Privacy policy

Stackwise OÜ is the controller of your personal data. It is a private limited company registered in Estonia under registry code 17191091, at Tornimäe tn 5, 10145 Tallinn, Estonia, and trades as larch.

For anything about your data, write to nicholas@larch.ee. There is no data protection officer: a company of our size is not required to have one.

• When you write to us or book a call: your name, email address and company, what you tell us, and the time of the call.
• When you visit the site: our server records each request with your IP address, browser, the page and the time.
• Only if you accept analytics: Google Analytics records the pages you view, the site you came from, your device, browser and approximate location, linked to a random ID in a cookie.

The site has no forms and no accounts. We do not ask for sensitive data such as health or political views.

Each use has its own legal basis under the GDPR (Article 6):

• To reply to you, run the call you booked and prepare a project: steps before a contract, and our legitimate interest in answering the people who contact us.
• To keep the site running and secure: our legitimate interest. This is what the server records are for.
• To see which pages help (Google Analytics): your consent, which you can withdraw at any time.
• To carry out a contract and keep its invoices if you become a client: the contract itself and Estonian accounting law.

We do not sell your data, use it for advertising or make automated decisions about you.

On your first visit, a banner asks whether Google Analytics may run. It stays off until you choose Accept. If you choose Decline, no Google Analytics script or cookie loads and the site works the same.

If you accept, Google Analytics sets two cookies, _ga and _ga_WNGPLSZMWF, which last up to two years. Google signals and ad personalisation are switched off.

Your browser remembers your choice in its local storage, not in a cookie, so the banner does not ask again. You can change it at any time in Cookie settings, which is also linked in the footer of every page.

We use a few providers who process data on our behalf, under data processing terms:

• Google: hosting of this site on Google Cloud in the EU, our email (Google Workspace), and Google Analytics if you accept it.
• Calendly: booking the 30-minute call.

We share data with authorities only when the law requires it. Links to LinkedIn take you to LinkedIn, whose own privacy policy then applies.

Google and Calendly may process data in the United States. Both are certified under the EU-US Data Privacy Framework, and their terms add the European Commission’s standard contractual clauses as a safeguard.

• Emails, call bookings and call notes: one year after our last contact, unless you become a client.
• Contracts and invoices: seven years, as Estonian accounting law requires.
• Server records: 30 days.
• Google Analytics data: up to 14 months. Its cookies last up to two years, or until you decline.

We protect your data with appropriate technical and organisational measures: encrypted connections (HTTPS) for the whole site, access limited to the people who need it, and providers who meet the same standard.

You can ask us to:

• Show you the data we hold about you and give you a copy
• Correct it or delete it
• Restrict how we use it, or object to a use based on our legitimate interest
• Send it to you or to another company in a common format

You can withdraw your consent to analytics at any time in Cookie settings. Write to nicholas@larch.ee; we answer within one month.

If you think we handle your data wrongly, you can complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) or to the authority in your own country.

Questions about this policy or your data go to Stackwise OÜ, trading as larch, at nicholas@larch.ee. When the policy changes, the date at the top of this page changes with it.