DEMIEMAIL · LEGAL

Privacy Policy

Last updated: 2026-09-25

This notice explains how we handle personal information when you visit demiemail.com, contact DemiEmail, or discuss a project with us.

1. Who is responsible

Demi Solutions OÜ is the service provider and data controller for the activities described here. Registered in the Estonian Commercial Register, registry code 16776917. Address: Sepapaja tn 6, 15551 Tallinn, Estonia. Contact: info@demiemail.com.

This notice covers this website and our business enquiries. Separate products, including DemiSignal and UTMTool, have their own privacy notices. Processing customer data on a client’s instructions is covered by the applicable service agreement and data-processing terms.

2. Information and purposes

• Enquiries and project discussions: your name, business contact details, organisation, domain, messages and any attachments you choose to send. We use these to respond, assess the request, prepare a quote and manage the business relationship. This is necessary to take steps towards or perform a contract with you, or for our legitimate interests in handling business enquiries when you represent an organisation.
• Website delivery and security: our hosting provider processes technical connection information such as IP address, request time, requested URL and browser information. Our legitimate interests are delivering the website, diagnosing faults and preventing abuse.
• Contract and accounting records: where you become a customer, we use relevant business, billing and transaction details to administer the contract, meet legal obligations and establish or defend legal claims.

Providing information is voluntary. We may be unable to assess or carry out a request without the relevant contact and project details. Please do not send passwords, private keys or unnecessary personal information by email; we agree a suitable access method when work requires it.

3. Cookies and website features

Aggregate analytics: we automatically use PostHog to count page views and selected contact or product-link clicks. Each event has an independent random identifier used to process that event; it is not reused to identify a visitor or session. We send known page paths and the action taken. We do not send form contents, email addresses, query parameters, campaign codes or referring URLs. Contact-link clicks indicate interest, not whether you sent an email. Session replay, automatic interaction recording, advertising tracking and cross-site identification are disabled.

We do not create or store an analytics visitor or session identifier in your browser. Use Analytics settings below the footer to disable or enable collection for this browser. Only your preference is saved in local browser storage, and an opt-out does not expire automatically. An existing declined preference is respected. Disabling stops future collection; it does not erase events already collected. You can contact us about deletion or other privacy questions. The website remains available with analytics disabled.

Browser settings can also restrict storage or remove site data. Clearing site data removes a saved opt-out, so use Analytics settings again if you want collection to remain disabled. PostHog necessarily receives technical connection information when an event is delivered; we disable location enrichment and configure the project to discard IP data.

The website provides an email link rather than an enquiry form. Clicking it opens your chosen email application; information reaches us when you send your message.

Fonts and visual assets are served with the website. We do not use advertising trackers on this site. Hosting and security services may process connection data and use strictly necessary security mechanisms.

4. Who can receive information

Information is available to authorised people who need it to handle your enquiry or project. We use Cloudflare for website hosting and security, Google Workspace for business email and collaboration, and PostHog for aggregate website analytics. PostHog receives technical connection information as part of delivering its service; location enrichment is disabled. Relevant professional advisers, accounting providers and service contractors may receive information needed for their work, subject to appropriate confidentiality and data-protection obligations. We may also disclose information when required by law or necessary to protect legal rights.

These providers may process data outside the European Economic Area. Where required, transfers use an applicable adequacy decision or contractual safeguards such as the European Commission’s standard contractual clauses. You can contact us for information about the safeguards relevant to your data. Provider terms: Cloudflare data processing and Google Workspace data processing, and PostHog data processing.

5. How long information is kept

We keep enquiry correspondence while the enquiry and related follow-up remain relevant. Project records are retained for the engagement and any applicable contractual, accounting or legal retention period. When deciding whether information is still needed, we consider the status of the relationship, statutory record-keeping duties and any unresolved dispute or claim. Technical logs follow the provider’s applicable retention settings. Information that is no longer needed is deleted or anonymised, subject to backup and legal retention requirements.

6. Your rights

Subject to the conditions in data-protection law, you can ask to access, correct, erase or restrict use of your information, request portability, or object to processing based on legitimate interests. Where processing relies on consent, you can withdraw it without affecting processing already carried out. You may object to direct marketing at any time.

Contact info@demiemail.com to exercise your rights. We may need proportionate information to verify your identity. You can also complain to the Estonian Data Protection Inspectorate or your local supervisory authority. This website does not make automated decisions about you that have legal or similarly significant effects.

7. Changes

We update this notice when our processing changes. The date above identifies this version; material changes will be communicated where required.