Privacy Policy

Adelson Advisory OÜ is the data controller, meaning we decide why and how this personal data is used.

For privacy questions or requests, email info@adelson.ee.

Enquiries and correspondence: your name, work email, company, chosen service and message. You may also provide your role, timing and information about your team, processes, systems or audit requirements. We keep relevant correspondence and notes about the enquiry.

Providing this information is voluntary. Without the required contact details and a description of your request, we may be unable to respond or assess the work. Optional fields can be left blank.

Please do not send passwords, sensitive personal information or confidential client records through the initial enquiry form.

Website operation: technical information such as your IP address, request time, requested page and browser information may be recorded to deliver the website, diagnose problems and protect it from misuse.

Optional analytics: if you accept analytics, Google Analytics 4 collects information such as pages visited, interactions, referral source, approximate location, browser and device details, and cookie identifiers.

We use personal data for these purposes and legal bases:

• Responding to business enquiries and managing business relationships: our legitimate interest in communicating with prospective clients, understanding their needs and keeping relevant contact records.
• Preparing or fulfilling a contract with you personally: steps you request before entering a contract, or performance of that contract. When you represent a company, we generally rely on legitimate interests for your contact information.
• Running and protecting the website: our legitimate interest in providing a reliable, secure website and preventing misuse.
• Understanding website use: your consent to optional analytics.
• Meeting legal obligations: compliance with applicable law. Where necessary, we also retain relevant records to establish, exercise or defend legal claims, based on legitimate interests.

Access is limited to people who need the information for their work and service providers supporting these activities:

• Cloudflare and Zoho: Cloudflare hosts the website and processes the enquiry form; Zoho delivers our email.
• Notion: our customer relationship management system, where we save relevant contact details, enquiry summaries and follow-up notes.
• Google: Google Analytics 4, when you accept analytics.

These providers may use their own authorised service providers. Relevant information may also be disclosed to professional advisers or public authorities where necessary for legal obligations or legal claims.

Cloudflare, Cloudflare, Cloudflare, Notion and Google may process personal data outside the European Economic Area, including in the United States.

Where required, transfers are covered by safeguards such as the European Commission’s Standard Contractual Clauses, which place data-protection obligations on the parties receiving the information. Contact info@adelson.ee for information about the safeguards applicable to your data or to request a copy.

• Enquiries that do not become client work: up to 12 months after the last meaningful contact, including related email correspondence and Notion records.
• Client relationship records: for the relationship and afterwards where needed for legal obligations or legal claims. Additional information about project-specific processing is provided where applicable.
• Technical logs: only for the period needed to operate and protect the website, diagnose faults or investigate an incident.
• Google Analytics user and event data: up to 14 months, without resetting the retention period when you return. This setting does not apply to standard aggregated reports.
• Cookie preferences (saved in necessary browser storage as adelson_cookie_preferences): up to 12 months.

Records needed for an outstanding legal obligation or dispute may be retained longer. Deleted information may remain temporarily in protected backups until those backups expire.

Analytics is optional and remains off unless you accept it. You can reject analytics and still use the website and contact form.

Change or withdraw your choice through Cookie settings in the footer. Withdrawal stops further analytics collection from your browser and does not affect the lawfulness of earlier processing. See our Cookie Policy for details.

We use analytics to understand website use, without advertising trackers or sending enquiry contents to Google Analytics.

Depending on the circumstances, you can request access to your personal data, correction, deletion, restriction of processing or a transferable copy.

You can object to processing based on legitimate interests on grounds relating to your particular situation. You can also withdraw consent at any time where processing relies on consent.

Email info@adelson.ee to exercise your rights. We may need to verify your identity. We normally respond within one month; if a lawful extension is necessary, we explain why within that month.

You can complain to the Estonian Data Protection Inspectorate, Andmekaitse Inspektsioon, or the relevant supervisory authority in your country of residence or work, or where the alleged infringement occurred.

We use appropriate access controls and other safeguards to protect personal data. Enquiries are reviewed by a person; we do not make decisions with legal or similarly significant effects about you solely through automated processing.

We update this policy when our data practices change. The date above shows the latest revision.