave us in a portable, machine-readable format;
• object to processing we base on legitimate interests, including on grounds relating to your particular situation.

Email hello@alamilabs.com to exercise any of these. We will respond within one month. There is no charge.

8. Complaints

If you think we have handled your data badly, please tell us first so we can put it right. You also have the right to complain to a supervisory authority. Ours is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon). You may also complain to the authority in your own EU country of residence.

9. Changes

If we change how we handle personal data, we will update this page and move the date below. Material changes will be described here rather than slipped in silently.

Last updated 30 August 2026